/home/pipi/.local/lib/python3.10/site-packages/paramiko/pkey.py:100: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.
  "cipher": algorithms.TripleDES,
/home/pipi/.local/lib/python3.10/site-packages/paramiko/transport.py:259: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0.
  "class": algorithms.TripleDES,
[WARNING]: Could not match supplied host pattern, ignoring: unprovisioned
[WARNING]: Found variable using reserved name: hosts

PLAY [Deploy initial device configuration] *************************************

TASK [Set variables that cannot be set with VARS] ******************************
ok: [dut]
ok: [c1]
ok: [pe2]

TASK [Find device readiness script] ********************************************
ok: [dut]
ok: [c1]
ok: [pe2]

TASK [Wait for device to become ready] *****************************************
skipping: [dut]
skipping: [c1]
skipping: [pe2]

TASK [Normalize config on bridge-like devices] *********************************
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-module.yml for dut, c1, pe2

TASK [Figure out whether to deploy the module normalize on current device] *****
ok: [dut]
ok: [c1]
ok: [pe2]

TASK [Find configuration template for normalize] *******************************
ok: [dut]
ok: [c1]
ok: [pe2]

TASK [fail] ********************************************************************
skipping: [dut]
skipping: [c1]
skipping: [pe2]

TASK [Find configuration deployment deploy_script for normalize] ***************
ok: [dut]
ok: [c1]
ok: [pe2]

TASK [Print deployed configuration when running in verbose mode] ***************
skipping: [dut]
skipping: [c1]
skipping: [pe2]

TASK [Deploy normalize configuration] ******************************************
skipping: [dut]
skipping: [c1]
skipping: [pe2]

TASK [Deploy initial configuration] ********************************************
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-module.yml for dut, c1, pe2

TASK [Figure out whether to deploy the module initial on current device] *******
ok: [dut]
ok: [c1]
ok: [pe2]

TASK [Find configuration template for initial] *********************************
ok: [dut]
ok: [c1]
ok: [pe2]

TASK [fail] ********************************************************************
skipping: [dut]
skipping: [c1]
skipping: [pe2]

TASK [Find configuration deployment deploy_script for initial] *****************
ok: [dut]
ok: [c1]
ok: [pe2]

TASK [Print deployed configuration when running in verbose mode] ***************
ok: [dut] => 
  msg: |-
    initial configuration for dut
    =========================================
  
    updates:
  
    - path: /interface[name=system0]/subinterface[index=0]
      value:
       description: "No description"
       ipv4:
        admin-state: enable
        address:
        - ip-prefix: "10.0.0.1/32"
       ipv6:
        admin-state: enable
        address:
        - ip-prefix: "2001:db8:1:1::1/64"
          type: "global-unicast"
  
    - path: /interface[name=ethernet-1/1]
      value:
       description: "dut ~ c1"
       subinterface:
        index: 0
        description: "dut ~ c1"
  
    - path: /interface[name=ethernet-1/1]/subinterface[index=0]
      value:
       description: "dut ~ c1"
       ipv4:
        admin-state: enable
        address:
        - ip-prefix: "10.1.0.2/30"
          primary: [null]
       ipv6:
        admin-state: enable
        address:
        - ip-prefix: "2001:db8:3::2/64"
          type: "global-unicast"
        neighbor-discovery:
         learn-unsolicited: link-local
        router-advertisement:
         router-role:
          admin-state: enable             # no ipv6 nd suppress-ra
          min-advertisement-interval: 4   # Leaving this at platform default 200..600 takes too long at startup
          _annotate_min-advertisement-interval: "Reduced from platform default 200s"
          max-advertisement-interval: 5
  
    - path: /interface[name=ethernet-1/2]
      value:
       description: "dut ~ stub"
       subinterface:
        index: 0
        description: "dut ~ stub"
  
    - path: /interface[name=ethernet-1/2]/subinterface[index=0]
      value:
       description: "dut ~ stub"
       ipv4:
        admin-state: enable
        address:
        - ip-prefix: "192.168.42.1/24"
          primary: [null]
       ipv6:
        admin-state: enable
        address:
        - ip-prefix: "2001:db8:42::1/64"
          type: "global-unicast"
        neighbor-discovery:
         learn-unsolicited: link-local
        router-advertisement:
         router-role:
          admin-state: enable             # no ipv6 nd suppress-ra
          min-advertisement-interval: 4   # Leaving this at platform default 200..600 takes too long at startup
          _annotate_min-advertisement-interval: "Reduced from platform default 200s"
          max-advertisement-interval: 5
  
    - path: /interface[name=lo0]
      value:
       description: "VRF Loopback tenant"
       subinterface:
        index: 1
        description: "VRF Loopback tenant"
  
    - path: /interface[name=lo0]/subinterface[index=1]
      value:
       description: "VRF Loopback tenant"
       ipv4:
        admin-state: enable
        address:
        - ip-prefix: "10.2.0.1/32"
          primary: [null]
       ipv6:
        admin-state: enable
        address:
        - ip-prefix: "2001:db8:4::1/64"
          type: "global-unicast"
        neighbor-discovery:
         learn-unsolicited: link-local
        router-advertisement:
         router-role:
          admin-state: enable             # no ipv6 nd suppress-ra
          min-advertisement-interval: 4   # Leaving this at platform default 200..600 takes too long at startup
          _annotate_min-advertisement-interval: "Reduced from platform default 200s"
          max-advertisement-interval: 5
  
  
  
    - path: /network-instance[name=default]
      value:
       type: default
       interface:
       - name: system0.0
  
  
  
  
    # TODO: vdata.rd, vdata.import/export, vdata.af
    - path: /network-instance[name=tenant]
      value:
       type: ip-vrf
       interface:
       - name: ethernet-1/1.0
    - path: /network-instance[name=tenant]
      value:
       type: ip-vrf
       interface:
       - name: ethernet-1/2.0
    - path: /network-instance[name=tenant]
      value:
       type: ip-vrf
       interface:
       - name: lo0.1
ok: [c1] => 
  msg: |-
    initial configuration for c1
    =========================================
    #!/bin/bash
    #
    set -e
    set -x
    #
    # Create bash profile script
    #
    cat <<SCRIPT >/root/.bash_profile
    #!/bin/bash
    #
    export PS1="\h(bash)# "
    echo
    echo "Use vtysh to connect to FRR daemon"
    echo
    SCRIPT
    #
    # This is an artifact of unknown provenance that should be removed in a year or two (= 2026/2027)
    #
    # FRR controls these parameters with 'ip forwarding' and 'ipv6 forwarding' commands
    #
    sysctl -w net.ipv4.ip_forward=1
    sysctl -w net.ipv6.conf.all.forwarding=1
    #
    #
    # Get the current next hop for the default route
    #
    def_nh=$(ip route list default|awk '{ print $3 }')
    #
    # Create the management VRF and add eth0 to it
    #
    if [ ! -e /sys/devices/virtual/net/mgmt ]; then
      ip link add mgmt type vrf table 42
    fi
    ip link set mgmt up
    sysctl -qw net.ipv6.conf.eth0.keep_addr_on_down=1
    ip link set eth0 master mgmt
    #
    # Reinstall the default route if we had it before
    #
    if [[ -n "$def_nh" ]]; then
      ip route add 0.0.0.0/0 vrf mgmt via $def_nh
    fi
    #
    # Enable FRR modules (if not using containerlab bind-mounted /etc/frr/daemons)
    #
  
    # Set system defaults
    #
    # Send ARP requests from a sane source IP address
    #
    sysctl -w net.ipv4.conf.all.arp_announce=2
  
    #
    # Create loopbacks, stub and lag/bond devices
    #
    if [ ! -e /sys/class/net/lo ]; then
      if [ ! -e /sys/devices/virtual/net/lo ]; then
        ip link add lo type dummy
        ip link set dev lo up
      fi
    fi
  
    # Disable IPv6 (for IPv4-only interfaces) or SLAAC (if the device is a router)
    #
    ip link set eth1 down
    sysctl -qw net.ipv6.conf.eth1.autoconf=0
    sysctl -qw net.ipv6.conf.eth1.accept_ra=0
    ip link set dev eth1 mtu 1500
    ip link set eth1 up
    ip link set eth2 down
    sysctl -qw net.ipv6.conf.eth2.autoconf=0
    sysctl -qw net.ipv6.conf.eth2.accept_ra=0
    ip link set dev eth2 mtu 1500
    ip link set eth2 up
  
    #
    # Add vtysh.conf file
    echo "service integrated-vtysh-config" >/etc/frr/vtysh.conf
  
    #
    # Rest of initial configuration done through VTYSH
    #
    cat >/tmp/config <<CONFIG
    hostname c1
    !
    ip forwarding
    ipv6 forwarding
    vrf mgmt
     exit-vrf
    !
    frr defaults datacenter
    !
    interface lo
     no shutdown
     ip address 10.0.0.2/32
     ipv6 address 2001:db8:1:2::1/64
    !
    interface eth1
     no shutdown
     description c1 -> dut
     ip address 10.1.0.1/30
     ipv6 address 2001:db8:3::1/64
     ipv6 nd ra-interval 5
     no ipv6 nd suppress-ra
    !
    interface eth2
     no shutdown
     description c1 -> pe2
     ip address 10.1.0.5/30
     ipv6 address 2001:db8:3:1::1/64
     ipv6 nd ra-interval 5
     no ipv6 nd suppress-ra
    !
    do write
    CONFIG
    vtysh -f /tmp/config
    exit 0
ok: [pe2] => 
  msg: |-
    initial configuration for pe2
    =========================================
    #!/bin/bash
    #
    set -e
    set -x
    #
    # Create bash profile script
    #
    cat <<SCRIPT >/root/.bash_profile
    #!/bin/bash
    #
    export PS1="\h(bash)# "
    echo
    echo "Use vtysh to connect to FRR daemon"
    echo
    SCRIPT
    #
    # This is an artifact of unknown provenance that should be removed in a year or two (= 2026/2027)
    #
    # FRR controls these parameters with 'ip forwarding' and 'ipv6 forwarding' commands
    #
    sysctl -w net.ipv4.ip_forward=1
    sysctl -w net.ipv6.conf.all.forwarding=1
    #
    #
    # Get the current next hop for the default route
    #
    def_nh=$(ip route list default|awk '{ print $3 }')
    #
    # Create the management VRF and add eth0 to it
    #
    if [ ! -e /sys/devices/virtual/net/mgmt ]; then
      ip link add mgmt type vrf table 42
    fi
    ip link set mgmt up
    sysctl -qw net.ipv6.conf.eth0.keep_addr_on_down=1
    ip link set eth0 master mgmt
    #
    # Reinstall the default route if we had it before
    #
    if [[ -n "$def_nh" ]]; then
      ip route add 0.0.0.0/0 vrf mgmt via $def_nh
    fi
    #
    # Enable FRR modules (if not using containerlab bind-mounted /etc/frr/daemons)
    #
  
    # Set system defaults
    #
    # Send ARP requests from a sane source IP address
    #
    sysctl -w net.ipv4.conf.all.arp_announce=2
  
    #
    # Create loopbacks, stub and lag/bond devices
    #
    if [ ! -e /sys/class/net/lo ]; then
      if [ ! -e /sys/devices/virtual/net/lo ]; then
        ip link add lo type dummy
        ip link set dev lo up
      fi
    fi
  
    # Disable IPv6 (for IPv4-only interfaces) or SLAAC (if the device is a router)
    #
    ip link set eth1 down
    sysctl -qw net.ipv6.conf.eth1.autoconf=0
    sysctl -qw net.ipv6.conf.eth1.accept_ra=0
    ip link set dev eth1 mtu 1500
    ip link set eth1 up
  
    #
    # Add vtysh.conf file
    echo "service integrated-vtysh-config" >/etc/frr/vtysh.conf
  
    #
    # Rest of initial configuration done through VTYSH
    #
    cat >/tmp/config <<CONFIG
    hostname pe2
    !
    ip forwarding
    ipv6 forwarding
    vrf mgmt
     exit-vrf
    !
    frr defaults datacenter
    !
    interface lo
     no shutdown
     ip address 10.0.0.3/32
     ipv6 address 2001:db8:1:3::1/64
    !
    interface eth1
     no shutdown
     description pe2 -> c1
     ip address 10.1.0.6/30
     ipv6 address 2001:db8:3:1::2/64
     ipv6 nd ra-interval 5
     no ipv6 nd suppress-ra
    !
    do write
    CONFIG
    vtysh -f /tmp/config
    exit 0

TASK [Deploy initial configuration] ********************************************
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/srlinux.yml for dut
included: /home/pipi/net101/tools/netsim/ansible/tasks/frr/initial-clab.yml for c1, pe2

TASK [Generate JSON-RPC YAML configuration] ************************************
ok: [dut]

TASK [Update SRL initial node configuration (template=/home/pipi/net101/tools/netsim/ansible/templates/initial/srlinux.j2)] ***
changed: [dut]

TASK [debug] *******************************************************************
skipping: [dut]

TASK [Attempt to load VRF kernel module] ***************************************
changed: [c1 -> localhost]

TASK [Disable FRR management VRF when modprobe fails] **************************
skipping: [c1]
skipping: [pe2]

TASK [include_tasks] ***********************************************************
included: /home/pipi/net101/tools/netsim/ansible/tasks/frr/deploy-config.yml for c1, pe2

TASK [template] ****************************************************************
changed: [c1]
changed: [pe2]

TASK [set_fact] ****************************************************************
ok: [c1]
ok: [pe2]

TASK [run /tmp/config.sh to deploy initial config from /home/pipi/net101/tools/netsim/ansible/templates/initial/frr.j2] ***
changed: [c1]
changed: [pe2]

TASK [run vtysh to import initial config from /home/pipi/net101/tools/netsim/ansible/templates/initial/frr.j2] ***
skipping: [c1]
skipping: [pe2]

PLAY [Deploy module-specific configurations] ***********************************

TASK [Set variables that cannot be set with VARS] ******************************
ok: [dut]
ok: [c1]
ok: [pe2]

TASK [Deploy individual configuration modules] *********************************
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-module.yml for dut, c1, pe2 => (item=ospf)
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-module.yml for dut, c1, pe2 => (item=bgp)
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-module.yml for dut, c1, pe2 => (item=vrf)

TASK [Figure out whether to deploy the module ospf on current device] **********
ok: [dut]
ok: [c1]
ok: [pe2]

TASK [Find configuration template for ospf] ************************************
ok: [dut]
ok: [c1]
ok: [pe2]

TASK [fail] ********************************************************************
skipping: [dut]
skipping: [c1]
skipping: [pe2]

TASK [Find configuration deployment deploy_script for ospf] ********************
ok: [dut]
ok: [pe2]
ok: [c1]

TASK [Print deployed configuration when running in verbose mode] ***************
ok: [dut] => 
  msg: |-
    ospf configuration for dut
    =========================================
    updates:
ok: [c1] => 
  msg: |-
    ospf configuration for c1
    =========================================
    !
    ! OSPFv2 FRR configuration
    !
    router ospf
     ospf router-id 10.0.0.2
     timers throttle spf 10 50 500
     timers throttle lsa all 100
     timers lsa min-arrival 100
  
  
    exit
    !
    interface lo
    !
     ip ospf area 0.0.0.0
    !
    interface eth1
    ! c1 -> dut
     ip ospf area 0.0.0.0
     ip ospf network point-to-point
    !
    interface eth2
    ! c1 -> pe2
     ip ospf area 0.0.0.0
     ip ospf network point-to-point
    !
  
    !
    ! OSPFv3 FRR configuration
    !
    interface lo
    !
     ipv6 ospf6 area 0.0.0.0
    !
    interface eth1
    ! c1 -> dut
     ipv6 ospf6 area 0.0.0.0
     ipv6 ospf6 network point-to-point
    !
    interface eth2
    ! c1 -> pe2
     ipv6 ospf6 area 0.0.0.0
     ipv6 ospf6 network point-to-point
    !
    !
    router ospf6
     ospf6 router-id 10.0.0.2
     timers lsa min-arrival 100
     timers throttle spf 10 50 500
  
  
    exit
  
    !
    do write
ok: [pe2] => 
  msg: |-
    ospf configuration for pe2
    =========================================
    !
    ! OSPFv2 FRR configuration
    !
    router ospf
     ospf router-id 10.0.0.3
     timers throttle spf 10 50 500
     timers throttle lsa all 100
     timers lsa min-arrival 100
  
  
    exit
    !
    interface lo
    !
     ip ospf area 0.0.0.0
    !
    interface eth1
    ! pe2 -> c1
     ip ospf area 0.0.0.0
     ip ospf network point-to-point
    !
  
    !
    ! OSPFv3 FRR configuration
    !
    interface lo
    !
     ipv6 ospf6 area 0.0.0.0
    !
    interface eth1
    ! pe2 -> c1
     ipv6 ospf6 area 0.0.0.0
     ipv6 ospf6 network point-to-point
    !
    !
    router ospf6
     ospf6 router-id 10.0.0.3
     timers lsa min-arrival 100
     timers throttle spf 10 50 500
  
  
    exit
  
    !
    do write

TASK [Deploy ospf configuration] ***********************************************
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/srlinux.yml for dut
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/frr.yml for c1, pe2

TASK [Generate JSON-RPC YAML configuration] ************************************
ok: [dut]

TASK [Update SRL ospf node configuration (template=/home/pipi/net101/tools/netsim/ansible/templates/ospf/srlinux.j2)] ***
skipping: [dut]

TASK [debug] *******************************************************************
skipping: [dut]

TASK [template] ****************************************************************
changed: [pe2]
changed: [c1]

TASK [set_fact] ****************************************************************
ok: [c1]
ok: [pe2]

TASK [run /tmp/config.sh to deploy ospf config from /home/pipi/net101/tools/netsim/ansible/templates/ospf/frr.j2] ***
skipping: [c1]
skipping: [pe2]

TASK [run vtysh to import ospf config from /home/pipi/net101/tools/netsim/ansible/templates/ospf/frr.j2] ***
changed: [pe2]
changed: [c1]

TASK [Figure out whether to deploy the module bgp on current device] ***********
ok: [dut]
ok: [c1]
ok: [pe2]

TASK [Find configuration template for bgp] *************************************
skipping: [c1]
ok: [dut]
ok: [pe2]

TASK [fail] ********************************************************************
skipping: [dut]
skipping: [c1]
skipping: [pe2]

TASK [Find configuration deployment deploy_script for bgp] *********************
skipping: [c1]
ok: [dut]
ok: [pe2]

TASK [Print deployed configuration when running in verbose mode] ***************
skipping: [c1]
ok: [pe2] => 
  msg: |-
    bgp configuration for pe2
    =========================================
    !
    router bgp 65101
      no bgp ebgp-requires-policy
      no bgp default ipv4-unicast
      bgp default show-hostname
      bgp default show-nexthop-hostname
      ! Consider AS paths of same length but with different AS as ECMP candidates
      bgp bestpath as-path multipath-relax
  
      bgp router-id 10.0.0.3
    !
      neighbor 10.2.0.1 remote-as 65000
      neighbor 10.2.0.1 description dut
      neighbor 10.2.0.1 update-source lo
    !
      neighbor 2001:db8:4::1 remote-as 65000
      neighbor 2001:db8:4::1 description dut
      neighbor 2001:db8:4::1 update-source lo
    !
     address-family ipv4 unicast
    !
  
    !
      network 10.0.0.3/32
    !
    !
    !
      neighbor 10.2.0.1 activate
      no neighbor 10.2.0.1 send-community all
      neighbor 10.2.0.1 send-community standard
      neighbor 10.2.0.1 send-community large
    !
     address-family ipv6 unicast
    !
  
    !
      network 2001:db8:1:3::/64
    !
    !
    !
      neighbor 2001:db8:4::1 activate
      no neighbor 2001:db8:4::1 send-community all
      neighbor 2001:db8:4::1 send-community standard
      neighbor 2001:db8:4::1 send-community large
    !
    !
    !
    do write
ok: [dut] => 
  msg: |-
    bgp configuration for dut
    =========================================
    updates:
  
    - path: /routing-policy/policy[name=accept_all]
      value:
        default-action:
          policy-result: accept
  
    - path: /routing-policy/community-set[name=ibgp-mark]
      value:
        member: [ "65536:0:65536" ]
  
    - path: /routing-policy/policy[name=ibgp-mark]
      value:
        default-action:
          policy-result: reject
        statement:
        - name: mark-ibgp-routes
          action:
            bgp:
              communities:
                add: ibgp-mark
            policy-result: accept
  
    - path: /routing-policy/prefix-set[name=default_bgp_advertise]
      value:
        prefix: [] # Make sure it exists
  
    - path: /routing-policy/policy[name=default_bgp_export]
      value:
        default-action:
          policy-result: reject
        statement:
        - name: prefixes
          match:
           prefix:
            prefix-set: default_bgp_advertise
          action:
            policy-result: next-policy
        - name: bgp
          match:
            protocol: bgp
          action:
            policy-result: next-policy
            bgp:
              communities:
                remove:
                  ibgp-mark
  
  
    - path: /network-instance[name=default]/protocols/bgp
      value:
        admin-state: enable
        autonomous-system: 65000
        router-id: 10.0.0.1
        ebgp-default-policy:
          export-reject-all: False
          import-reject-all: False
  
        afi-safi:
        - afi-safi-name: ipv4-unicast
          admin-state: enable
        afi-safi:
        - afi-safi-name: ipv6-unicast
          admin-state: enable
  
    - path: /routing-policy/prefix-set[name=default_bgp_advertise]
      value:
        prefix:
        - ip-prefix: 10.0.0.1/32
          mask-length-range: exact
  
  
  
    - path: /routing-policy/prefix-set[name=default_bgp_advertise]
      value:
        prefix:
        - ip-prefix: 2001:db8:1:1::/64
          mask-length-range: exact

TASK [Deploy bgp configuration] ************************************************
skipping: [c1]
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/srlinux.yml for dut
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/frr.yml for pe2

TASK [Generate JSON-RPC YAML configuration] ************************************
ok: [dut]

TASK [Update SRL bgp node configuration (template=/home/pipi/net101/tools/netsim/ansible/templates/bgp/srlinux.j2)] ***
changed: [dut]

TASK [debug] *******************************************************************
skipping: [dut]

TASK [template] ****************************************************************
changed: [pe2]

TASK [set_fact] ****************************************************************
ok: [pe2]

TASK [run /tmp/config.sh to deploy bgp config from /home/pipi/net101/tools/netsim/ansible/templates/bgp/frr.j2] ***
skipping: [pe2]

TASK [run vtysh to import bgp config from /home/pipi/net101/tools/netsim/ansible/templates/bgp/frr.j2] ***
changed: [pe2]

TASK [Figure out whether to deploy the module vrf on current device] ***********
ok: [dut]
ok: [c1]
ok: [pe2]

TASK [Find configuration template for vrf] *************************************
skipping: [c1]
ok: [dut]
skipping: [pe2]

TASK [fail] ********************************************************************
skipping: [dut]
skipping: [c1]
skipping: [pe2]

TASK [Find configuration deployment deploy_script for vrf] *********************
skipping: [c1]
skipping: [pe2]
ok: [dut]

TASK [Print deployed configuration when running in verbose mode] ***************
skipping: [c1]
skipping: [pe2]
ok: [dut] => 
  msg: |-
    vrf configuration for dut
    =========================================
  
    updates:
  
    - path: /network-instance[name=tenant]
      value:
       type: ip-vrf
  
    - path: /routing-policy/policy[name=tenant_export_ospf]
      value:
        default-action:
          policy-result: reject
        statement:
        - name: export_bgp
          match:
            protocol: bgp
          action:
            policy-result: accept
        - name: export_local
          match:
            protocol: local
          action:
            policy-result: accept
  
  
    - path: /network-instance[name=tenant]
      value:
        router-id: 10.0.0.1
        protocols:
          ospf:
            instance:
            - name: "0"
              version: ospf-v2
              admin-state: enable
              max-ecmp-paths: 64
              asbr: {}
              export-policy: "tenant_export_ospf"
              area:
              - area-id: 0.0.0.0
                interface:
                - interface-name: ethernet-1/1.0
                  interface-type: "point-to-point"
                  failure-detection:
                    enable-bfd: False
              - area-id: 0.0.0.0
                interface:
                - interface-name: ethernet-1/2.0
                  passive: True
                  failure-detection:
                    enable-bfd: False
              - area-id: 0.0.0.0
                interface:
                - interface-name: lo0.1
                  failure-detection:
                    enable-bfd: False
  
    - path: /routing-policy/policy[name=tenant_export_ospf]
      value:
        default-action:
          policy-result: reject
        statement:
        - name: export_bgp
          match:
            protocol: bgp
          action:
            policy-result: accept
        - name: export_local
          match:
            protocol: local
          action:
            policy-result: accept
  
  
    - path: /network-instance[name=tenant]
      value:
        router-id: 10.0.0.1
        protocols:
          ospf:
            instance:
            - name: "1"
              version: ospf-v3
              address-family: ipv6-unicast
              admin-state: enable
              max-ecmp-paths: 64
              asbr: {}
              export-policy: "tenant_export_ospf"
              area:
              - area-id: 0.0.0.0
                interface:
                - interface-name: ethernet-1/1.0
                  interface-type: "point-to-point"
                  failure-detection:
                    enable-bfd: False
              - area-id: 0.0.0.0
                interface:
                - interface-name: ethernet-1/2.0
                  passive: True
                  failure-detection:
                    enable-bfd: False
              - area-id: 0.0.0.0
                interface:
                - interface-name: lo0.1
                  failure-detection:
                    enable-bfd: False
  
  
    - path: /routing-policy/community-set[name=C65000_1]
      value:
       member:
       - "target:65000:1" # Single member, else matching is AND
  
    - path: /routing-policy/community-set[name=tenant_export]
      value:
       member:
       - "target:65000:1"
  
  
    - path: /routing-policy/policy[name=tenant_bgp_export]
      value:
        default-action:
          policy-result: reject
        statement:
        - name: bgp
          match:
            protocol: bgp
          action:
            policy-result: next-policy
            bgp:
              communities:
                remove:
                  ibgp-mark
        - name: export_local
          match:
            protocol: local
          action:
            policy-result: next-policy
        - name: export_ospfv2
          match:
            protocol: ospfv2
          action:
            policy-result: next-policy
        - name: export_ospfv3
          match:
            protocol: ospfv3
          action:
            policy-result: next-policy
  
  
    - path: /network-instance[name=tenant]/protocols/bgp
      value:
        admin-state: enable
        autonomous-system: 65000
        router-id: 10.0.0.1
        ebgp-default-policy:
          export-reject-all: False
          import-reject-all: False
  
        afi-safi:
        - afi-safi-name: ipv4-unicast
          admin-state: enable
        afi-safi:
        - afi-safi-name: ipv6-unicast
          admin-state: enable
  
  
    - path: /routing-policy/prefix-set[name=tenant_bgp_advertise]
      value:
        prefix:
        - ip-prefix: 192.168.42.0/24
          mask-length-range: exact
  
    - path: /routing-policy/prefix-set[name=tenant_bgp_advertise]
      value:
        prefix:
        - ip-prefix: 10.2.0.1/32
          mask-length-range: exact
  
  
  
    - path: /routing-policy/prefix-set[name=tenant_bgp_advertise]
      value:
        prefix:
        - ip-prefix: 2001:db8:42::/64
          mask-length-range: exact
  
    - path: /routing-policy/prefix-set[name=tenant_bgp_advertise]
      value:
        prefix:
        - ip-prefix: 2001:db8:4::/64
          mask-length-range: exact
  
  
  
  
    - path: /network-instance[name=tenant]/protocols/bgp/group[group-name=ebgp]
      value:
        admin-state: enable
    # neighbor: {'multihop': 255, 'ifindex': 20000, 'name': 'pe2', 'as': 65101, 'type': 'ebgp', 'ipv4': '10.0.0.3', 'ipv6': '2001:db8:1:3::1', 'activate': {'ipv4': True, 'ipv6': True}, '_src_vrf': 'tenant', '_source_intf': {'type': 'loopback', 'name': 'VRF Loopback tenant', 'neighbors': [], 'vrf': 'tenant', 'virtual_interface': True, 'ifindex': 10001, 'ifname': 'lo0.1', 'ipv4': '10.2.0.1/32', 'ipv6': '2001:db8:4::1/64', 'bgp': {'advertise': True}}}
    # ipv4: True
    # ipv6: True
        afi-safi:
        - afi-safi-name: ipv4-unicast
          admin-state: enable
          send-community-type: ['standard', 'large']
  
          import-policy: ['accept_all']
          export-policy: ['tenant_bgp_export', 'accept_all']
        - afi-safi-name: ipv6-unicast
          admin-state: enable
          send-community-type: ['standard', 'large']
  
          import-policy: ['accept_all']
          export-policy: ['tenant_bgp_export', 'accept_all']
  
        timers:
          connect-retry: 10
          _annotate_connect-retry: "Reduce default 120s to 10s"
          minimum-advertisement-interval: 1
  
  
    - path: /network-instance[name=tenant]/protocols/bgp
      value:
        neighbor:
        - peer-address: "10.0.0.3"
          description: pe2
          peer-group: ebgp
      # neighbor: {'multihop': 255, 'ifindex': 20000, 'name': 'pe2', 'as': 65101, 'type': 'ebgp', 'ipv4': '10.0.0.3', 'ipv6': '2001:db8:1:3::1', 'activate': {'ipv4': True, 'ipv6': True}, '_src_vrf': 'tenant', '_source_intf': {'type': 'loopback', 'name': 'VRF Loopback tenant', 'neighbors': [], 'vrf': 'tenant', 'virtual_interface': True, 'ifindex': 10001, 'ifname': 'lo0.1', 'ipv4': '10.2.0.1/32', 'ipv6': '2001:db8:4::1/64', 'bgp': {'advertise': True}}}
      # ipv4: True
      # ipv6: False
          afi-safi:
          - afi-safi-name: ipv4-unicast
            admin-state: enable
            send-community-type: ['standard', 'large']
  
          - afi-safi-name: ipv6-unicast
            admin-state: disable
  
          peer-as: 65101
  
    - path: /network-instance[name=tenant]/protocols/bgp/group[group-name=ebgp]
      value:
        admin-state: enable
    # neighbor: {'multihop': 255, 'ifindex': 20000, 'name': 'pe2', 'as': 65101, 'type': 'ebgp', 'ipv4': '10.0.0.3', 'ipv6': '2001:db8:1:3::1', 'activate': {'ipv4': True, 'ipv6': True}, '_src_vrf': 'tenant', '_source_intf': {'type': 'loopback', 'name': 'VRF Loopback tenant', 'neighbors': [], 'vrf': 'tenant', 'virtual_interface': True, 'ifindex': 10001, 'ifname': 'lo0.1', 'ipv4': '10.2.0.1/32', 'ipv6': '2001:db8:4::1/64', 'bgp': {'advertise': True}}}
    # ipv4: True
    # ipv6: True
        afi-safi:
        - afi-safi-name: ipv4-unicast
          admin-state: enable
          send-community-type: ['standard', 'large']
  
          import-policy: ['accept_all']
          export-policy: ['tenant_bgp_export', 'accept_all']
        - afi-safi-name: ipv6-unicast
          admin-state: enable
          send-community-type: ['standard', 'large']
  
          import-policy: ['accept_all']
          export-policy: ['tenant_bgp_export', 'accept_all']
  
        timers:
          connect-retry: 10
          _annotate_connect-retry: "Reduce default 120s to 10s"
          minimum-advertisement-interval: 1
  
  
    - path: /network-instance[name=tenant]/protocols/bgp
      value:
        neighbor:
        - peer-address: "2001:db8:1:3::1"
          description: pe2
          peer-group: ebgp
      # neighbor: {'multihop': 255, 'ifindex': 20000, 'name': 'pe2', 'as': 65101, 'type': 'ebgp', 'ipv4': '10.0.0.3', 'ipv6': '2001:db8:1:3::1', 'activate': {'ipv4': True, 'ipv6': True}, '_src_vrf': 'tenant', '_source_intf': {'type': 'loopback', 'name': 'VRF Loopback tenant', 'neighbors': [], 'vrf': 'tenant', 'virtual_interface': True, 'ifindex': 10001, 'ifname': 'lo0.1', 'ipv4': '10.2.0.1/32', 'ipv6': '2001:db8:4::1/64', 'bgp': {'advertise': True}}}
      # ipv4: False
      # ipv6: True
          afi-safi:
          - afi-safi-name: ipv4-unicast
            admin-state: disable
          - afi-safi-name: ipv6-unicast
            admin-state: enable
            send-community-type: ['standard', 'large']
  
  
          peer-as: 65101
  
  
  
  
    - path: /network-instance[name=tenant]/protocols/bgp-vpn
      value:
       bgp-instance:
       - id: 1
         route-distinguisher:
          rd: "65000:1"
  
    - path: /network-instance[name=tenant]/inter-instance-policies
      value:
       apply-policy:
        export-policy: "tenant_vpn_export"
        import-policy: "tenant_vpn_import"
  
    - path: /routing-policy/policy[name=tenant_vpn_export]
      value:
       default-action:
        policy-result: "accept"
        bgp:
         communities:
          add: "tenant_export"
  
    - path: /routing-policy/policy[name=tenant_vpn_import]
      value:
       default-action:
        policy-result: "reject"
       statement:
       - name: 11
         match:
          bgp:
           community-set: "C65000_1"
         action:
          policy-result: "accept"

TASK [Deploy vrf configuration] ************************************************
skipping: [c1]
skipping: [pe2]
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/srlinux.yml for dut

TASK [Generate JSON-RPC YAML configuration] ************************************
ok: [dut]

TASK [Update SRL vrf node configuration (template=/home/pipi/net101/tools/netsim/ansible/templates/vrf/srlinux.j2)] ***
changed: [dut]

TASK [debug] *******************************************************************
skipping: [dut]

PLAY [Deploy custom deployment templates] **************************************

TASK [Run custom configuration deployment scripts] *****************************
skipping: [dut] => (item=bgp.session) 
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-custom-config.yml for dut, pe2 => (item=ebgp.multihop)
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-custom-config.yml for pe2 => (item=bgp.session)

TASK [Find configuration template] *********************************************
ok: [dut]
ok: [pe2]

TASK [fail] ********************************************************************
skipping: [dut]
skipping: [pe2]

TASK [Check is the configuration template is a file] ***************************
ok: [pe2 -> localhost]
ok: [dut -> localhost]

TASK [fail] ********************************************************************
skipping: [dut]
skipping: [pe2]

TASK [Process template /home/pipi/net101/tools/netsim/extra/ebgp.multihop/srlinux.j2 for dut] ***
skipping: [pe2]
skipping: [dut]

TASK [Find custom configuration deployment script] *****************************
ok: [dut]
ok: [pe2]

TASK [Run the configuration deployment script] *********************************
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/srlinux.yml for dut
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/frr.yml for pe2

TASK [Generate JSON-RPC YAML configuration] ************************************
ok: [dut]

TASK [Update SRL ebgp.multihop node configuration (template=/home/pipi/net101/tools/netsim/extra/ebgp.multihop/srlinux.j2)] ***
changed: [dut]

TASK [debug] *******************************************************************
skipping: [dut]

TASK [template] ****************************************************************
changed: [pe2]

TASK [set_fact] ****************************************************************
ok: [pe2]

TASK [run /tmp/config.sh to deploy ebgp.multihop config from /home/pipi/net101/tools/netsim/extra/ebgp.multihop/frr.j2] ***
skipping: [pe2]

TASK [run vtysh to import ebgp.multihop config from /home/pipi/net101/tools/netsim/extra/ebgp.multihop/frr.j2] ***
changed: [pe2]

TASK [Find configuration template] *********************************************
ok: [pe2]

TASK [fail] ********************************************************************
skipping: [pe2]

TASK [Check is the configuration template is a file] ***************************
ok: [pe2 -> localhost]

TASK [fail] ********************************************************************
skipping: [pe2]

TASK [Process template /home/pipi/net101/tools/netsim/extra/bgp.session/frr.j2 for pe2] ***
skipping: [pe2]

TASK [Find custom configuration deployment script] *****************************
ok: [pe2]

TASK [Run the configuration deployment script] *********************************
included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/frr.yml for pe2

TASK [template] ****************************************************************
changed: [pe2]

TASK [set_fact] ****************************************************************
ok: [pe2]

TASK [run /tmp/config.sh to deploy bgp.session config from /home/pipi/net101/tools/netsim/extra/bgp.session/frr.j2] ***
changed: [pe2]

TASK [run vtysh to import bgp.session config from /home/pipi/net101/tools/netsim/extra/bgp.session/frr.j2] ***
skipping: [pe2]

PLAY RECAP *********************************************************************
c1                         : ok=31   changed=5    unreachable=0    failed=0    skipped=19   rescued=0    ignored=0   
dut                        : ok=45   changed=4    unreachable=0    failed=0    skipped=17   rescued=0    ignored=0   
pe2                        : ok=53   changed=10   unreachable=0    failed=0    skipped=24   rescued=0    ignored=0   



Use this topology to test the VRF EBGP multihop implementation