topic Re: REST API for CLI "default interface" in NSO Developer Hub Discussions

REST API for CLI "default interface"

smansor — Fri, 01 Mar 2019 11:58:03 GMT

Hi,

Apologies if I'm asking silly question - but there is no mechanism for REST api to send command "default interface xxx", am I right?

Reason I'm asking is currently I'm trying to apply rule policies, and one of the requirement from customer is REST api must not reset interface loopback config (CLI = "default interface Loopback xx").

So it's safe to say since REST can't issue that CLI, it should be fine?

I can apply rule to cover "no interface Loopback xx" scenario - just hoping that I don't have to create another policy rule for restricting "default interface Loopback xx"?

Thanks in advance!

Re: REST API for CLI "default interface"

KJ Rossavik — Mon, 21 Aug 2017 10:00:49 GMT

If the command is supported by the NED, then you can do this over the REST interface. If the command is missing in the NED, then you can request it: Detailed process regarding NSO and NED support

Re: REST API for CLI "default interface"

Akira Iwamoto — Tue, 22 Aug 2017 03:27:05 GMT

NSO REST can send the command by live-status feature.

admin@ncs# conf
Entering configuration mode terminal
admin@ncs(config)# devices device csr1kv config default interface Loopback 100
result
Interface Loopback100 set to default configuration
CSR1000v(config)#
admin@ncs(config)#

This is an action, and you can exec it from REST as well.

$ curl -X POST -u admin:admin  \
http://localhost:8080/api/operations/devices/device/csr1kv/config/ios:EXEC/default \
-H "Content-Type: application/vnd.yang.data+json" \
-d '{"input": {"args" : "interface Loopback 100"}}'
{
  "tailf-ned-cisco-ios:output": {
      "result": "\r\nInterface Loopback100 set to default configuration\r\nCSR1000v(config)#"
    }
 }

You would need to perform sync-from after the execution, otherwise the config may be out-of-sync.

Regards,

Akira

Re: REST API for CLI "default interface"

smansor — Tue, 22 Aug 2017 03:30:58 GMT

Ah - ok so REST will be able to send CLI command directly on top of using NED.

Ok I think another way for me is to use AAA - rule list to restrict it then.

Thank you Akira-san!

Re: REST API for CLI "default interface"

gschudel — Tue, 22 Aug 2017 19:04:06 GMT

You may also wish to review this post:

https://communities.cisco.com/thread/84801

where the discussion was about restricting certain device configs using NSO tfcp:policy rules...

there were several nice examples provided.