diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/host1.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/host1.md index 871f9fe039b..1f28172c44b 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/host1.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/host1.md @@ -11,6 +11,12 @@ - [System Control-Plane](#system-control-plane) - [Management SSH](#management-ssh) - [Management Tech-Support](#management-tech-support) + - [Management Accounts](#management-accounts) + - [Management API gNMI](#management-api-gnmi) + - [Management CVX Summary](#management-cvx-summary) + - [Management Console](#management-console) + - [Management API HTTP](#management-api-http) + - [Management API Models](#management-api-models) - [CVX](#cvx) - [CVX Services](#cvx-services) - [CVX Device Configuration](#cvx-device-configuration) @@ -18,6 +24,7 @@ - [Local Users](#local-users) - [Roles](#roles) - [Enable Password](#enable-password) + - [Management defaults](#management-defaults) - [TACACS Servers](#tacacs-servers) - [IP TACACS Source Interfaces](#ip-tacacs-source-interfaces) - [RADIUS Server](#radius-server) @@ -248,22 +255,45 @@ agent KernelFib environment KERNELFIB_PROGRAM_ALL_ECMP=true | Management Interface | Description | Type | VRF | IP Address | Gateway | | -------------------- | ----------- | ---- | --- | ---------- | ------- | +| Management0 | - | oob | default | 10.0.0.0 | - | | Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | +| Management42 | - | oob | default | - | - | +| Vlan123 | inband_management | inband | default | 10.73.0.123/24 | 10.73.0.1 | ##### IPv6 | Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | | -------------------- | ----------- | ---- | --- | ------------ | ------------ | +| Management0 | - | oob | default | - | - | | Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | +| Management42 | - | oob | default | - | - | +| Vlan123 | inband_management | inband | default | - | - | #### Management Interfaces Device Configuration ```eos ! +interface Management0 + mac-address 00:1c:73:00:00:aa + ip address 10.0.0.0 +! interface Management1 description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 +! +interface Management42 + shutdown + speed forced 1000full + no lldp transmit + no lldp receive + lldp tlv transmit ztp vlan 666 +! +interface Vlan123 + description inband_management + mtu 1500 + ip address 10.73.0.123/24 + ip virtual-router address 10.73.0.1 ``` ### IP Domain-list @@ -494,6 +524,265 @@ management tech-support exit ``` +### Management Accounts + +#### Password Policy + +The password policy set for management accounts is: AVD_POLICY + +#### Management Accounts Device Configuration + +```eos +! +management accounts + password policy AVD_POLICY +``` + +### Management API gNMI + +#### Management API gNMI Summary + +| Transport | SSL Profile | VRF | Notification Timestamp | ACL | Port | +| --------- | ----------- | --- | ---------------------- | --- | ---- | +| MGMT | gnmi | MGMT | send-time | acl1 | 6030 | +| mytransport | - | - | send-time | acl1 | 6032 | + +| Transport | Destination | Destination Port | gNMI SSL Profile | Tunnel SSL Profile | VRF | Local Interface | Local Port | Target ID | +| --------- | ----------- | ---------------- | ---------------- | ------------------ | --- | --------------- | ---------- | --------- | +| onetarget | 10.1.1.100 | 10000 | ssl_profile | ssl_profile | management | Management1 | 10001 | testid100 | +| multipletargets | 10.1.1.100 | 10000 | ssl_profile | ssl_profile | management | Management1 | 10001 | testid1 testid2 testid3 testid4 | +| serialandtargets | 10.1.1.100 | 10000 | ssl_profile | ssl_profile | management | Management1 | 10001 | Serial-Number testid10 testid20 | +| noserialnotargets | - | - | - | - | - | - | - | | +| serialonly | - | - | - | - | - | - | - | Serial-Number | + +Provider eos-native is configured. + +#### Management API gNMI Device Configuration + +```eos +! +management api gnmi + transport grpc MGMT + ssl profile gnmi + vrf MGMT + ip access-group acl1 + notification timestamp send-time + ! + transport grpc mytransport + port 6032 + ip access-group acl1 + notification timestamp send-time + ! + transport grpc-tunnel multipletargets + no shutdown + vrf management + tunnel ssl profile ssl_profile + gnmi ssl profile ssl_profile + destination 10.1.1.100 port 10000 + local interface Management1 port 10001 + target testid1 testid2 testid3 testid4 + ! + transport grpc-tunnel noserialnotargets + ! + transport grpc-tunnel onetarget + shutdown + vrf management + tunnel ssl profile ssl_profile + gnmi ssl profile ssl_profile + destination 10.1.1.100 port 10000 + local interface Management1 port 10001 + target testid100 + ! + transport grpc-tunnel serialandtargets + no shutdown + vrf management + tunnel ssl profile ssl_profile + gnmi ssl profile ssl_profile + destination 10.1.1.100 port 10000 + local interface Management1 port 10001 + target serial-number testid10 testid20 + ! + transport grpc-tunnel serialonly + target serial-number + provider eos-native +``` + +### Management CVX Summary + +| Shutdown | CVX Servers | +| -------- | ----------- | +| False | 10.90.224.188, 10.90.224.189, leaf1.atd.lab | + +#### Management CVX Source Interface + +| Interface | VRF | +| --------- | --- | +| Loopback0 | MGMT | + +#### Management CVX Device Configuration + +```eos +! +management cvx + no shutdown + server host 10.90.224.188 + server host 10.90.224.189 + server host leaf1.atd.lab + source-interface Loopback0 + vrf MGMT +``` + +### Management Console + +#### Management Console Timeout + +Management Console Timeout is set to **15** minutes. + +#### Management Console Device Configuration + +```eos +! +management console + idle-timeout 15 +``` + +### Management API HTTP + +#### Management API HTTP Summary + +| HTTP | HTTPS | Default Services | +| ---- | ----- | ---------------- | +| False | True | True | + +Management HTTPS is using the SSL profile SSL_PROFILE + +#### Management API VRF Access + +| VRF Name | IPv4 ACL | IPv6 ACL | +| -------- | -------- | -------- | +| default | ACL-API | ACL-API6 | +| MGMT | ACL-API | - | + +HTTPS certificate and private key are configured. + +#### Management API HTTP Device Configuration + +```eos +! +management api http-commands + protocol https + no protocol http + default-services + protocol https ssl profile SSL_PROFILE + no shutdown + ! + vrf default + no shutdown + ip access-group ACL-API + ipv6 access-group ACL-API6 + ! + vrf MGMT + no shutdown + ip access-group ACL-API + protocol https certificate +'\n-----BEGIN CERTIFICATE-----\nMIIFNjCCAx4CCQCVGSFu9M4dNDANBgkqhkiG9w0BAQsFADBdMQswCQ +YDVQQGEwJD\nQTELMAkGA1UECAwCQkMxEjAQBgNVBAcMCVZhbmNvdXZlcjEPMA0GA1UECgwGQXJp\nc3RhMQwwC +gYDVQQLDANBVkQxDjAMBgNVBAMMBWhvc3QxMB4XDTI0MTExMzE3NTAw\nN1oXDTM0MTExMTE3NTAwN1owXTELMA +kGA1UEBhMCQ0ExCzAJBgNVBAgMAkJDMRIw\nEAYDVQQHDAlWYW5jb3V2ZXIxDzANBgNVBAoMBkFyaXN0YTEMMAo +GA1UECwwDQVZE\nMQ4wDAYDVQQDDAVob3N0MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB\nAJz2e +UVD/4u+nmz0Ak6QJqPrQSJ6spZtxnfgSD3ETGhWgVO+aV7UbnpCAvKB+G7B\nX3WEHl2zphFE+O4HhRCBiDFB9 +LXZ2fiiBKcPmFMuJChL15wLaa5yP99trMX3wxSL\nZIFKVmD5kxjtqZOjst+dPDm1v4KIXZxCuMhu8hpviZLhL +Gq+eFlYV4scIMgOSuOo\n8HBoqGkHmmOJmO+KlaLdXPQcqOqJIjwL++ZjP46eHa9fyaea1ZqmYC11syNTesVS +\n4G7v4fvd+rFi+ZAWu5Iuv6vbllLKqwHOiMcQ+Y4IbzDaqCk5VBh0PnxI+PWGDeUl\nlx83p3+o0zi7HHeI9 +uTumRV8b7sc++9qaaPDtzD4wzJFwVJWIiHjdfCTQ0mRraz6\nuYbk2Kwo7rjmOQnby3K4+Lx+eylihzc3bWsDe9 +6YUYVRi7Xsg56lz+SPSlxvBUjL\nuQ6TQHMgg7/AMrwnHVcgvJozM7eDGnwt6eYxoJZGiw+W60KjQcxlV4tt5HC +iGHIO\npCajVDjeN3quBCpCOlTCCoPQXjFB14EJagjS5QzFeRwrZcegKFKx61jClp0L4X8t\nEgCuTRlQtMdwvx +4sBKqND+RqE9YlC2ktQHpOyRtKlj3fZ1behzrO50rtKDZzrqOS\n/PpifGh3ZcJDsO3qt9xq3kUJm8rHKDuGgtE +yXGkXUd7RAgMBAAEwDQYJKoZIhvcN\nAQELBQADggIBAH0vpyvehlfjKmMMv5S05ruEW1La0+m2CypdxvgQ9IGH +FnsUqSzl\nhMsR5mISyhfaHSlYTE8YxiSoHUL7lMsIi6G+tEXglad3KJEpqVi2tg9GbteaBONN\nP7mjnDnHRhV +xodSUVOJvZmtGFv7lKRvGXYgwwCHq93Z3iyXvkFMNO6aYU3ghwYci\n1gMRXsWG/K8r4TzAC87RBTSXaFEIvrVY +NwhL61fRPvIvFzdf5I0Zi7LSKRDZ6Ks/\nAwMOQaTwF9W0a/dBc4twbmbajcTbXDcUA/Jxr97XrtlNioHe3itlwJ +aQ2LgSkfM9\nh5CJ+wcCmWLanHpeCoXu6kj17mZScfxHmHyuNXugq8Ryj23qndN37ZDADh0rqRKm\nXxVai6s0K +BZENiUiastKolA3CL27/312Wv5cPSi66NDdrNqwDZVS0d5QZd3Motni\n1aX/+GmOURX5O3xDMJZTx/lP2zRwId +fwEgBntBSipzmv73y5aMJqUCl3w980pLTj\nkc6u4R7x93bWtRedCtL8SroKgg3iSP+MNvjh7GRVrisKi1mHq37 +xBFbfcKWQ8Fux\nxak6B5u7Dkwio2KGtQAzUTw8GNrG8ix6wYbCxRTorl0qtxWKqB1sqPkxVmo73PkO\nsVbhuz +XgHBzA4RNdl/qmwSKlL7pKfpQUm3jSzewJm224QTYODTF8KRpf\n-----END CERTIFICATE-----' +EOF +'\n-----BEGIN PRIVATE KEY-----\nMIIJQgIBADANBgkqhkiG9w0BAQEFAASCCSwwggkoAgEAAoICAQCc9nlF +Q/+Lvp5s\n9AJOkCaj60EierKWbcZ34Eg9xExoVoFTvmle1G56QgLygfhuwV91hB5ds6YRRPju\nB4UQgYgxQfS1 +2dn4ogSnD5hTLiQoS9ecC2mucj/fbazF98MUi2SBSlZg+ZMY7amT\no7LfnTw5tb+CiF2cQrjIbvIab4mS4Sxqvn +hZWFeLHCDIDkrjqPBwaKhpB5pjiZjv\nipWi3Vz0HKjqiSI8C/vmYz+Onh2vX8mnmtWapmAtdbMjU3rFUuBu7+H7 +3fqxYvmQ\nFruSLr+r25ZSyqsBzojHEPmOCG8w2qgpOVQYdD58SPj1hg3lJZcfN6d/qNM4uxx3\niPbk7pkVfG+7 +HPvvammjw7cw+MMyRcFSViIh43Xwk0NJka2s+rmG5NisKO645jkJ\n28tyuPi8fnspYoc3N21rA3vemFGFUYu17I +Oepc/kj0pcbwVIy7kOk0BzIIO/wDK8\nJx1XILyaMzO3gxp8LenmMaCWRosPlutCo0HMZVeLbeRwohhyDqQmo1Q4 +3jd6rgQq\nQjpUwgqD0F4xQdeBCWoI0uUMxXkcK2XHoChSsetYwpadC+F/LRIArk0ZULTHcL8e\nLASqjQ/kahPW +JQtpLUB6TskbSpY932dW3oc6zudK7Sg2c66jkvz6Ynxod2XCQ7Dt\n6rfcat5FCZvKxyg7hoLRMlxpF1He0QIDAQ +ABAoICAEPrCtKD9+G6G8c9Vno0OeQX\n+dk3ims5GPXqIJhJhl5ngBKChAm6lgtk4O2ae6tBFVM+Vf1prOQwGh61 +NkjMI+hc\nh8zgdUb2pFi9kMX9YzvkhWlKLvKDEUxWoroO2WTcZCLlzbash4/z1rrBzLahzNuT\n30hWRVtGK7re +9velZ7wcnyGZRW4zob3Z7/1g4drc0R1yy9yWo6GKepi8OL9+Vahz\ndkv2BtBAx0ELlQbbODEYm6Nghiki8N763Q +beKnOTxvV56ykXBlEXaLGGhKdefyWY\nINW2SITBn8GzgKiK0cIr+zPLUK48LoWM9d0Xoo+S0m95n4rHvI4BuPGo +XFz3OVm7\nPFPbNIptq6/kavkWzbASMhL8NZVV/KAj0ik5vrTcb+sa5PEeNjqxUVbX852SGk2I\ngrjNTfQNiBff +jTXGRlS8zIC6NPaWiW4UU76kpspcaWExzip0SR92nHURolIyiFVL\nxcDEsNzRVCvB0kDYrgBobIWJ0ZdwTPhueq +O6YVngOaOm92JPXxy7dK+gS9Jm3VAD\nmlrbS5OCwoI929XyTIZWhHYbr5nASDO90oudg5Jzo4EJrPx3JK9IXt5l ++wf915Cx\nEJWHVnvZHNZYBRSFFS/tbxNPhfPnRfkEtm1S4b5G3M/gtuxCbG1dmEn3Rn0rnxTl\niABt70XREoln +DlRu3rWhAoIBAQDLvaxDeb0iTcp4rhzSjRmoLeWZOdzyZeUpHitO\n6uLocCOrFVXZPK1WFRManS7CvmqOLABNPT +TcwIHFQIxToDsiqoKnYm2QQoAWbkMr\nrq0tKptW1iAre+v6BPUQ2+KksHHS9fc/oY4hKzK4JCZpVGdIrteZQ9Ye +J36JCIMv\nPNYdv4CeTQFjhvbLIT8ia+Dt/ZxAbeVXwQOmEuwuv/eDutigXkuwqZ2F8D1RKBQz\nsBhwNTfivX3P +MORPvH00CT2PCh7cd4PGLynZIoX+qVkJK5ecDY/Biolk9XnGJAkS\nJv5qhMBqfJg9xe9kKpcXwEFl7VSgvwK1MU +kO2oSScjwPxeMtAoIBAQDFOTBYfCIe\n43MHhT8ak7PoEadcCazHclDr/i61qabIKhWnkoREwpfju/dkl1lgoFVX +/vwpk3G0\nBxUeoDxx1CmjVygyLMH6oeESKk26Fx4pzEYIsaNxEkPltA380maqNYFCVTesqdOw\nHVEcl/uQdGCR +3HTytYhXy2NKn+3orJeKF9XOL6qJPzhNr6tBW32k24jbMCJoz6Kd\nOVkxo+JXQqeKIygWXqW3x7kLOHcdNL3lTk +Vq0qA3kfK4BRPKPHpKc+ttNWv0ex6Z\nR25pC4Oxpff5THJSeOXMSmQ9PzLEfz06kZ96PWhlvoTW/OjR1/zJEaZc +brzJVSRC\ndu7Z8g1sMUC1AoIBAC6amV/p5fCF2M2YDjG/YuIMdZuCF98+nZe1NfTcV8ERfacx\nvyxs671oHrGU +yNB1HAyfVgZU/NWOF2EWbcLnQP+h/zboleVMwN3gpO7GCwjs2RGY\n80zfENBk9+W+Vm6TicXWy5K7krZVmklyw3 +KOgv2mONzvHnhRUmloEBHrGZM+bd5I\nAQxSH/vBBB8MjCwEOgym1rInDX2ckHf1I1n3kHvGdgvYEJdFp9D7mPtl +yYFJOxpb\ne/670U3H8N/JSVKB3yNRF0xrF2h6tCnXdO1bElf45ixAU0NLv2oqbgS/9KxK53S0\nQWLH9wVzlJIz +QQJesl/+sVDfEDYcl/yjssds3ZUCggEBAInUutXMAuiFWnmSBJTl\nTqDL3aNz230Thjw3SpuIsddHmhSfT7LiL9 +ZnIbD6GOtvgdVajQ3dTmRbYsYhg7yl\nYmgV3DCcmQA4q5vPVrzLtTfO287tnmTCOBNLL09WF4uykuAxwBP6J8f3 +5RzPlm7Q\n9kBZyp1ogp2gtYaMmG64V7uZhsFvDIaYWRfpwgyODRPunQlZ7WJEYcfxMUWA3AjR\nu1bN1RE1GimC ++e4+ivgtSNz9Q4QxKOlNJUy3t6npdCmeM5UB9a1Jcgv7IM1mz6WS\ncOeYJnk+ppKMFtu61BcBOWA6LzL1wYUBjc +LVwzwL70zx+cq1VVh7GTkd9zT3dav8\nC9UCggEAKud0g9RkaLpJXtH37C6byeCuvw2MA7h0LmjK0lQ5pljxc7bG +oEeWYZMT\nx9TBkzgHVedKpgPUQiZAZqIkDx5JOJOh4gswoNq4kzhCZXOM2gqECMwFHn9paq9E\nCfyGgAASHlnG +6MBdmhRtCIdTvXD7nTnTHAHS3IHybkvpP/C+FvPSnpFl5kmad/52\nxEnBkzW4rhGpE+D72RC0Z4wOurE+pLxJpH +nPu3lqVmD8m/AaxUzGdiRWPCLkx2G1\nlRIvIpbuqzZ1QzAdWwCX/5mgBk/xoI88N3EcxvgEJJhiXihYwW/630Kk +KETqnu64\n9ZBLoqoLmPhKxDHZuwO7re9GxVZ1HQ==\n-----END PRIVATE KEY-----' +EOF +``` + +### Management API Models + +#### Management API Models Summary + +| Provider | Path | Disabled | +| -------- | ---- | ------- | +| smash | flexCounters | False | +| smash | forwarding/srte/status/fec | False | +| smash | routing6/status | False | +| smash | routing/bgp/export/allPeerAdjRibIn | False | +| smash | routing/status | True | +| smash | tunnel/tunnelFib/entry | False | +| sysdb | /Sysdb/sys/logging/config/vrfLoggingHost/mgmt | True | +| sysdb | cell/1/agent | True | + +#### Management API Models Device Configuration + +```eos +! +management api models + ! + provider smash + path flexCounters + path forwarding/srte/status/fec + path routing6/status + path routing/bgp/export/allPeerAdjRibIn + path routing/status disabled + path tunnel/tunnelFib/entry + ! + provider sysdb + path /Sysdb/sys/logging/config/vrfLoggingHost/mgmt disabled + path cell/1/agent disabled +``` + ## CVX | Peer Hosts | @@ -589,6 +878,18 @@ enable password sha512 ! ``` +### Management defaults + +Default secret hash is set to md5 + +#### Management defaults Device Configuration + +```eos +! +management defaults + secret hash md5 +``` + ### TACACS Servers #### TACACS Servers diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/host2.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/host2.md index 7fa89280881..d41c14df3a4 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/host2.md +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/host2.md @@ -5,6 +5,8 @@ - [Management](#management) - [Management Interfaces](#management-interfaces) - [Management SSH](#management-ssh) + - [Management CVX Summary](#management-cvx-summary) + - [Management API HTTP](#management-api-http) - [CVX](#cvx) - [CVX Device Configuration](#cvx-device-configuration) - [Authentication](#authentication) @@ -142,6 +144,39 @@ management ssh no shutdown ``` +### Management CVX Summary + +| Shutdown | CVX Servers | +| -------- | ----------- | +| True | - | + +#### Management CVX Device Configuration + +```eos +! +management cvx + shutdown +``` + +### Management API HTTP + +#### Management API HTTP Summary + +| HTTP | HTTPS | Default Services | +| ---- | ----- | ---------------- | +| True | False | False | + +#### Management API HTTP Device Configuration + +```eos +! +management api http-commands + no protocol https + protocol http + no default-services + no shutdown +``` + ## CVX CVX is disabled diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-accounts.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-accounts.md deleted file mode 100644 index 7837ac0fc91..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-accounts.md +++ /dev/null @@ -1,49 +0,0 @@ -# management-accounts - -## Table of Contents - -- [Management](#management) - - [Management Interfaces](#management-interfaces) - - [Management Accounts](#management-accounts-1) - -## Management - -### Management Interfaces - -#### Management Interfaces Summary - -##### IPv4 - -| Management Interface | Description | Type | VRF | IP Address | Gateway | -| -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | - -##### IPv6 - -| Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | -| -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | - -#### Management Interfaces Device Configuration - -```eos -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 -``` - -### Management Accounts - -#### Password Policy - -The password policy set for management accounts is: AVD_POLICY - -#### Management Accounts Device Configuration - -```eos -! -management accounts - password policy AVD_POLICY -``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-api-http.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-api-http.md deleted file mode 100644 index 3b333c9a620..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-api-http.md +++ /dev/null @@ -1,103 +0,0 @@ -# management-api-http - -## Table of Contents - -- [Management](#management) - - [Management Interfaces](#management-interfaces) - - [Management API HTTP](#management-api-http-1) -- [ACL](#acl) - - [Standard Access-lists](#standard-access-lists) - -## Management - -### Management Interfaces - -#### Management Interfaces Summary - -##### IPv4 - -| Management Interface | Description | Type | VRF | IP Address | Gateway | -| -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | - -##### IPv6 - -| Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | -| -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | - -#### Management Interfaces Device Configuration - -```eos -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 -``` - -### Management API HTTP - -#### Management API HTTP Summary - -| HTTP | HTTPS | Default Services | -| ---- | ----- | ---------------- | -| False | True | True | - -Management HTTPS is using the SSL profile SSL_PROFILE - -#### Management API VRF Access - -| VRF Name | IPv4 ACL | IPv6 ACL | -| -------- | -------- | -------- | -| default | ACL-API | - | -| MGMT | ACL-API | - | - -HTTPS certificate and private key are configured. - -#### Management API HTTP Device Configuration - -```eos -! -management api http-commands - protocol https - no protocol http - default-services - protocol https ssl profile SSL_PROFILE - no shutdown - ! - vrf default - no shutdown - ip access-group ACL-API - ! - vrf MGMT - no shutdown - ip access-group ACL-API - protocol https certificate - -EOF - -EOF -``` - -## ACL - -### Standard Access-lists - -#### Standard Access-lists Summary - -##### ACL-API - -| Sequence | Action | -| -------- | ------ | -| 10 | permit 10.0.0.0/8 | -| 20 | permit 100.0.0.0/8 | - -#### Standard Access-lists Device Configuration - -```eos -! -ip access-list standard ACL-API - 10 permit 10.0.0.0/8 - 20 permit 100.0.0.0/8 -``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-api-models.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-api-models.md deleted file mode 100644 index f2f442fb399..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-api-models.md +++ /dev/null @@ -1,69 +0,0 @@ -# management-api-models - -## Table of Contents - -- [Management](#management) - - [Management Interfaces](#management-interfaces) - - [Management API Models](#management-api-models-1) - -## Management - -### Management Interfaces - -#### Management Interfaces Summary - -##### IPv4 - -| Management Interface | Description | Type | VRF | IP Address | Gateway | -| -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | - -##### IPv6 - -| Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | -| -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | - -#### Management Interfaces Device Configuration - -```eos -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 -``` - -### Management API Models - -#### Management API Models Summary - -| Provider | Path | Disabled | -| -------- | ---- | ------- | -| smash | flexCounters | False | -| smash | forwarding/srte/status/fec | False | -| smash | routing6/status | False | -| smash | routing/bgp/export/allPeerAdjRibIn | False | -| smash | routing/status | True | -| smash | tunnel/tunnelFib/entry | False | -| sysdb | /Sysdb/sys/logging/config/vrfLoggingHost/mgmt | True | -| sysdb | cell/1/agent | True | - -#### Management API Models Device Configuration - -```eos -! -management api models - ! - provider smash - path flexCounters - path forwarding/srte/status/fec - path routing6/status - path routing/bgp/export/allPeerAdjRibIn - path routing/status disabled - path tunnel/tunnelFib/entry - ! - provider sysdb - path /Sysdb/sys/logging/config/vrfLoggingHost/mgmt disabled - path cell/1/agent disabled -``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-console.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-console.md deleted file mode 100644 index 8717795921b..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-console.md +++ /dev/null @@ -1,49 +0,0 @@ -# management-console - -## Table of Contents - -- [Management](#management) - - [Management Interfaces](#management-interfaces) - - [Management Console](#management-console-1) - -## Management - -### Management Interfaces - -#### Management Interfaces Summary - -##### IPv4 - -| Management Interface | Description | Type | VRF | IP Address | Gateway | -| -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | - -##### IPv6 - -| Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | -| -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | - -#### Management Interfaces Device Configuration - -```eos -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 -``` - -### Management Console - -#### Management Console Timeout - -Management Console Timeout is set to **15** minutes. - -#### Management Console Device Configuration - -```eos -! -management console - idle-timeout 15 -``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-cvx.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-cvx.md deleted file mode 100644 index e270c26a1b9..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-cvx.md +++ /dev/null @@ -1,60 +0,0 @@ -# management-cvx - -## Table of Contents - -- [Management](#management) - - [Management Interfaces](#management-interfaces) - - [Management CVX Summary](#management-cvx-summary) - -## Management - -### Management Interfaces - -#### Management Interfaces Summary - -##### IPv4 - -| Management Interface | Description | Type | VRF | IP Address | Gateway | -| -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | - -##### IPv6 - -| Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | -| -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | - -#### Management Interfaces Device Configuration - -```eos -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 -``` - -### Management CVX Summary - -| Shutdown | CVX Servers | -| -------- | ----------- | -| False | 10.90.224.188, 10.90.224.189, leaf1.atd.lab | - -#### Management CVX Source Interface - -| Interface | VRF | -| --------- | --- | -| Loopback0 | MGMT | - -#### Management CVX Device Configuration - -```eos -! -management cvx - no shutdown - server host 10.90.224.188 - server host 10.90.224.189 - server host leaf1.atd.lab - source-interface Loopback0 - vrf MGMT -``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-defaults.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-defaults.md deleted file mode 100644 index 4e515cbd228..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-defaults.md +++ /dev/null @@ -1,50 +0,0 @@ -# management-defaults - -## Table of Contents - -- [Management](#management) - - [Management Interfaces](#management-interfaces) -- [Authentication](#authentication) - - [Management defaults](#management-defaults-1) - -## Management - -### Management Interfaces - -#### Management Interfaces Summary - -##### IPv4 - -| Management Interface | Description | Type | VRF | IP Address | Gateway | -| -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | - -##### IPv6 - -| Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | -| -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | - -#### Management Interfaces Device Configuration - -```eos -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 -``` - -## Authentication - -### Management defaults - -Default secret hash is set to md5 - -#### Management defaults Device Configuration - -```eos -! -management defaults - secret hash md5 -``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi-grpc-tunnel.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi-grpc-tunnel.md deleted file mode 100644 index 55a3a897a23..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi-grpc-tunnel.md +++ /dev/null @@ -1,88 +0,0 @@ -# management-gnmi-grpc-tunnel - -## Table of Contents - -- [Management](#management) - - [Management Interfaces](#management-interfaces) - - [Management API gNMI](#management-api-gnmi) - -## Management - -### Management Interfaces - -#### Management Interfaces Summary - -##### IPv4 - -| Management Interface | Description | Type | VRF | IP Address | Gateway | -| -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | - -##### IPv6 - -| Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | -| -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | - -#### Management Interfaces Device Configuration - -```eos -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 -``` - -### Management API gNMI - -#### Management API gNMI Summary - -| Transport | Destination | Destination Port | gNMI SSL Profile | Tunnel SSL Profile | VRF | Local Interface | Local Port | Target ID | -| --------- | ----------- | ---------------- | ---------------- | ------------------ | --- | --------------- | ---------- | --------- | -| onetarget | 10.1.1.100 | 10000 | ssl_profile | ssl_profile | management | Management1 | 10001 | testid100 | -| multipletargets | 10.1.1.100 | 10000 | ssl_profile | ssl_profile | management | Management1 | 10001 | testid1 testid2 testid3 testid4 | -| serialandtargets | 10.1.1.100 | 10000 | ssl_profile | ssl_profile | management | Management1 | 10001 | Serial-Number testid10 testid20 | -| noserialnotargets | - | - | - | - | - | - | - | | -| serialonly | - | - | - | - | - | - | - | Serial-Number | - -Provider eos-native is configured. - -#### Management API gNMI Device Configuration - -```eos -! -management api gnmi - transport grpc-tunnel multipletargets - no shutdown - vrf management - tunnel ssl profile ssl_profile - gnmi ssl profile ssl_profile - destination 10.1.1.100 port 10000 - local interface Management1 port 10001 - target testid1 testid2 testid3 testid4 - ! - transport grpc-tunnel noserialnotargets - ! - transport grpc-tunnel onetarget - no shutdown - vrf management - tunnel ssl profile ssl_profile - gnmi ssl profile ssl_profile - destination 10.1.1.100 port 10000 - local interface Management1 port 10001 - target testid100 - ! - transport grpc-tunnel serialandtargets - no shutdown - vrf management - tunnel ssl profile ssl_profile - gnmi ssl profile ssl_profile - destination 10.1.1.100 port 10000 - local interface Management1 port 10001 - target serial-number testid10 testid20 - ! - transport grpc-tunnel serialonly - target serial-number - provider eos-native -``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi-new-flags.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi-new-flags.md deleted file mode 100644 index dd270376d1a..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi-new-flags.md +++ /dev/null @@ -1,64 +0,0 @@ -# management-gnmi-new-flags - -## Table of Contents - -- [Management](#management) - - [Management Interfaces](#management-interfaces) - - [Management API gNMI](#management-api-gnmi) - -## Management - -### Management Interfaces - -#### Management Interfaces Summary - -##### IPv4 - -| Management Interface | Description | Type | VRF | IP Address | Gateway | -| -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | - -##### IPv6 - -| Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | -| -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | - -#### Management Interfaces Device Configuration - -```eos -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 -``` - -### Management API gNMI - -#### Management API gNMI Summary - -| Transport | SSL Profile | VRF | Notification Timestamp | ACL | Port | -| --------- | ----------- | --- | ---------------------- | --- | ---- | -| MGMT | gnmi | MGMT | send-time | acl1 | 6030 | -| mytransport | - | - | send-time | acl1 | 6032 | - -Provider eos-native is configured. - -#### Management API gNMI Device Configuration - -```eos -! -management api gnmi - transport grpc MGMT - ssl profile gnmi - vrf MGMT - ip access-group acl1 - notification timestamp send-time - ! - transport grpc mytransport - port 6032 - ip access-group acl1 - notification timestamp send-time - provider eos-native -``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi.md deleted file mode 100644 index 4bc256017ef..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-gnmi.md +++ /dev/null @@ -1,61 +0,0 @@ -# management-gnmi - -## Table of Contents - -- [Management](#management) - - [Management Interfaces](#management-interfaces) - - [Management API gNMI](#management-api-gnmi) - -## Management - -### Management Interfaces - -#### Management Interfaces Summary - -##### IPv4 - -| Management Interface | Description | Type | VRF | IP Address | Gateway | -| -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | - -##### IPv6 - -| Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | -| -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | - -#### Management Interfaces Device Configuration - -```eos -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 -``` - -### Management API gNMI - -#### Management API gNMI Summary - -| Transport | SSL Profile | VRF | Notification Timestamp | ACL | Port | -| --------- | ----------- | --- | ---------------------- | --- | ---- | -| MGMT | - | MGMT | last-change-time | ACL-GNMI | 6030 | -| MONITORING | - | MONITORING | last-change-time | - | 6031 | - -Provider eos-native is configured. - -#### Management API gNMI Device Configuration - -```eos -! -management api gnmi - transport grpc MGMT - vrf MGMT - ip access-group ACL-GNMI - ! - transport grpc MONITORING - port 6031 - vrf MONITORING - provider eos-native -``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-interfaces.md b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-interfaces.md deleted file mode 100644 index 181cb0e18f7..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/documentation/devices/management-interfaces.md +++ /dev/null @@ -1,57 +0,0 @@ -# management-interfaces - -## Table of Contents - -- [Management](#management) - - [Management Interfaces](#management-interfaces-1) - -## Management - -### Management Interfaces - -#### Management Interfaces Summary - -##### IPv4 - -| Management Interface | Description | Type | VRF | IP Address | Gateway | -| -------------------- | ----------- | ---- | --- | ---------- | ------- | -| Management0 | - | oob | default | 10.0.0.0 | - | -| Management1 | OOB_MANAGEMENT | oob | MGMT | 10.73.255.122/24 | 10.73.255.2 | -| Management42 | - | oob | default | - | - | -| Vlan123 | inband_management | inband | default | 10.73.0.123/24 | 10.73.0.1 | - -##### IPv6 - -| Management Interface | Description | Type | VRF | IPv6 Address | IPv6 Gateway | -| -------------------- | ----------- | ---- | --- | ------------ | ------------ | -| Management0 | - | oob | default | - | - | -| Management1 | OOB_MANAGEMENT | oob | MGMT | - | - | -| Management42 | - | oob | default | - | - | -| Vlan123 | inband_management | inband | default | - | - | - -#### Management Interfaces Device Configuration - -```eos -! -interface Management0 - mac-address 00:1c:73:00:00:aa - ip address 10.0.0.0 -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 -! -interface Management42 - shutdown - speed forced 1000full - no lldp transmit - no lldp receive - lldp tlv transmit ztp vlan 666 -! -interface Vlan123 - description inband_management - mtu 1500 - ip address 10.73.0.123/24 - ip virtual-router address 10.73.0.1 -``` diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/host1.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/host1.cfg index e701db584d2..771f3318ee9 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/host1.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/host1.cfg @@ -632,6 +632,161 @@ queue-monitor streaming vrf test no shutdown ! +management accounts + password policy AVD_POLICY +! +management api http-commands + protocol https + no protocol http + default-services + protocol https ssl profile SSL_PROFILE + no shutdown + ! + vrf default + no shutdown + ip access-group ACL-API + ipv6 access-group ACL-API6 + ! + vrf MGMT + no shutdown + ip access-group ACL-API + protocol https certificate +'\n-----BEGIN CERTIFICATE-----\nMIIFNjCCAx4CCQCVGSFu9M4dNDANBgkqhkiG9w0BAQsFADBdMQswCQ +YDVQQGEwJD\nQTELMAkGA1UECAwCQkMxEjAQBgNVBAcMCVZhbmNvdXZlcjEPMA0GA1UECgwGQXJp\nc3RhMQwwC +gYDVQQLDANBVkQxDjAMBgNVBAMMBWhvc3QxMB4XDTI0MTExMzE3NTAw\nN1oXDTM0MTExMTE3NTAwN1owXTELMA +kGA1UEBhMCQ0ExCzAJBgNVBAgMAkJDMRIw\nEAYDVQQHDAlWYW5jb3V2ZXIxDzANBgNVBAoMBkFyaXN0YTEMMAo +GA1UECwwDQVZE\nMQ4wDAYDVQQDDAVob3N0MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB\nAJz2e +UVD/4u+nmz0Ak6QJqPrQSJ6spZtxnfgSD3ETGhWgVO+aV7UbnpCAvKB+G7B\nX3WEHl2zphFE+O4HhRCBiDFB9 +LXZ2fiiBKcPmFMuJChL15wLaa5yP99trMX3wxSL\nZIFKVmD5kxjtqZOjst+dPDm1v4KIXZxCuMhu8hpviZLhL +Gq+eFlYV4scIMgOSuOo\n8HBoqGkHmmOJmO+KlaLdXPQcqOqJIjwL++ZjP46eHa9fyaea1ZqmYC11syNTesVS +\n4G7v4fvd+rFi+ZAWu5Iuv6vbllLKqwHOiMcQ+Y4IbzDaqCk5VBh0PnxI+PWGDeUl\nlx83p3+o0zi7HHeI9 +uTumRV8b7sc++9qaaPDtzD4wzJFwVJWIiHjdfCTQ0mRraz6\nuYbk2Kwo7rjmOQnby3K4+Lx+eylihzc3bWsDe9 +6YUYVRi7Xsg56lz+SPSlxvBUjL\nuQ6TQHMgg7/AMrwnHVcgvJozM7eDGnwt6eYxoJZGiw+W60KjQcxlV4tt5HC +iGHIO\npCajVDjeN3quBCpCOlTCCoPQXjFB14EJagjS5QzFeRwrZcegKFKx61jClp0L4X8t\nEgCuTRlQtMdwvx +4sBKqND+RqE9YlC2ktQHpOyRtKlj3fZ1behzrO50rtKDZzrqOS\n/PpifGh3ZcJDsO3qt9xq3kUJm8rHKDuGgtE +yXGkXUd7RAgMBAAEwDQYJKoZIhvcN\nAQELBQADggIBAH0vpyvehlfjKmMMv5S05ruEW1La0+m2CypdxvgQ9IGH +FnsUqSzl\nhMsR5mISyhfaHSlYTE8YxiSoHUL7lMsIi6G+tEXglad3KJEpqVi2tg9GbteaBONN\nP7mjnDnHRhV +xodSUVOJvZmtGFv7lKRvGXYgwwCHq93Z3iyXvkFMNO6aYU3ghwYci\n1gMRXsWG/K8r4TzAC87RBTSXaFEIvrVY +NwhL61fRPvIvFzdf5I0Zi7LSKRDZ6Ks/\nAwMOQaTwF9W0a/dBc4twbmbajcTbXDcUA/Jxr97XrtlNioHe3itlwJ +aQ2LgSkfM9\nh5CJ+wcCmWLanHpeCoXu6kj17mZScfxHmHyuNXugq8Ryj23qndN37ZDADh0rqRKm\nXxVai6s0K +BZENiUiastKolA3CL27/312Wv5cPSi66NDdrNqwDZVS0d5QZd3Motni\n1aX/+GmOURX5O3xDMJZTx/lP2zRwId +fwEgBntBSipzmv73y5aMJqUCl3w980pLTj\nkc6u4R7x93bWtRedCtL8SroKgg3iSP+MNvjh7GRVrisKi1mHq37 +xBFbfcKWQ8Fux\nxak6B5u7Dkwio2KGtQAzUTw8GNrG8ix6wYbCxRTorl0qtxWKqB1sqPkxVmo73PkO\nsVbhuz +XgHBzA4RNdl/qmwSKlL7pKfpQUm3jSzewJm224QTYODTF8KRpf\n-----END CERTIFICATE-----' +EOF +'\n-----BEGIN PRIVATE KEY-----\nMIIJQgIBADANBgkqhkiG9w0BAQEFAASCCSwwggkoAgEAAoICAQCc9nlF +Q/+Lvp5s\n9AJOkCaj60EierKWbcZ34Eg9xExoVoFTvmle1G56QgLygfhuwV91hB5ds6YRRPju\nB4UQgYgxQfS1 +2dn4ogSnD5hTLiQoS9ecC2mucj/fbazF98MUi2SBSlZg+ZMY7amT\no7LfnTw5tb+CiF2cQrjIbvIab4mS4Sxqvn +hZWFeLHCDIDkrjqPBwaKhpB5pjiZjv\nipWi3Vz0HKjqiSI8C/vmYz+Onh2vX8mnmtWapmAtdbMjU3rFUuBu7+H7 +3fqxYvmQ\nFruSLr+r25ZSyqsBzojHEPmOCG8w2qgpOVQYdD58SPj1hg3lJZcfN6d/qNM4uxx3\niPbk7pkVfG+7 +HPvvammjw7cw+MMyRcFSViIh43Xwk0NJka2s+rmG5NisKO645jkJ\n28tyuPi8fnspYoc3N21rA3vemFGFUYu17I +Oepc/kj0pcbwVIy7kOk0BzIIO/wDK8\nJx1XILyaMzO3gxp8LenmMaCWRosPlutCo0HMZVeLbeRwohhyDqQmo1Q4 +3jd6rgQq\nQjpUwgqD0F4xQdeBCWoI0uUMxXkcK2XHoChSsetYwpadC+F/LRIArk0ZULTHcL8e\nLASqjQ/kahPW +JQtpLUB6TskbSpY932dW3oc6zudK7Sg2c66jkvz6Ynxod2XCQ7Dt\n6rfcat5FCZvKxyg7hoLRMlxpF1He0QIDAQ +ABAoICAEPrCtKD9+G6G8c9Vno0OeQX\n+dk3ims5GPXqIJhJhl5ngBKChAm6lgtk4O2ae6tBFVM+Vf1prOQwGh61 +NkjMI+hc\nh8zgdUb2pFi9kMX9YzvkhWlKLvKDEUxWoroO2WTcZCLlzbash4/z1rrBzLahzNuT\n30hWRVtGK7re +9velZ7wcnyGZRW4zob3Z7/1g4drc0R1yy9yWo6GKepi8OL9+Vahz\ndkv2BtBAx0ELlQbbODEYm6Nghiki8N763Q +beKnOTxvV56ykXBlEXaLGGhKdefyWY\nINW2SITBn8GzgKiK0cIr+zPLUK48LoWM9d0Xoo+S0m95n4rHvI4BuPGo +XFz3OVm7\nPFPbNIptq6/kavkWzbASMhL8NZVV/KAj0ik5vrTcb+sa5PEeNjqxUVbX852SGk2I\ngrjNTfQNiBff +jTXGRlS8zIC6NPaWiW4UU76kpspcaWExzip0SR92nHURolIyiFVL\nxcDEsNzRVCvB0kDYrgBobIWJ0ZdwTPhueq +O6YVngOaOm92JPXxy7dK+gS9Jm3VAD\nmlrbS5OCwoI929XyTIZWhHYbr5nASDO90oudg5Jzo4EJrPx3JK9IXt5l ++wf915Cx\nEJWHVnvZHNZYBRSFFS/tbxNPhfPnRfkEtm1S4b5G3M/gtuxCbG1dmEn3Rn0rnxTl\niABt70XREoln +DlRu3rWhAoIBAQDLvaxDeb0iTcp4rhzSjRmoLeWZOdzyZeUpHitO\n6uLocCOrFVXZPK1WFRManS7CvmqOLABNPT +TcwIHFQIxToDsiqoKnYm2QQoAWbkMr\nrq0tKptW1iAre+v6BPUQ2+KksHHS9fc/oY4hKzK4JCZpVGdIrteZQ9Ye +J36JCIMv\nPNYdv4CeTQFjhvbLIT8ia+Dt/ZxAbeVXwQOmEuwuv/eDutigXkuwqZ2F8D1RKBQz\nsBhwNTfivX3P +MORPvH00CT2PCh7cd4PGLynZIoX+qVkJK5ecDY/Biolk9XnGJAkS\nJv5qhMBqfJg9xe9kKpcXwEFl7VSgvwK1MU +kO2oSScjwPxeMtAoIBAQDFOTBYfCIe\n43MHhT8ak7PoEadcCazHclDr/i61qabIKhWnkoREwpfju/dkl1lgoFVX +/vwpk3G0\nBxUeoDxx1CmjVygyLMH6oeESKk26Fx4pzEYIsaNxEkPltA380maqNYFCVTesqdOw\nHVEcl/uQdGCR +3HTytYhXy2NKn+3orJeKF9XOL6qJPzhNr6tBW32k24jbMCJoz6Kd\nOVkxo+JXQqeKIygWXqW3x7kLOHcdNL3lTk +Vq0qA3kfK4BRPKPHpKc+ttNWv0ex6Z\nR25pC4Oxpff5THJSeOXMSmQ9PzLEfz06kZ96PWhlvoTW/OjR1/zJEaZc +brzJVSRC\ndu7Z8g1sMUC1AoIBAC6amV/p5fCF2M2YDjG/YuIMdZuCF98+nZe1NfTcV8ERfacx\nvyxs671oHrGU +yNB1HAyfVgZU/NWOF2EWbcLnQP+h/zboleVMwN3gpO7GCwjs2RGY\n80zfENBk9+W+Vm6TicXWy5K7krZVmklyw3 +KOgv2mONzvHnhRUmloEBHrGZM+bd5I\nAQxSH/vBBB8MjCwEOgym1rInDX2ckHf1I1n3kHvGdgvYEJdFp9D7mPtl +yYFJOxpb\ne/670U3H8N/JSVKB3yNRF0xrF2h6tCnXdO1bElf45ixAU0NLv2oqbgS/9KxK53S0\nQWLH9wVzlJIz +QQJesl/+sVDfEDYcl/yjssds3ZUCggEBAInUutXMAuiFWnmSBJTl\nTqDL3aNz230Thjw3SpuIsddHmhSfT7LiL9 +ZnIbD6GOtvgdVajQ3dTmRbYsYhg7yl\nYmgV3DCcmQA4q5vPVrzLtTfO287tnmTCOBNLL09WF4uykuAxwBP6J8f3 +5RzPlm7Q\n9kBZyp1ogp2gtYaMmG64V7uZhsFvDIaYWRfpwgyODRPunQlZ7WJEYcfxMUWA3AjR\nu1bN1RE1GimC ++e4+ivgtSNz9Q4QxKOlNJUy3t6npdCmeM5UB9a1Jcgv7IM1mz6WS\ncOeYJnk+ppKMFtu61BcBOWA6LzL1wYUBjc +LVwzwL70zx+cq1VVh7GTkd9zT3dav8\nC9UCggEAKud0g9RkaLpJXtH37C6byeCuvw2MA7h0LmjK0lQ5pljxc7bG +oEeWYZMT\nx9TBkzgHVedKpgPUQiZAZqIkDx5JOJOh4gswoNq4kzhCZXOM2gqECMwFHn9paq9E\nCfyGgAASHlnG +6MBdmhRtCIdTvXD7nTnTHAHS3IHybkvpP/C+FvPSnpFl5kmad/52\nxEnBkzW4rhGpE+D72RC0Z4wOurE+pLxJpH +nPu3lqVmD8m/AaxUzGdiRWPCLkx2G1\nlRIvIpbuqzZ1QzAdWwCX/5mgBk/xoI88N3EcxvgEJJhiXihYwW/630Kk +KETqnu64\n9ZBLoqoLmPhKxDHZuwO7re9GxVZ1HQ==\n-----END PRIVATE KEY-----' +EOF +! +management console + idle-timeout 15 +! +management cvx + no shutdown + server host 10.90.224.188 + server host 10.90.224.189 + server host leaf1.atd.lab + source-interface Loopback0 + vrf MGMT +! +management defaults + secret hash md5 +! +management api gnmi + transport grpc MGMT + ssl profile gnmi + vrf MGMT + ip access-group acl1 + notification timestamp send-time + ! + transport grpc mytransport + port 6032 + ip access-group acl1 + notification timestamp send-time + ! + transport grpc-tunnel multipletargets + no shutdown + vrf management + tunnel ssl profile ssl_profile + gnmi ssl profile ssl_profile + destination 10.1.1.100 port 10000 + local interface Management1 port 10001 + target testid1 testid2 testid3 testid4 + ! + transport grpc-tunnel noserialnotargets + ! + transport grpc-tunnel onetarget + shutdown + vrf management + tunnel ssl profile ssl_profile + gnmi ssl profile ssl_profile + destination 10.1.1.100 port 10000 + local interface Management1 port 10001 + target testid100 + ! + transport grpc-tunnel serialandtargets + no shutdown + vrf management + tunnel ssl profile ssl_profile + gnmi ssl profile ssl_profile + destination 10.1.1.100 port 10000 + local interface Management1 port 10001 + target serial-number testid10 testid20 + ! + transport grpc-tunnel serialonly + target serial-number + provider eos-native +! +management api models + ! + provider smash + path flexCounters + path forwarding/srte/status/fec + path routing6/status + path routing/bgp/export/allPeerAdjRibIn + path routing/status disabled + path tunnel/tunnelFib/entry + ! + provider sysdb + path /Sysdb/sys/logging/config/vrfLoggingHost/mgmt disabled + path cell/1/agent disabled +! management security entropy source hardware haveged cpu jitter entropy source hardware exclusive @@ -2321,11 +2476,28 @@ interface Loopback100 vrf TENANT_A_PROJECT02 ip address 10.1.255.3/32 ! +interface Management0 + mac-address 00:1c:73:00:00:aa + ip address 10.0.0.0 +! interface Management1 description OOB_MANAGEMENT vrf MGMT ip address 10.73.255.122/24 ! +interface Management42 + shutdown + speed forced 1000full + no lldp transmit + no lldp receive + lldp tlv transmit ztp vlan 666 +! +interface Vlan123 + description inband_management + mtu 1500 + ip address 10.73.0.123/24 + ip virtual-router address 10.73.0.1 +! interface Tunnel1 description test ipv4 only no shutdown diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/host2.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/host2.cfg index 41f8a66b126..abac888aabb 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/host2.cfg +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/host2.cfg @@ -30,6 +30,15 @@ monitor server radius router adaptive-virtual-topology topology role edge gateway vxlan ! +management api http-commands + no protocol https + protocol http + no default-services + no shutdown +! +management cvx + shutdown +! management security password encryption reversible aes-256-gcm ! diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-accounts.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-accounts.cfg deleted file mode 100644 index 1ee1035cd59..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-accounts.cfg +++ /dev/null @@ -1,8 +0,0 @@ -! -management accounts - password policy AVD_POLICY -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-api-http.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-api-http.cfg deleted file mode 100644 index 71dd77c22ff..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-api-http.cfg +++ /dev/null @@ -1,29 +0,0 @@ -! -management api http-commands - protocol https - no protocol http - default-services - protocol https ssl profile SSL_PROFILE - no shutdown - ! - vrf default - no shutdown - ip access-group ACL-API - ! - vrf MGMT - no shutdown - ip access-group ACL-API - protocol https certificate - -EOF - -EOF -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 -! -ip access-list standard ACL-API - 10 permit 10.0.0.0/8 - 20 permit 100.0.0.0/8 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-api-models.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-api-models.cfg deleted file mode 100644 index 003f04f89a8..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-api-models.cfg +++ /dev/null @@ -1,19 +0,0 @@ -! -management api models - ! - provider smash - path flexCounters - path forwarding/srte/status/fec - path routing6/status - path routing/bgp/export/allPeerAdjRibIn - path routing/status disabled - path tunnel/tunnelFib/entry - ! - provider sysdb - path /Sysdb/sys/logging/config/vrfLoggingHost/mgmt disabled - path cell/1/agent disabled -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-console.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-console.cfg deleted file mode 100644 index dc603e4c156..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-console.cfg +++ /dev/null @@ -1,8 +0,0 @@ -! -management console - idle-timeout 15 -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-cvx.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-cvx.cfg deleted file mode 100644 index 737c7a38520..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-cvx.cfg +++ /dev/null @@ -1,13 +0,0 @@ -! -management cvx - no shutdown - server host 10.90.224.188 - server host 10.90.224.189 - server host leaf1.atd.lab - source-interface Loopback0 - vrf MGMT -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-defaults.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-defaults.cfg deleted file mode 100644 index d5187f40ef3..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-defaults.cfg +++ /dev/null @@ -1,8 +0,0 @@ -! -management defaults - secret hash md5 -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi-grpc-tunnel.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi-grpc-tunnel.cfg deleted file mode 100644 index 3445974afb3..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi-grpc-tunnel.cfg +++ /dev/null @@ -1,39 +0,0 @@ -! -management api gnmi - transport grpc-tunnel multipletargets - no shutdown - vrf management - tunnel ssl profile ssl_profile - gnmi ssl profile ssl_profile - destination 10.1.1.100 port 10000 - local interface Management1 port 10001 - target testid1 testid2 testid3 testid4 - ! - transport grpc-tunnel noserialnotargets - ! - transport grpc-tunnel onetarget - no shutdown - vrf management - tunnel ssl profile ssl_profile - gnmi ssl profile ssl_profile - destination 10.1.1.100 port 10000 - local interface Management1 port 10001 - target testid100 - ! - transport grpc-tunnel serialandtargets - no shutdown - vrf management - tunnel ssl profile ssl_profile - gnmi ssl profile ssl_profile - destination 10.1.1.100 port 10000 - local interface Management1 port 10001 - target serial-number testid10 testid20 - ! - transport grpc-tunnel serialonly - target serial-number - provider eos-native -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi-new-flags.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi-new-flags.cfg deleted file mode 100644 index a948162faa2..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi-new-flags.cfg +++ /dev/null @@ -1,18 +0,0 @@ -! -management api gnmi - transport grpc MGMT - ssl profile gnmi - vrf MGMT - ip access-group acl1 - notification timestamp send-time - ! - transport grpc mytransport - port 6032 - ip access-group acl1 - notification timestamp send-time - provider eos-native -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi.cfg deleted file mode 100644 index a48de3c1063..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-gnmi.cfg +++ /dev/null @@ -1,15 +0,0 @@ -! -management api gnmi - transport grpc MGMT - vrf MGMT - ip access-group ACL-GNMI - ! - transport grpc MONITORING - port 6031 - vrf MONITORING - provider eos-native -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-interfaces.cfg b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-interfaces.cfg deleted file mode 100644 index 3b9057ef346..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/management-interfaces.cfg +++ /dev/null @@ -1,22 +0,0 @@ -! -interface Management0 - mac-address 00:1c:73:00:00:aa - ip address 10.0.0.0 -! -interface Management1 - description OOB_MANAGEMENT - vrf MGMT - ip address 10.73.255.122/24 -! -interface Management42 - shutdown - speed forced 1000full - no lldp transmit - no lldp receive - lldp tlv transmit ztp vlan 666 -! -interface Vlan123 - description inband_management - mtu 1500 - ip address 10.73.0.123/24 - ip virtual-router address 10.73.0.1 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-accounts.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-accounts.yml similarity index 93% rename from ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-accounts.yml rename to ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-accounts.yml index a244686dd63..fac57e72522 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-accounts.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-accounts.yml @@ -1,3 +1,4 @@ +--- management_accounts: password: policy: "AVD_POLICY" diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-gnmi-grpc-tunnel.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-api-gnmi.yml similarity index 82% rename from ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-gnmi-grpc-tunnel.yml rename to ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-api-gnmi.yml index 07c63b39f55..bc76ba7eb3c 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-gnmi-grpc-tunnel.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-api-gnmi.yml @@ -1,9 +1,20 @@ +--- management_api_gnmi: provider: "eos-native" transport: + grpc: + - name: MGMT + ssl_profile: gnmi + vrf: MGMT + notification_timestamp: "send-time" + ip_access_group: acl1 + - name: mytransport + notification_timestamp: "send-time" + ip_access_group: acl1 + port: "6032" grpc_tunnels: - name: onetarget - shutdown: false + shutdown: true tunnel_ssl_profile: ssl_profile gnmi_ssl_profile: ssl_profile vrf: management diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-api-http.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-api-http.yml new file mode 100644 index 00000000000..9f55bb8c0ed --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-api-http.yml @@ -0,0 +1,75 @@ +--- +management_api_http: + enable_http: false + enable_https: true + https_ssl_profile: SSL_PROFILE + default_services: true + enable_vrfs: + - name: default + access_group: ACL-API + ipv6_access_group: ACL-API6 + - name: MGMT + access_group: ACL-API + protocol_https_certificate: + certificate: |- + '\n-----BEGIN CERTIFICATE-----\nMIIFNjCCAx4CCQCVGSFu9M4dNDANBgkqhkiG9w0BAQsFADBdMQswCQ + YDVQQGEwJD\nQTELMAkGA1UECAwCQkMxEjAQBgNVBAcMCVZhbmNvdXZlcjEPMA0GA1UECgwGQXJp\nc3RhMQwwC + gYDVQQLDANBVkQxDjAMBgNVBAMMBWhvc3QxMB4XDTI0MTExMzE3NTAw\nN1oXDTM0MTExMTE3NTAwN1owXTELMA + kGA1UEBhMCQ0ExCzAJBgNVBAgMAkJDMRIw\nEAYDVQQHDAlWYW5jb3V2ZXIxDzANBgNVBAoMBkFyaXN0YTEMMAo + GA1UECwwDQVZE\nMQ4wDAYDVQQDDAVob3N0MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB\nAJz2e + UVD/4u+nmz0Ak6QJqPrQSJ6spZtxnfgSD3ETGhWgVO+aV7UbnpCAvKB+G7B\nX3WEHl2zphFE+O4HhRCBiDFB9 + LXZ2fiiBKcPmFMuJChL15wLaa5yP99trMX3wxSL\nZIFKVmD5kxjtqZOjst+dPDm1v4KIXZxCuMhu8hpviZLhL + Gq+eFlYV4scIMgOSuOo\n8HBoqGkHmmOJmO+KlaLdXPQcqOqJIjwL++ZjP46eHa9fyaea1ZqmYC11syNTesVS + \n4G7v4fvd+rFi+ZAWu5Iuv6vbllLKqwHOiMcQ+Y4IbzDaqCk5VBh0PnxI+PWGDeUl\nlx83p3+o0zi7HHeI9 + uTumRV8b7sc++9qaaPDtzD4wzJFwVJWIiHjdfCTQ0mRraz6\nuYbk2Kwo7rjmOQnby3K4+Lx+eylihzc3bWsDe9 + 6YUYVRi7Xsg56lz+SPSlxvBUjL\nuQ6TQHMgg7/AMrwnHVcgvJozM7eDGnwt6eYxoJZGiw+W60KjQcxlV4tt5HC + iGHIO\npCajVDjeN3quBCpCOlTCCoPQXjFB14EJagjS5QzFeRwrZcegKFKx61jClp0L4X8t\nEgCuTRlQtMdwvx + 4sBKqND+RqE9YlC2ktQHpOyRtKlj3fZ1behzrO50rtKDZzrqOS\n/PpifGh3ZcJDsO3qt9xq3kUJm8rHKDuGgtE + yXGkXUd7RAgMBAAEwDQYJKoZIhvcN\nAQELBQADggIBAH0vpyvehlfjKmMMv5S05ruEW1La0+m2CypdxvgQ9IGH + FnsUqSzl\nhMsR5mISyhfaHSlYTE8YxiSoHUL7lMsIi6G+tEXglad3KJEpqVi2tg9GbteaBONN\nP7mjnDnHRhV + xodSUVOJvZmtGFv7lKRvGXYgwwCHq93Z3iyXvkFMNO6aYU3ghwYci\n1gMRXsWG/K8r4TzAC87RBTSXaFEIvrVY + NwhL61fRPvIvFzdf5I0Zi7LSKRDZ6Ks/\nAwMOQaTwF9W0a/dBc4twbmbajcTbXDcUA/Jxr97XrtlNioHe3itlwJ + aQ2LgSkfM9\nh5CJ+wcCmWLanHpeCoXu6kj17mZScfxHmHyuNXugq8Ryj23qndN37ZDADh0rqRKm\nXxVai6s0K + BZENiUiastKolA3CL27/312Wv5cPSi66NDdrNqwDZVS0d5QZd3Motni\n1aX/+GmOURX5O3xDMJZTx/lP2zRwId + fwEgBntBSipzmv73y5aMJqUCl3w980pLTj\nkc6u4R7x93bWtRedCtL8SroKgg3iSP+MNvjh7GRVrisKi1mHq37 + xBFbfcKWQ8Fux\nxak6B5u7Dkwio2KGtQAzUTw8GNrG8ix6wYbCxRTorl0qtxWKqB1sqPkxVmo73PkO\nsVbhuz + XgHBzA4RNdl/qmwSKlL7pKfpQUm3jSzewJm224QTYODTF8KRpf\n-----END CERTIFICATE-----' + private_key: |- + '\n-----BEGIN PRIVATE KEY-----\nMIIJQgIBADANBgkqhkiG9w0BAQEFAASCCSwwggkoAgEAAoICAQCc9nlF + Q/+Lvp5s\n9AJOkCaj60EierKWbcZ34Eg9xExoVoFTvmle1G56QgLygfhuwV91hB5ds6YRRPju\nB4UQgYgxQfS1 + 2dn4ogSnD5hTLiQoS9ecC2mucj/fbazF98MUi2SBSlZg+ZMY7amT\no7LfnTw5tb+CiF2cQrjIbvIab4mS4Sxqvn + hZWFeLHCDIDkrjqPBwaKhpB5pjiZjv\nipWi3Vz0HKjqiSI8C/vmYz+Onh2vX8mnmtWapmAtdbMjU3rFUuBu7+H7 + 3fqxYvmQ\nFruSLr+r25ZSyqsBzojHEPmOCG8w2qgpOVQYdD58SPj1hg3lJZcfN6d/qNM4uxx3\niPbk7pkVfG+7 + HPvvammjw7cw+MMyRcFSViIh43Xwk0NJka2s+rmG5NisKO645jkJ\n28tyuPi8fnspYoc3N21rA3vemFGFUYu17I + Oepc/kj0pcbwVIy7kOk0BzIIO/wDK8\nJx1XILyaMzO3gxp8LenmMaCWRosPlutCo0HMZVeLbeRwohhyDqQmo1Q4 + 3jd6rgQq\nQjpUwgqD0F4xQdeBCWoI0uUMxXkcK2XHoChSsetYwpadC+F/LRIArk0ZULTHcL8e\nLASqjQ/kahPW + JQtpLUB6TskbSpY932dW3oc6zudK7Sg2c66jkvz6Ynxod2XCQ7Dt\n6rfcat5FCZvKxyg7hoLRMlxpF1He0QIDAQ + ABAoICAEPrCtKD9+G6G8c9Vno0OeQX\n+dk3ims5GPXqIJhJhl5ngBKChAm6lgtk4O2ae6tBFVM+Vf1prOQwGh61 + NkjMI+hc\nh8zgdUb2pFi9kMX9YzvkhWlKLvKDEUxWoroO2WTcZCLlzbash4/z1rrBzLahzNuT\n30hWRVtGK7re + 9velZ7wcnyGZRW4zob3Z7/1g4drc0R1yy9yWo6GKepi8OL9+Vahz\ndkv2BtBAx0ELlQbbODEYm6Nghiki8N763Q + beKnOTxvV56ykXBlEXaLGGhKdefyWY\nINW2SITBn8GzgKiK0cIr+zPLUK48LoWM9d0Xoo+S0m95n4rHvI4BuPGo + XFz3OVm7\nPFPbNIptq6/kavkWzbASMhL8NZVV/KAj0ik5vrTcb+sa5PEeNjqxUVbX852SGk2I\ngrjNTfQNiBff + jTXGRlS8zIC6NPaWiW4UU76kpspcaWExzip0SR92nHURolIyiFVL\nxcDEsNzRVCvB0kDYrgBobIWJ0ZdwTPhueq + O6YVngOaOm92JPXxy7dK+gS9Jm3VAD\nmlrbS5OCwoI929XyTIZWhHYbr5nASDO90oudg5Jzo4EJrPx3JK9IXt5l + +wf915Cx\nEJWHVnvZHNZYBRSFFS/tbxNPhfPnRfkEtm1S4b5G3M/gtuxCbG1dmEn3Rn0rnxTl\niABt70XREoln + DlRu3rWhAoIBAQDLvaxDeb0iTcp4rhzSjRmoLeWZOdzyZeUpHitO\n6uLocCOrFVXZPK1WFRManS7CvmqOLABNPT + TcwIHFQIxToDsiqoKnYm2QQoAWbkMr\nrq0tKptW1iAre+v6BPUQ2+KksHHS9fc/oY4hKzK4JCZpVGdIrteZQ9Ye + J36JCIMv\nPNYdv4CeTQFjhvbLIT8ia+Dt/ZxAbeVXwQOmEuwuv/eDutigXkuwqZ2F8D1RKBQz\nsBhwNTfivX3P + MORPvH00CT2PCh7cd4PGLynZIoX+qVkJK5ecDY/Biolk9XnGJAkS\nJv5qhMBqfJg9xe9kKpcXwEFl7VSgvwK1MU + kO2oSScjwPxeMtAoIBAQDFOTBYfCIe\n43MHhT8ak7PoEadcCazHclDr/i61qabIKhWnkoREwpfju/dkl1lgoFVX + /vwpk3G0\nBxUeoDxx1CmjVygyLMH6oeESKk26Fx4pzEYIsaNxEkPltA380maqNYFCVTesqdOw\nHVEcl/uQdGCR + 3HTytYhXy2NKn+3orJeKF9XOL6qJPzhNr6tBW32k24jbMCJoz6Kd\nOVkxo+JXQqeKIygWXqW3x7kLOHcdNL3lTk + Vq0qA3kfK4BRPKPHpKc+ttNWv0ex6Z\nR25pC4Oxpff5THJSeOXMSmQ9PzLEfz06kZ96PWhlvoTW/OjR1/zJEaZc + brzJVSRC\ndu7Z8g1sMUC1AoIBAC6amV/p5fCF2M2YDjG/YuIMdZuCF98+nZe1NfTcV8ERfacx\nvyxs671oHrGU + yNB1HAyfVgZU/NWOF2EWbcLnQP+h/zboleVMwN3gpO7GCwjs2RGY\n80zfENBk9+W+Vm6TicXWy5K7krZVmklyw3 + KOgv2mONzvHnhRUmloEBHrGZM+bd5I\nAQxSH/vBBB8MjCwEOgym1rInDX2ckHf1I1n3kHvGdgvYEJdFp9D7mPtl + yYFJOxpb\ne/670U3H8N/JSVKB3yNRF0xrF2h6tCnXdO1bElf45ixAU0NLv2oqbgS/9KxK53S0\nQWLH9wVzlJIz + QQJesl/+sVDfEDYcl/yjssds3ZUCggEBAInUutXMAuiFWnmSBJTl\nTqDL3aNz230Thjw3SpuIsddHmhSfT7LiL9 + ZnIbD6GOtvgdVajQ3dTmRbYsYhg7yl\nYmgV3DCcmQA4q5vPVrzLtTfO287tnmTCOBNLL09WF4uykuAxwBP6J8f3 + 5RzPlm7Q\n9kBZyp1ogp2gtYaMmG64V7uZhsFvDIaYWRfpwgyODRPunQlZ7WJEYcfxMUWA3AjR\nu1bN1RE1GimC + +e4+ivgtSNz9Q4QxKOlNJUy3t6npdCmeM5UB9a1Jcgv7IM1mz6WS\ncOeYJnk+ppKMFtu61BcBOWA6LzL1wYUBjc + LVwzwL70zx+cq1VVh7GTkd9zT3dav8\nC9UCggEAKud0g9RkaLpJXtH37C6byeCuvw2MA7h0LmjK0lQ5pljxc7bG + oEeWYZMT\nx9TBkzgHVedKpgPUQiZAZqIkDx5JOJOh4gswoNq4kzhCZXOM2gqECMwFHn9paq9E\nCfyGgAASHlnG + 6MBdmhRtCIdTvXD7nTnTHAHS3IHybkvpP/C+FvPSnpFl5kmad/52\nxEnBkzW4rhGpE+D72RC0Z4wOurE+pLxJpH + nPu3lqVmD8m/AaxUzGdiRWPCLkx2G1\nlRIvIpbuqzZ1QzAdWwCX/5mgBk/xoI88N3EcxvgEJJhiXihYwW/630Kk + KETqnu64\n9ZBLoqoLmPhKxDHZuwO7re9GxVZ1HQ==\n-----END PRIVATE KEY-----' diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-api-models.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-api-models.yml similarity index 95% rename from ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-api-models.yml rename to ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-api-models.yml index 6060c7f7fa4..4a1da3e222e 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-api-models.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-api-models.yml @@ -1,4 +1,4 @@ -# Management API Models +--- management_api_models: providers: - name: smash diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-console.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-console.yml similarity index 90% rename from ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-console.yml rename to ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-console.yml index 7779bc6eda4..1b9b99dc48d 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-console.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-console.yml @@ -1,2 +1,3 @@ +--- management_console: idle_timeout: 15 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-cvx.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-cvx.yml similarity index 86% rename from ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-cvx.yml rename to ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-cvx.yml index fac3d13d4db..ba5b329755e 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-cvx.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-cvx.yml @@ -1,4 +1,4 @@ -### MANAGEMENT CVX ### +--- management_cvx: shutdown: false server_hosts: diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-defaults.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-defaults.yml similarity index 61% rename from ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-defaults.yml rename to ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-defaults.yml index 548b893cb69..dfec6efb27a 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-defaults.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-defaults.yml @@ -1,4 +1,4 @@ -### Management Defaults ### +--- management_defaults: secret: hash: md5 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-interfaces.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-interfaces.yml similarity index 95% rename from ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-interfaces.yml rename to ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-interfaces.yml index c23d7afbcd5..c5e40f9991d 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-interfaces.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host1/management-interfaces.yml @@ -1,4 +1,4 @@ -### Management Interfaces ### +--- management_interfaces: - name: Management1 description: OOB_MANAGEMENT diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host2/management-api-http.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host2/management-api-http.yml new file mode 100644 index 00000000000..b800704a142 --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host2/management-api-http.yml @@ -0,0 +1,5 @@ +--- +management_api_http: + enable_http: true + enable_https: false + default_services: false diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host2/management-cvx.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host2/management-cvx.yml new file mode 100644 index 00000000000..3613207f81a --- /dev/null +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/host2/management-cvx.yml @@ -0,0 +1,3 @@ +--- +management_cvx: + shutdown: true diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-api-http.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-api-http.yml deleted file mode 100644 index 144c6775517..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-api-http.yml +++ /dev/null @@ -1,23 +0,0 @@ -# Management API HTTP -management_api_http: - enable_http: false - enable_https: true - https_ssl_profile: SSL_PROFILE - default_services: true - enable_vrfs: - - name: default - access_group: ACL-API - - name: MGMT - access_group: ACL-API - protocol_https_certificate: - certificate: - private_key: - -# Standard ACLs -standard_access_lists: - - name: ACL-API - sequence_numbers: - - sequence: 10 - action: "permit 10.0.0.0/8" - - sequence: 20 - action: "permit 100.0.0.0/8" diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-gnmi-new-flags.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-gnmi-new-flags.yml deleted file mode 100644 index 0ac30a04b72..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-gnmi-new-flags.yml +++ /dev/null @@ -1,13 +0,0 @@ -management_api_gnmi: - provider: "eos-native" - transport: - grpc: - - name: MGMT - ssl_profile: gnmi - vrf: MGMT - notification_timestamp: "send-time" - ip_access_group: acl1 - - name: mytransport - notification_timestamp: "send-time" - ip_access_group: acl1 - port: "6032" diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-gnmi.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-gnmi.yml deleted file mode 100644 index bbab734b2f0..00000000000 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/management-gnmi.yml +++ /dev/null @@ -1,10 +0,0 @@ -management_api_gnmi: - provider: eos-native - transport: - grpc: - - name: MGMT - vrf: MGMT - ip_access_group: ACL-GNMI - - name: MONITORING - vrf: MONITORING - port: 6031 diff --git a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/hosts.yml b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/hosts.yml index 330141633a1..f24d70c5b52 100644 --- a/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/hosts.yml +++ b/ansible_collections/arista/avd/molecule/eos_cli_config_gen/inventory/hosts.yml @@ -33,16 +33,6 @@ test_hosts: logging-match-list: logging-minimal: logging: - management-accounts: - management-api-http: - management-cvx: - management-api-models: - management-gnmi: - management-gnmi-new-flags: - management-gnmi-grpc-tunnel: - management-console: - management-defaults: - management-interfaces: mac-security-eth-po-entropy: mpls: mpls-2: