概要
GNS3でNexus9000v×4台＋vJunos-switch×3台を使った環境を構築している。結構リソースを詰め込んで使っていることもあって時々IFがerrdisableになっているときがあり、正常な状態でないことを検知できるようにpyATSを使って自動試験しようと思うに至った。
使用するトポロジー
環境
- ThinkCentre M75q Gen2（8CPUs, Mem64GB）
- Ubuntu 20.04.1 LTS
- GNS3：2.2.42
- pyATS 23.7
GNS3上のNW機器とGNSの外側にいるpyATSを接続できるようにするために、GNS3でCloud Nodeを置いてvirbr0と接続している。
pyATSセットアップ
Install
公式ドキュメント | Getting Started のとおり行うのみ。
testbed.yaml
ググって出てきたサンプルを参考に、踏み台経由でNW機器へ接続するようにproxyを記載した。
devices:
jump_host:
os: linux
type: linux
connections:
ssh:
ip: 192.168.11.55
port: 22
protocol: ssh
credentials:
default:
password: "%ENV{JUMP_HOST_PASS}"
username: ubuntu
LEAF-01:
os: nxos
platform: nxosv
type: NX-OSv
alias: nx-osv-1
connections:
ssh:
ip: 192.168.122.101
protocol: ssh
proxy: jump_host
credentials:
default:
password: "%ENV{DEVICE_PASS}"
username: admin
LEAF-02:
os: nxos
platform: nxosv
type: NX-OSv
alias: nx-osv-2
connections:
ssh:
ip: 192.168.122.102
protocol: ssh
proxy: jump_host
credentials:
default:
password: "%ENV{DEVICE_PASS}"
username: admin
LEAF-03:
os: nxos
platform: nxosv
type: NX-OSv
alias: nx-osv-3
connections:
ssh:
ip: 192.168.122.103
protocol: ssh
proxy: jump_host
credentials:
default:
password: "%ENV{DEVICE_PASS}"
username: admin
SPINE-01:
os: nxos
platform: nxosv
type: NX-OSv
alias: nx-osv-4
connections:
ssh:
ip: 192.168.122.105
protocol: ssh
proxy: jump_host
credentials:
default:
password: "%ENV{DEVICE_PASS}"
username: admin
testbed.yamlのバリデーションをチェックする。interfaceに関するWarning messageが出ているがこれは無視してOK。
(ubuntu) ubuntu@pyats:~$ pyats validate testbed ~/yaml/testbed.yaml
/home/ubuntu/bin/pyats:5: DeprecationWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html
from pyats.cli.__main__ import main
Loading testbed file: /home/ubuntu/yaml/testbed.yaml
--------------------------------------------------------------------------------
Testbed Name:
testbed
Testbed Devices:
.
|-- LEAF-01 [nxos/nxosv]
|-- LEAF-02 [nxos/nxosv]
|-- LEAF-03 [nxos/nxosv]
|-- SPINE-01 [nxos/nxosv]
`-- jump_host [linux/linux]
YAML Lint Messages
------------------
Warning Messages
----------------
- Device 'LEAF-01' has no interface definitions
- Device 'LEAF-02' has no interface definitions
- Device 'LEAF-03' has no interface definitions
- Device 'SPINE-01' has no interface definitions
- Device 'jump_host' has no interface definitions
(ubuntu) ubuntu@pyats:~$
testbed.yamlに書いている装置へ接続してみる。このように機器に接続したり、showコマンドの結果をparseしたりして使うようだ。
(ubuntu) ubuntu@pyats:~$ pyats shell --testbed ~/yaml/testbed.yaml
/home/ubuntu/bin/pyats:5: DeprecationWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html
from pyats.cli.__main__ import main
Welcome to pyATS Interactive Shell
==================================
Python 3.8.10 (default, May 26 2023, 14:05:08)
[GCC 9.4.0]
>>> from pyats.topology.loader import load
>>> testbed = load('/home/ubuntu/yaml/testbed.yaml')
-------------------------------------------------------------------------------
>>>
>>> testbed.devices['LEAF-01'].connect()
2023-08-17 11:45:45,551: %UNICON-INFO: +++ LEAF-01 logfile /tmp/LEAF-01-cli-20230817T114545550.log +++
2023-08-17 11:45:45,557: %UNICON-INFO: connection via proxy jump_host
2023-08-17 11:45:45,562: %UNICON-INFO: +++ connection to spawn: ssh -l ubuntu 192.168.11.55 -p 22, id: 139745503361728 +++
2023-08-17 11:45:45,564: %UNICON-INFO: connection to jump_host
ubuntu@192.168.11.55's password:
ubuntu@gns3:~$
2023-08-17 11:45:45,866: %UNICON-INFO: +++ initializing handle +++
2023-08-17 11:45:45,868: %UNICON-INFO: connection to LEAF-01
ssh -l admin 192.168.122.101
User Access Verification
Password:
Cisco NX-OS Software
Copyright (c) 2002-2021, Cisco Systems, Inc. All rights reserved.
Nexus 9000v software ("Nexus 9000v Software") and related documentation,
files or other reference materials ("Documentation") are
the proprietary property and confidential information of Cisco
Systems, Inc. ("Cisco") and are protected, without limitation,
pursuant to United States and International copyright and trademark
laws in the applicable jurisdiction which provide civil and criminal
penalties for copying or distribution without Cisco's authorization.
Any use or disclosure, in whole or in part, of the Nexus 9000v Software
or Documentation to any third party for any purposes is expressly
prohibited except as otherwise authorized by Cisco in writing.
The copyrights to certain works contained herein are owned by other
third parties and are used and distributed under license. Some parts
of this software may be covered under the GNU Public License or the
GNU Lesser General Public License. A copy of each such license is
available at
http://www.gnu.org/licenses/gpl.html and
http://www.gnu.org/licenses/lgpl.html
***************************************************************************
* Nexus 9000v is strictly limited to use for evaluation, demonstration *
* and NX-OS education. Any use or disclosure, in whole or in part of *
* the Nexus 9000v Software or Documentation to any third party for any *
* purposes is expressly prohibited except as otherwise authorized by *
* Cisco in writing. *
***************************************************************************
LEAF-01#
自動試験
pythonで書けば何でもできるようだが、それだとpyATSを使う意味がないように思ったので標準の機能で試験できるようにしたい。→pyATS learnというものを使えばよさそうだ。
まず通常状態をlearnしておく
learnの対象はさまざまあるようだが今回はroutingを対象とした。learnした結果をv1として保存しておく。
(ubuntu) ubuntu@pyats:~$ pyats learn routing --testbed-file ~/yaml/testbed.yaml --output v1
NW機器で障害を発生させる
LEAF-01でSPINE-01向けIFをshutする。これによりLEAF-01とSPINE-01間のospfネイバーが切れる。
LEAF-01# conf t
Enter configuration commands, one per line. End with CNTL/Z.
LEAF-01(config)# int po2
LEAF-01(config-if)# shut
現在の状態をlearnする
learnした結果をv2として保存する。
(ubuntu) ubuntu@pyats:~$ pyats learn routing --testbed-file ~/yaml/testbed.yaml --output v2
通常状態と現在をdiffする
diffした結果のファイルが作成される。ファイルを見ると差分が表示されており、ネイバーが切れていたりnext-hopが変わったことが分かる。
(ubuntu) ubuntu@pyats:~$ pyats diff v1 v2 --output diff-file
(ubuntu) ubuntu@pyats:~$ ls ./diff-file/
diff_routing_nxos_LEAF-01_ops.txt diff_routing_nxos_LEAF-02_ops.txt diff_routing_nxos_LEAF-03_ops.txt diff_routing_nxos_SPINE-01_ops.txt
//
(ubuntu) ubuntu@pyats:~$ cat ./diff-file/diff_routing_nxos_LEAF-01_ops.txt
--- v1/routing_nxos_LEAF-01_ops.txt
+++ v2/routing_nxos_LEAF-01_ops.txt
info:
vrf:
default:
address_family:
ipv4:
routes:
192.168.1.4/32:
next_hop:
next_hop_list:
1:
- next_hop: 192.168.2.21
+ next_hop: 192.168.2.38
- outgoing_interface: Port-channel2
+ outgoing_interface: Vlan102
- 2:
- index: 2
- next_hop: 192.168.2.38
- outgoing_interface: Vlan102
- updated: 00:56:55
192.168.2.24/30:
- metric: 40
+ metric: 60
next_hop:
next_hop_list:
1:
- next_hop: 192.168.2.21
+ next_hop: 192.168.2.38
- outgoing_interface: Port-channel2
+ outgoing_interface: Vlan102
2.2.2.2/32:
next_hop:
next_hop_list:
1:
- next_hop: 192.168.2.21
+ next_hop: 192.168.2.38
- outgoing_interface: Port-channel2
+ outgoing_interface: Vlan102
- 2:
- index: 2
- next_hop: 192.168.2.38
- outgoing_interface: Vlan102
- updated: 00:59:02
- 192.168.2.20/30:
- active: True
- metric: 0
- next_hop:
- next_hop_list:
- 1:
- index: 1
- next_hop: 192.168.2.22
- outgoing_interface: Port-channel2
- updated: 00:01:36
- route: 192.168.2.20/30
- route_preference: 0
- source_protocol: direct
- 192.168.2.22/32:
- active: True
- metric: 0
- next_hop:
- next_hop_list:
- 1:
- index: 1
- next_hop: 192.168.2.22
- outgoing_interface: Port-channel2
- updated: 00:01:36
- route: 192.168.2.22/32
- route_preference: 0
- source_protocol: local
- 192.168.2.28/30:
- active: True
- metric: 40
- next_hop:
- next_hop_list:
- 1:
- index: 1
- next_hop: 192.168.2.21
- outgoing_interface: Port-channel2
- updated: 00:00:41
- route: 192.168.2.28/30
- route_preference: 110
- source_protocol: ospf
- 3.3.3.3/32:
- active: True
- metric: 41
- next_hop:
- next_hop_list:
- 1:
- index: 1
- next_hop: 192.168.2.21
- outgoing_interface: Port-channel2
- updated: 00:00:34
- route: 3.3.3.3/32
- route_preference: 110
- source_protocol: ospf
- 5.5.5.5/32:
- active: True
- metric: 21
- next_hop:
- next_hop_list:
- 1:
- index: 1
- next_hop: 192.168.2.21
- outgoing_interface: Port-channel2
- updated: 00:01:21
- route: 5.5.5.5/32
- route_preference: 110
- source_protocol: ospf
まとめ
すべてpythonで書くのであれば、paramikoやnetmikoを使ってssh接続して情報取得したものをparseしたほうが早い気がする。ただ、pyATSで出来ることは他にもいろいろあるようなので、使いこなしていくと使い入れが出てくるかもしれない。