8 changed files with 356 additions and 329 deletions
Unified View
Diff Options
-
+68 -0includes/junos-v21-core-router/chassis.j2
-
+51 -0includes/junos-v21-core-router/forwarding-options.j2
-
+33 -0includes/junos-v21-core-router/groups.j2
-
+95 -0includes/junos-v21-core-router/interfaces.j2
-
+16 -0includes/junos-v21-core-router/macros.j2
-
+8 -0includes/junos-v21-core-router/routing-options.j2
-
+79 -0includes/junos-v21-core-router/system.j2
-
+6 -329junos-v21-core-router.j2
@ -0,0 +1,68 @@ |
|||||
|
{%- set lag_interfaces = [] %} |
||||
|
{%- for interface, subinterfaces in device|get_interfaces|subinterfaces(".") %} |
||||
|
{%- if interface.type.value == 'lag' %}{%- do lag_interfaces.append(interface) %}{%- endif %} |
||||
|
{%- endfor %} |
||||
|
|
||||
|
chassis { |
||||
|
maximum-ecmp 16; |
||||
|
redundancy { |
||||
|
routing-engine 0 master; |
||||
|
routing-engine 1 backup; |
||||
|
failover { |
||||
|
on-loss-of-keepalives; |
||||
|
on-re-to-fpc-stale; |
||||
|
on-disk-failure; |
||||
|
on-loss-of-vm-host-connection; |
||||
|
} |
||||
|
graceful-switchover; |
||||
|
} |
||||
|
aggregated-devices { |
||||
|
ethernet { |
||||
|
device-count {{ lag_interfaces|length }}; |
||||
|
} |
||||
|
} |
||||
|
fpc 0 { |
||||
|
pic 0 { |
||||
|
number-of-ports 0; |
||||
|
} |
||||
|
pic 1 { |
||||
|
port 0 { |
||||
|
speed 100g; |
||||
|
} |
||||
|
port 1 { |
||||
|
speed 100g; |
||||
|
} |
||||
|
port 2 { |
||||
|
speed 100g; |
||||
|
} |
||||
|
port 3 { |
||||
|
speed 100g; |
||||
|
} |
||||
|
port 4 { |
||||
|
speed 100g; |
||||
|
} |
||||
|
port 5 { |
||||
|
speed 100g; |
||||
|
} |
||||
|
port 6 { |
||||
|
speed 100g; |
||||
|
} |
||||
|
port 7 { |
||||
|
speed 100g; |
||||
|
} |
||||
|
port 8 { |
||||
|
speed 100g; |
||||
|
} |
||||
|
port 9 { |
||||
|
speed 100g; |
||||
|
} |
||||
|
port 10 { |
||||
|
speed 100g; |
||||
|
} |
||||
|
port 11 { |
||||
|
speed 40g; /* XXX temporary for testing lab */ |
||||
|
} |
||||
|
} |
||||
|
} |
||||
|
network-services enhanced-ip; |
||||
|
} |
||||
@ -0,0 +1,51 @@ |
|||||
|
forwarding-options { |
||||
|
sampling { |
||||
|
input { |
||||
|
rate 10000; |
||||
|
run-length 0; |
||||
|
max-packets-per-second 50000; |
||||
|
} |
||||
|
} |
||||
|
load-balance { |
||||
|
per-flow { |
||||
|
hash-seed; |
||||
|
} |
||||
|
} |
||||
|
hash-key { |
||||
|
family inet { |
||||
|
layer-3; |
||||
|
layer-4; |
||||
|
symmetric-hash; |
||||
|
} |
||||
|
family inet6 { |
||||
|
layer-3; |
||||
|
layer-4; |
||||
|
} |
||||
|
family mpls { |
||||
|
label-1; |
||||
|
label-2; |
||||
|
label-3; |
||||
|
payload { |
||||
|
ether-pseudowire; |
||||
|
ip { |
||||
|
port-data; |
||||
|
} |
||||
|
} |
||||
|
} |
||||
|
family multiservice { |
||||
|
source-mac; |
||||
|
destination-mac; |
||||
|
payload { |
||||
|
ip { |
||||
|
layer-3; |
||||
|
layer-4; |
||||
|
} |
||||
|
} |
||||
|
} |
||||
|
} |
||||
|
enhanced-hash-key { |
||||
|
family mpls { |
||||
|
ether-pseudowire zero-control-word; |
||||
|
} |
||||
|
} |
||||
|
} |
||||
@ -0,0 +1,33 @@ |
|||||
|
groups { |
||||
|
{%- set re_groups = [] %} |
||||
|
{%- for interface, subinterfaces in device|get_interfaces|subinterfaces(".") %} |
||||
|
{%- if '@' in interface.name %} |
||||
|
{%- set re = interface.name.split("@")[1] %} |
||||
|
{%- do re_groups.append( re ) %} |
||||
|
{%- set interface_name = interface.name.split("@")[0] %} |
||||
|
{%- set interface_context = interface.tags|get_netbox_tags_contexts|contexts_merge_last %} |
||||
|
{{ re }} { |
||||
|
system { |
||||
|
host-name {{ re }}.{{ device.name }}; |
||||
|
services { |
||||
|
ssh; |
||||
|
} |
||||
|
} |
||||
|
interfaces { |
||||
|
{{ interface_name}} { |
||||
|
unit 0 { |
||||
|
family inet { |
||||
|
{%- for address in interface|get_addresses %}{% if address|ipv4 %} |
||||
|
address {{ address.address }}; |
||||
|
{%- endif %}{%- endfor %} |
||||
|
} |
||||
|
} |
||||
|
} |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
{%- endif %} |
||||
|
{%- endfor %} |
||||
|
} |
||||
|
|
||||
|
apply-groups [ {% for re in re_groups %}{{ re }}{% if not loop.last %} {% endif %}{% endfor %} ]; |
||||
@ -0,0 +1,95 @@ |
|||||
|
interfaces { |
||||
|
|
||||
|
{%- for interface, subinterfaces in device|get_interfaces|subinterfaces(".") %} |
||||
|
{%- set interface_context = interface.tags|get_netbox_tags_contexts|contexts_merge_last %} |
||||
|
|
||||
|
{%- set interface_tags = [] %} |
||||
|
{%- for tag in interface.tags %} |
||||
|
{%- do interface_tags.append(tag.slug) %} |
||||
|
{%- endfor %} |
||||
|
|
||||
|
{%- if '@' in interface.name %} |
||||
|
/* groups interface: {{ interface.name }} */ |
||||
|
|
||||
|
{%- elif interface.mgmt_only %} |
||||
|
/* management interface: {{ interface.name }} */ |
||||
|
|
||||
|
{%- elif 'no-automation' in interface_tags %} |
||||
|
/* do not configure: {{ interface.name }} */ |
||||
|
|
||||
|
{% elif interface.lag %} |
||||
|
{{ interface.name }} { |
||||
|
{{ macros.interface_description(interface, interface_context) }} |
||||
|
gigether-options { |
||||
|
802.3ad {{ interface.lag.name }}; |
||||
|
} |
||||
|
|
||||
|
{%- elif interface.name.startswith( 'lo' ) %} |
||||
|
{{ interface.name }} { |
||||
|
{{ macros.interface_description(interface, interface_context) }} |
||||
|
{%- for unit, subinterface in subinterfaces %} |
||||
|
unit {{ unit }} { |
||||
|
{%- if subinterface.untagged_vlan %} |
||||
|
vlan-id {{ subinterface.untagged_vlan.vid }}; |
||||
|
{%- elif unit|int %} |
||||
|
vlan-id {{ unit }}; |
||||
|
{%- endif %} |
||||
|
{%- set subinterface_context = subinterface.tags|get_netbox_tags_contexts|contexts_merge_last %} |
||||
|
{# interface_vrf(subinterface, subinterface_context) #} |
||||
|
{# interface_common(subinterface, subinterface_context) #} |
||||
|
{{ macros.interface_addresses(subinterface, subinterface_context) }} |
||||
|
} |
||||
|
{%- endfor %} |
||||
|
|
||||
|
{%- elif interface.type.value == 'lag' %} |
||||
|
{{ interface.name }} { |
||||
|
vlan-tagging; |
||||
|
aggregated-ether-options { |
||||
|
minimum-links 1; |
||||
|
link-speed 100g; |
||||
|
} |
||||
|
{{ macros.interface_description(interface, interface_context) }} |
||||
|
{# interface_common(interface, interface_context) #} |
||||
|
|
||||
|
{%- elif interface.type.value != 'virtual' %} |
||||
|
{{ interface.name }} { |
||||
|
{{ macros.interface_description(interface) }} |
||||
|
|
||||
|
{%- if not interface.mode or ( interface.mode.value == 'access' ) %} |
||||
|
unit 0 { |
||||
|
{# interface_vrf(interface, interface_context) #} |
||||
|
{# interface_common(interface, interface_context) #} |
||||
|
{{ macros.interface_addresses(interface, interface_context) }} |
||||
|
} |
||||
|
{%- elif interface.mode.value == 'tagged' %} |
||||
|
vlan-tagging; |
||||
|
{%- endif %} |
||||
|
|
||||
|
{%- endif %} |
||||
|
|
||||
|
{%- if ( not interface.mgmt_only ) and ( 'no-automation' not in interface_tags ) and ( '@' not in interface.name ) %} |
||||
|
{%- for tagged_vlan in interface.tagged_vlans %}{%- endfor %} |
||||
|
|
||||
|
{%- if interface.mode.value == 'tagged' %} |
||||
|
{%- for unit, subinterface in subinterfaces %} |
||||
|
unit {{ unit }} { |
||||
|
{%- if subinterface.untagged_vlan %} |
||||
|
vlan-id {{ subinterface.untagged_vlan.vid }}; |
||||
|
{%- elif unit|int %} |
||||
|
vlan-id {{ unit }}; |
||||
|
{%- endif %} |
||||
|
{%- set subinterface_context = subinterface.tags|get_netbox_tags_contexts|contexts_merge_last %} |
||||
|
{# interface_vrf(subinterface, subinterface_context) #} |
||||
|
{# interface_common(subinterface, subinterface_context) #} |
||||
|
{{ macros.interface_addresses(subinterface, subinterface_context) }} |
||||
|
} |
||||
|
{%- endfor %} |
||||
|
{%- endif %} |
||||
|
} |
||||
|
{%- endif %} |
||||
|
|
||||
|
{%- endfor %} |
||||
|
fxp0 { |
||||
|
unit 0; |
||||
|
} |
||||
|
} |
||||
@ -0,0 +1,16 @@ |
|||||
|
{%- macro interface_description(interface, interface_context) %} |
||||
|
description "{% if interface.label %}{{ interface.label|replace('"','\\"') or "-" }}: {% endif %}{{ interface.description|replace('"','\\"') or "-" }}{% if interface.connected_endpoint %} ({{ interface.connected_endpoint.name|replace('"','\\"')|replace('.voneus.net','') }}{% if interface.connected_endpoint.device.name %} @ {{ interface.connected_endpoint.device.name|replace('.voneus.net','')|replace('"','\\"') }}{% endif %}){% endif %}{% if interface.cable %} via [{{ interface.cable.label.split("/")[-1] }}]{% endif %}{% if interface.link_peer %} to [{{ interface.link_peer.label or interface.link_peer.name }}{% if interface.link_peer.device %} @ {{ interface.link_peer.device.name.split("/")[-1]|replace('"','\\"')|replace('.voneus.net','') }}]{% endif %}{% endif %}" |
||||
|
{%- endmacro %} |
||||
|
|
||||
|
{%- macro interface_addresses(interface, interface_context) %} |
||||
|
family inet { |
||||
|
{%- for address in interface|get_addresses %}{% if address|ipv4 %} |
||||
|
address {{ address.address }} |
||||
|
{%- endif %}{%- endfor %} |
||||
|
} |
||||
|
family inet6 { |
||||
|
{%- for address in interface|get_addresses %}{% if address|ipv6 %} |
||||
|
address {{ address.address }} |
||||
|
{%- endif %}{%- endfor %} |
||||
|
} |
||||
|
{%- endmacro %} |
||||
@ -0,0 +1,8 @@ |
|||||
|
routing-options { |
||||
|
static { |
||||
|
{%- for (route, route_data) in device.config_context.get('routes',{}).items() %} |
||||
|
route {{ route }} next-hop {{ route_data.get('next-hop', None) }}; |
||||
|
{%- endfor %} |
||||
|
} |
||||
|
nonstop-routing; |
||||
|
} |
||||
@ -0,0 +1,79 @@ |
|||||
|
system { |
||||
|
root-authentication { |
||||
|
encrypted-password "$6$uC87jp7U$04FIKNRT3VcUzqDiaxKVRVqnQM2c48Q2NpIARsSuKVVK7gezNX92B7261QV.kRHg.yswiDhUY.SF4e/qgRNdL0"; ## SECRET-DATA |
||||
|
} |
||||
|
commit synchronize; |
||||
|
login { |
||||
|
user faelix { |
||||
|
full-name "FAELIX NOC"; |
||||
|
uid 2000; |
||||
|
class super-user; |
||||
|
authentication { |
||||
|
encrypted-password "$6$4sVD2r4y$PjAIeLZ/tJcDhsQekJI9wU2l4xYf8k6mHuzvLivK2tcFXdcHMjP23Up/oUzMRWiVtEW99foiEWuXG40tL5cHy0"; |
||||
|
ssh-ed25519 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM05RD1X1njHcJvPTGbaCkO7rssp6T8uTCH3b6Sk4MA9 maz@lifting-shadows"; |
||||
|
} |
||||
|
} |
||||
|
user voneus { |
||||
|
full-name "Voneus NOC"; |
||||
|
uid 2001; |
||||
|
class super-user; |
||||
|
authentication { |
||||
|
encrypted-password "$6$4sVD2r4y$PjAIeLZ/tJcDhsQekJI9wU2l4xYf8k6mHuzvLivK2tcFXdcHMjP23Up/oUzMRWiVtEW99foiEWuXG40tL5cHy0"; |
||||
|
ssh-ed25519 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM05RD1X1njHcJvPTGbaCkO7rssp6T8uTCH3b6Sk4MA9 maz@lifting-shadows"; |
||||
|
} |
||||
|
} |
||||
|
user nomios { |
||||
|
full-name "Nomios NOC"; |
||||
|
uid 2002; |
||||
|
class super-user; |
||||
|
authentication { |
||||
|
encrypted-password "$6$4sVD2r4y$PjAIeLZ/tJcDhsQekJI9wU2l4xYf8k6mHuzvLivK2tcFXdcHMjP23Up/oUzMRWiVtEW99foiEWuXG40tL5cHy0"; |
||||
|
ssh-ed25519 "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM05RD1X1njHcJvPTGbaCkO7rssp6T8uTCH3b6Sk4MA9 maz@lifting-shadows"; |
||||
|
} |
||||
|
} |
||||
|
} |
||||
|
services { |
||||
|
ssh; |
||||
|
} |
||||
|
authentication-order [ password radius ]; |
||||
|
syslog { |
||||
|
file interactive-commands { |
||||
|
interactive-commands any; |
||||
|
} |
||||
|
file messages { |
||||
|
any notice; |
||||
|
authorization info; |
||||
|
} |
||||
|
} |
||||
|
processes { |
||||
|
dhcp-service { |
||||
|
traceoptions { |
||||
|
file dhcp_logfile size 10m; |
||||
|
level all; |
||||
|
flag packet; |
||||
|
} |
||||
|
} |
||||
|
} |
||||
|
domain-name core.voneus.net; |
||||
|
domain-search [ core.voneus.net oob.core.voneus.net netops.voneus.net ]; |
||||
|
time-zone Universal; |
||||
|
location country-code UK; |
||||
|
name-server { |
||||
|
9.9.9.9; |
||||
|
1.1.1.1; |
||||
|
8.8.8.8; |
||||
|
} |
||||
|
radius-server { |
||||
|
{% for radius_server, radius_data in device.config_context.get('radius-servers',{}).items() %} |
||||
|
{{ radius_server }} secret "{{ radius_data.get('secret') }}";{% endfor %} |
||||
|
} |
||||
|
accounting { |
||||
|
events login; |
||||
|
destination { |
||||
|
radius; |
||||
|
} |
||||
|
} |
||||
|
ntp { |
||||
|
server 185.134.196.169 prefer; |
||||
|
} |
||||
|
} |
||||