Service out-of-sync Due to Automatically Generated Configuration on ASR920
We're using a certain service which creates a service instance on an interface on an ASR920. The service instance uses the command mac security sticky in order to restrict the device able to connect to the circuit. When first deployed on the service instance, the mac security sticky command is standalone. When traffic is detected on the interface, the device adds the command mac security sticky address xxxx.xxxx.xxxx where xxxx.xxxx.xxxx is the MAC address of the device detected.
We have an issue where once the MAC address is populated, the device goes out of sync. We are able to perform sync-from on the device to bring in the MAC to the CDB, but this then takes the service out of sync. A re-deploy dry-run shows that the service wants to remove the mac security sticky address command from the service instance.
Our default interface configuration does not include the service instance, so the service is responsible for creating the service instance and everything beneath it in the configuration tree. It seems to me that the service expects to be in control of the entire tree, so when a configuration is added to the tree that it did not create it wants to remove it.
Is there a way to have the service ignore this particular part of the configuration? I am aware of template tag operations, but based on the documentation I wasn't sure that any of them applied. We periodically check for out of sync services so that differences can be resolved. We'd like this service to show in-sync even with the mac security sticky address command added since it is expected that the device will create this configuration automatically.
As you may have seen, we have made the decision to shift NSO Developer Days scheduled for Monday 15th June -Thursday 18th June in Stockholm to an online experience due to concerns about the current outbreak of COVID-19 (Coronavirus). While we a...
Did you ever have a look at the NSO NFVO package, for managing VNFs? It's been around for about five years, and is deployed at a lot of our customers. In the last couple of releases (4.1 and 4.2), we have been working on a GUI, so here is a brief demo:
You need to come to NSO Developer Days this year!
This is not just an event where presenters share about NSO, but a community event - where you can connect with people in a different place than you in their automation journ...
Do you have experiences that you think will benefit the NSO developer community?
Take the opportunity to give a talk at Developer Days in June while joining industry peers from around the world for our days of learning and collaboration.
Call for P...
Hi All I am new to developing as you will see from my code :P, I am a network engineer trying to learn Devops, and I am struggling a bit with create services that apply configs to multiple devices.I am trying to create my own code to create a l3vpn s...