Creating Device configuration snippets [CREATED] h1: initial,routing [CREATED] h2: initial,routing [CREATED] h3: initial,routing [CREATED] h4: initial,routing [CREATED] rtr: initial,vrf Config Deploying device configurations [INFO] Executing initial configuration for node h1 (namespace clab- ml-17-h1) [INFO] Executing initial configuration for node h2 (namespace clab- ml-17-h2) [INFO] Executing initial configuration for node h3 (namespace clab- ml-17-h3) [INFO] Executing initial configuration for node h4 (namespace clab- ml-17-h4) [INFO] Executing routing configuration for node h1 (namespace clab- ml-17-h1) [INFO] Executing routing configuration for node h2 (namespace clab- ml-17-h2) [INFO] Executing routing configuration for node h3 (namespace clab- ml-17-h3) [INFO] Executing routing configuration for node h4 (namespace clab- ml-17-h4) [INFO] Starting Ansible playbook to deploy the rest of the configurations [WARNING]: Found variable using reserved name: hosts PLAY [Deploy initial device configuration] ************************************* TASK [Set variables that cannot be set with VARS] ****************************** ok: [rtr] TASK [Normalize config on bridge-like devices] ********************************* included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-module.yml for rtr TASK [Figure out whether to deploy the module normalize on current device] ***** ok: [rtr] TASK [Find configuration template for normalize] ******************************* ok: [rtr] TASK [fail] ******************************************************************** skipping: [rtr] TASK [Find configuration deployment deploy_script for normalize] *************** ok: [rtr] TASK [Print deployed configuration when running in verbose mode] *************** skipping: [rtr] TASK [Deploy normalize configuration] ****************************************** skipping: [rtr] TASK [Deploy initial configuration] ******************************************** included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-module.yml for rtr TASK [Figure out whether to deploy the module initial on current device] ******* ok: [rtr] TASK [Find configuration template for initial] ********************************* ok: [rtr] TASK [fail] ******************************************************************** skipping: [rtr] TASK [Find configuration deployment deploy_script for initial] ***************** ok: [rtr] TASK [Print deployed configuration when running in verbose mode] *************** ok: [rtr] => { "msg": "initial configuration for rtr\n=========================================\n\nupdates:\n\n- path: /interface[name=system0]/subinterface[index=0]\n value:\n description: \"No description\"\n admin-state: enable\n ipv4:\n admin-state: enable\n address:\n - ip-prefix: \"10.0.0.5/32\"\n ipv6:\n admin-state: enable\n address:\n - ip-prefix: \"2001:db8:1:5::1/64\"\n type: \"global-unicast\"\n\n- path: /interface[name=ethernet-1/1]\n value:\n description: \"rtr ~ h1\"\n subinterface:\n index: 0\n description: \"rtr ~ h1\"\n\n- path: /interface[name=ethernet-1/1]/subinterface[index=0]\n value:\n description: \"rtr ~ h1\"\n admin-state: enable\n ipv4:\n admin-state: enable\n address:\n - ip-prefix: \"172.16.0.5/24\"\n primary: [null]\n ipv6:\n admin-state: enable\n address:\n - ip-prefix: \"2001:db8:2::5/64\"\n type: \"global-unicast\"\n neighbor-discovery:\n learn-unsolicited: link-local\n router-advertisement:\n router-role:\n admin-state: enable # no ipv6 nd suppress-ra\n min-advertisement-interval: 4 # Leaving this at platform default 200..600 takes too long at startup\n _annotate_min-advertisement-interval: \"Reduced from platform default 200s\"\n max-advertisement-interval: 5\n\n- path: /interface[name=ethernet-1/2]\n value:\n description: \"rtr ~ h3\"\n subinterface:\n index: 0\n description: \"rtr ~ h3\"\n\n- path: /interface[name=ethernet-1/2]/subinterface[index=0]\n value:\n description: \"rtr ~ h3\"\n admin-state: enable\n ipv4:\n admin-state: enable\n address:\n - ip-prefix: \"172.16.1.5/24\"\n primary: [null]\n ipv6:\n admin-state: enable\n address:\n - ip-prefix: \"2001:db8:2:1::5/64\"\n type: \"global-unicast\"\n neighbor-discovery:\n learn-unsolicited: link-local\n router-advertisement:\n router-role:\n admin-state: enable # no ipv6 nd suppress-ra\n min-advertisement-interval: 4 # Leaving this at platform default 200..600 takes too long at startup\n _annotate_min-advertisement-interval: \"Reduced from platform default 200s\"\n max-advertisement-interval: 5\n\n- path: /interface[name=ethernet-1/3]\n value:\n description: \"rtr ~ h2\"\n subinterface:\n index: 0\n description: \"rtr ~ h2\"\n\n- path: /interface[name=ethernet-1/3]/subinterface[index=0]\n value:\n description: \"rtr ~ h2\"\n admin-state: enable\n ipv4:\n admin-state: enable\n address:\n - ip-prefix: \"172.16.2.5/24\"\n primary: [null]\n ipv6:\n admin-state: enable\n address:\n - ip-prefix: \"2001:db8:2:2::5/64\"\n type: \"global-unicast\"\n neighbor-discovery:\n learn-unsolicited: link-local\n router-advertisement:\n router-role:\n admin-state: enable # no ipv6 nd suppress-ra\n min-advertisement-interval: 4 # Leaving this at platform default 200..600 takes too long at startup\n _annotate_min-advertisement-interval: \"Reduced from platform default 200s\"\n max-advertisement-interval: 5\n\n- path: /interface[name=ethernet-1/4]\n value:\n description: \"rtr ~ h4\"\n subinterface:\n index: 0\n description: \"rtr ~ h4\"\n\n- path: /interface[name=ethernet-1/4]/subinterface[index=0]\n value:\n description: \"rtr ~ h4\"\n admin-state: enable\n ipv4:\n admin-state: enable\n address:\n - ip-prefix: \"172.16.3.5/24\"\n primary: [null]\n ipv6:\n admin-state: enable\n address:\n - ip-prefix: \"2001:db8:2:3::5/64\"\n type: \"global-unicast\"\n neighbor-discovery:\n learn-unsolicited: link-local\n router-advertisement:\n router-role:\n admin-state: enable # no ipv6 nd suppress-ra\n min-advertisement-interval: 4 # Leaving this at platform default 200..600 takes too long at startup\n _annotate_min-advertisement-interval: \"Reduced from platform default 200s\"\n max-advertisement-interval: 5\n\n\n\n- path: /network-instance[name=default]\n value:\n type: default\n interface:\n - name: system0.0\n\n\n\n\n# TODO: vdata.rd, vdata.import/export, vdata.af\n- path: /network-instance[name=red]\n value:\n type: ip-vrf\n interface:\n - name: ethernet-1/1.0\n- path: /network-instance[name=red]\n value:\n type: ip-vrf\n interface:\n - name: ethernet-1/2.0\n\n\n\n# TODO: vdata.rd, vdata.import/export, vdata.af\n- path: /network-instance[name=blue]\n value:\n type: ip-vrf\n interface:\n - name: ethernet-1/3.0\n- path: /network-instance[name=blue]\n value:\n type: ip-vrf\n interface:\n - name: ethernet-1/4.0\n\n\n" } TASK [Deploy initial configuration] ******************************************** included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/srlinux.yml for rtr TASK [Generate JSON-RPC YAML configuration] ************************************ ok: [rtr] TASK [Update SRL initial node configuration (template=/work/netlab_cicd/node_files/rtr/initial)] *** changed: [rtr] TASK [debug] ******************************************************************* skipping: [rtr] PLAY [Deploy module-specific configurations] *********************************** TASK [Set variables that cannot be set with VARS] ****************************** ok: [rtr] TASK [Deploy individual configuration modules] ********************************* included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-module.yml for rtr => (item=vrf) included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-module.yml for rtr => (item=routing) TASK [Figure out whether to deploy the module vrf on current device] *********** ok: [rtr] TASK [Find configuration template for vrf] ************************************* ok: [rtr] TASK [fail] ******************************************************************** skipping: [rtr] TASK [Find configuration deployment deploy_script for vrf] ********************* ok: [rtr] TASK [Print deployed configuration when running in verbose mode] *************** ok: [rtr] => { "msg": "vrf configuration for rtr\n=========================================\n\nupdates:\n\n- path: /network-instance[name=red]\n value:\n type: ip-vrf\n\n\n- path: /routing-policy/community-set[name=C65000_1]\n value:\n member:\n - \"target:65000:1\" # Single member, else matching is AND\n\n- path: /routing-policy/community-set[name=red_export]\n value:\n member:\n - \"target:65000:1\"\n\n\n- path: /network-instance[name=red]/protocols/bgp-vpn\n value:\n bgp-instance:\n - id: 1\n route-distinguisher:\n rd: \"65000:1\"\n\n- path: /network-instance[name=red]/inter-instance-policies\n value:\n apply-policy:\n export-policy: \"red_vpn_export\"\n import-policy: \"red_vpn_import\"\n\n- path: /routing-policy/policy[name=red_vpn_export]\n value:\n default-action:\n policy-result: \"accept\"\n bgp:\n communities:\n add: \"red_export\"\n\n- path: /routing-policy/policy[name=red_vpn_import]\n value:\n default-action:\n policy-result: \"reject\"\n statement:\n - name: 11\n match:\n bgp:\n community-set: \"C65000_1\"\n action:\n policy-result: \"accept\"\n\n\n- path: /network-instance[name=blue]\n value:\n type: ip-vrf\n\n\n- path: /routing-policy/community-set[name=C65000_2]\n value:\n member:\n - \"target:65000:2\" # Single member, else matching is AND\n\n- path: /routing-policy/community-set[name=blue_export]\n value:\n member:\n - \"target:65000:2\"\n\n\n- path: /network-instance[name=blue]/protocols/bgp-vpn\n value:\n bgp-instance:\n - id: 1\n route-distinguisher:\n rd: \"65000:2\"\n\n- path: /network-instance[name=blue]/inter-instance-policies\n value:\n apply-policy:\n export-policy: \"blue_vpn_export\"\n import-policy: \"blue_vpn_import\"\n\n- path: /routing-policy/policy[name=blue_vpn_export]\n value:\n default-action:\n policy-result: \"accept\"\n bgp:\n communities:\n add: \"blue_export\"\n\n- path: /routing-policy/policy[name=blue_vpn_import]\n value:\n default-action:\n policy-result: \"reject\"\n statement:\n - name: 11\n match:\n bgp:\n community-set: \"C65000_2\"\n action:\n policy-result: \"accept\"\n\n" } TASK [Deploy vrf configuration] ************************************************ included: /home/pipi/net101/tools/netsim/ansible/tasks/deploy-config/srlinux.yml for rtr TASK [Generate JSON-RPC YAML configuration] ************************************ ok: [rtr] TASK [Update SRL vrf node configuration (template=/work/netlab_cicd/node_files/rtr/vrf)] *** changed: [rtr] TASK [debug] ******************************************************************* skipping: [rtr] TASK [Figure out whether to deploy the module routing on current device] ******* ok: [rtr] TASK [Find configuration template for routing] ********************************* skipping: [rtr] TASK [fail] ******************************************************************** skipping: [rtr] TASK [Find configuration deployment deploy_script for routing] ***************** skipping: [rtr] TASK [Print deployed configuration when running in verbose mode] *************** skipping: [rtr] TASK [Deploy routing configuration] ******************************************** skipping: [rtr] PLAY [Deploy custom deployment templates] ************************************** skipping: no hosts matched PLAY RECAP ********************************************************************* rtr : ok=24 changed=2 unreachable=0 failed=0 skipped=12 rescued=0 ignored=0 Results of configuration script deployments ================================================================================ h1 Script: initial,routing h2 Script: initial,routing h3 Script: initial,routing h4 Script: initial,routing The lab tests the basic VRF lite functionality in an IPv6-only environment. The device under test has two VRFs with two interfaces in each VRF. * h1 and h2 should be able to ping each other * h3 and h4 should be able to ping each other * h1 should not be able to reach h3