About jjgrinwis

jjgrinwis · ‎06-11-2018

hmm,good one. tested with tailf:link, that's working fine: --- import resource-allocator { prefix ralloc; } import id-allocator { prefix idalloc; } leaf pw-id { description "id_allocator script will use resource-manager to reserve id in pw-id id-pool. We link to result using tailf:link extension"; tailf:link "/ralloc:resource-pools/idalloc:id-pool[idalloc:name='pw-id']/idalloc:allocation[idalloc:id=current()/../name]/idalloc:response/idalloc:id"; type uint32; } --- admin@ncs> show services l2vpn pw-id PW NAME ID --------------- blabla 101 testtest 100 admin@ncs> show resource-pools id-pool pw-id NAME ID ERROR ID ----------------------------- pw-id blabla - 101 testtest - 100

jjgrinwis · ‎06-11-2018

thanx for the answer. I'm now just writing the selected pw-id as operational data of the service: --- with ncs.maapi.single_write_trans(tctx.username, 'system', db=ncs.OPERATIONAL) as t: t.set_elem(pw_id, path) t.apply() self.log.info('pw-id added as operational data to model') --- admin@ncs> show services l2vpn pw-id PW NAME ID ------------ test1 100 test2 101

jjgrinwis · ‎06-06-2018

Hi, doing some tests with the resource manager package. It's all working fine and ID allocted for a newly provisioned l2vpn service. admin@ncs> show resource-pools id-pool pw-id NAME ID ERROR ID ------------------------------ pw-id testtest2 - 101 But is there a way to point from our service back to this id as operational data. I can lookup the ID using normal xpath: $ ncs_cmd -c "xe /ralloc:resource-pools/id-pool[name='pw-id']/allocation[id='testtest2']/response/id" XPATH_TRACE: exists("/ralloc:resource-pools/id-pool{pw-id}") = true XPATH_TRACE: exists("/ralloc:resource-pools/id-pool{pw-id}/allocation{testtest2}") = true XPATH_TRACE: get_elem("/ralloc:resource-pools/id-pool{pw-id}/allocation{testtest2}/response/id") = 101 101 So can we do something like this: admin@ncs> show services l2vpn pw-id PW NAME ID --------------- testtest2 - Where it then will return the selected PW ID. tried YANG code below to point back to our id but that doesn't seem to work leaf id-pool { tailf:info "provide pool to get vpn-ids from"; type leafref { path "/ralloc:resource-pools/idalloc:id-pool/idalloc:name"; } mandatory true; } leaf pw-id { tailf:info "unique l2vpn pw id"; type leafref { // we can't use static names in leafref so need to configure id-pool to get id path "/ralloc:resource-pools/idalloc:id-pool[idalloc:name=current()/../id-pool]/idalloc:allocation[idalloc:id=current()/../name]/idalloc:response/idalloc:id"; } config false; } Regards, John

jjgrinwis · ‎04-27-2018

Hello Larry, config is not present when we apply the service and it's a very basic service, no RFM in action. The only thing thats different is that we had to make some changes to the junos YANG model as the 1g option was missing. John

jjgrinwis · ‎04-26-2018

HI, we're testing a server-template where we set the speed option to 1Gbit/s for certain interfaces. The config is working fine, configuration being added but commit dry-run not showing it: ncs% commit dry-run | debug template ... O peration 'merge' on non-existing node: /devices/device[name='test']/config/junos:configuration/interfaces/interface[name='xe-0/1/4']/gigether-options/speed (from file "ptp-template.xml", line 13) Fetching literal "1g" (from file "ptp-template.xml", line 13) Setting /devices/device[name='test']/config/junos:configuration/interfaces/interface[name='xe-0/1/4']/gigether-options/speed to "1g" ... But when we look at the "commit dry-run" output, it's not showing the 1g setting but it is applying it to the device. Anyone any idea why commit-dry run is not showing a config part which is being applied to the device. And the 1g config is not present when we apply the service. Regards, John Grinwis

jjgrinwis · ‎04-12-2018

I guess you want this, applying a template to a device:

jjgrinwis · ‎04-11-2018

We upgraded to the latest version which solved our issue.

jjgrinwis · ‎03-26-2018

Hi, a customer of us is doing some tests with exnternal authentication. They can login via the CLI, are assigned to a group and can provision a service. But when they want to do a re-deploy of the same service, they are getting an access-denied error: test@ncs> request services core-link uuid-20180313-16:51:00 re-deploy Error: access denied When we have a look in the audit trail: <INFO> 14-Mar-2018::16:44:39.481 nso-01-tst ncs[26047]: audit user: test/51 assigned to groups: ncsadmin <INFO> 14-Mar-2018::16:44:52.104 nso-01-tst ncs[26047]: audit user: test/51 CLI ‘request services core-link uuid-20180313-16:51:00 re-deploy’ <INFO> 14-Mar-2018::16:44:52.134 nso-01-tst ncs[26047]: audit user: test/52 assigned to groups: <INFO> 14-Mar-2018::16:44:52.153 nso-01-tst ncs[26047]: audit user: test/51 CLI aborted It looks like assigned to groups is empty When I have a look in our environment with only a couple of local users and do a re-deploy of a service: <INFO> 26-Mar-2018::17:06:45.865 nso ncs[1875]: audit user: test/6569 CLI 'request services vcompartiment vcompartiment13 re-deploy' <INFO> 26-Mar-2018::17:06:45.867 nso ncs[1875]: audit user: test/6577 assigned to groups: admin <INFO> 26-Mar-2018::17:06:46.078 nso ncs[1875]: audit user: test/6569 CLI done User is assigned to local admin group and we can provision en re-deploy the service without any problem. Any idea what might be the problem here?

jjgrinwis · ‎02-12-2018

The "unsafe" option did the trick: admin@ncs> show configuration devices global-settings commit-queue error-recovery { mode unsafe; } After setting it to "unsafe" we can dump the a-sync request in NSO and off it goes: admin@ncs> show devices commit-queue KILO BYTES WAITING TRANSIENT IS ID TAG AGE STATUS SIZE DEVICES FOR ERRORS COMPLETED ATOMIC NAME REASON NODE ID ------------------------------------------------------------------------------------------------------------------- 1518455025571 - 8 executing 1 [ CE1 ] - - - true 1518455026352 - 7 blocked 1 [ CE1 ] [ CE1 ] - - true 1518455027109 - 6 blocked 1 [ CE1 ] [ CE1 ] - - true 1518455027862 - 6 blocked 1 [ CE1 ] [ CE1 ] - - true 1518455028523 - 5 blocked 1 [ CE1 ] [ CE1 ] - - true 1518455029234 - 4 executing 1 [ CE2 ] - - - true 1518455029928 - 3 executing 1 [ CE3 ] - - - true 1518455030597 - 3 executing 1 [ CE4 ] - - - true 1518455031395 - 2 blocked 1 [ CE1 ] [ CE1 ] - - true

jjgrinwis · ‎02-09-2018

Hi, I'm doing some tests with a couple of REST calls to provision several instances of a service on a device. When not using the async commit queue, all working fine. But with the option async-commit-queue, first service REST call is fine but second service we're getting an error: "Commit failed because commit queue item 1518197981496 has an overlapping service or device modification.", Should the async-commit-queue option not place the request on the queue for this device and just commit them one-by-one to the device? Regards, John Grinwis

jjgrinwis · ‎07-06-2017

how do we invoke an rpc-call from the CLI or REST with a payload to clear the log? URI should be: http://{{server}}/api/running/devices/device/mx01/rpc/jrpc:rpc-clear-log/_operations/clear-log but what's the format of the <filename> in the body to send in the POST.

jjgrinwis · ‎07-06-2017

Just found it : http:// {{server}}/api/operational/devices/device/mx01/live-status/IF-MIB/ifTable/ifEntry/537?select=ifName;ifInErrors;ifMtu <ifEntry xmlns="urn:ietf:params:xml:ns:yang:smiv2:IF-MIB" xmlns:y=" http://tail-f.com/ns/rest " xmlns:if-mib="urn:ietf:params:xml:ns:yang:smiv2:IF-MIB" xmlns:ncs=" http://tail-f.com/ns/ncs "> <ifMtu>1500</ifMtu> <ifInErrors>0</ifInErrors> <ifName>xe-2/0/2.0</ifName> </ifEntry>

jjgrinwis · ‎07-05-2017

Hi, we compiled some MIBs, configured our device to use SNMP(RO) and can get live-status information from our device via the CLI admin@ncs> show devices device router01 live-status IF-MIB ifTable ifEntry 650 ifName ifName xe-2/0/2.0 Is it possible to get the same information via the REST interface and what would be the URI? Regards, John

jjgrinwis · ‎09-11-2016

hi, We can build EPG's, modify all kind of parameters of the EPG with the ACI Toolkit but is there any way to attach a monitoring policy. Looks like i'm missing the MonPolDn from the EPG object. Regards John

jjgrinwis · ‎03-30-2016

Hmm, look like there is no support for dvsVersion 6.0: admin@ncs> request devices device aci.t-i.demo disconnect [ok][2016-03-30 21:21:00] admin@ncs> request devices device aci.t-i.demo connect result true info (admin) Connected to aci.t-i.demo - 10.160.50.5:443 [ok][2016-03-30 21:21:05] admin@ncs> request devices device aci.t-i.demo sync-from result false info Network Element Driver error econnrefused for device aci.t-i.demo: Trace : [java.lang.NullPointerException] com.tailf.packages.ned.ciscoApicdc.XmlUtil.addSubtree(XmlUtil.java:370) com.tailf.packages.ned.ciscoApicdc.XmlUtil.getSubTrees(XmlUtil.java:283) com.tailf.packages.ned.ciscoApicdc.XmlUtil.getDeviceConfig(XmlUtil.java:230) com.tailf.packages.ned.ciscoApicdc.CiscoApicdcNed.getCompleteConfigFromFile(CiscoApicdcNed.java:931) com.tailf.packages.ned.ciscoApicdc.CiscoApicdcNed.show(CiscoApicdcNed.java:581) com.tailf.ned.NedWorker.dorun(NedWorker.java:1578) com.tailf.ned.NedWorker.run(NedWorker.java:292) [ok][2016-03-30 21:21:54] From the ncs-java-vm.log: <ERROR> 30-Mar-2016::21:18:45.719 CiscoApicdcNed Ned-Worker-Thread-0: - com.tailf.conf.ConfException: Error on line 130: invalid value for: dvsVersion in /ncs:devices/ncs:device[n cs:name='aci.t-i.demo']/ncs:config/cisco-apicdc:apic/cisco-apicdc:vmmProvP[cisco-apicdc:vendor='VMware']/cisco-apicdc:vmmDomP[cisco-apicdc:name='aci']/cisco-apicdc:vmmCtrlrP[cisco -apicdc:name='vc02.t-i.demo']/cisco-apicdc:dvsVersion: "6.0" is an invalid value. <ERROR> 30-Mar-2016::21:18:46.133 CiscoApicdcNed Ned-Worker-Thread-0: - java.lang.NullPointerException <ERROR> 30-Mar-2016::21:18:46.134 NedWorker Ned-Worker-Thread-0: - NedWorker error for ned_show_generic com.tailf.ned.NedException: at com.tailf.packages.ned.ciscoApicdc.CiscoApicdcNed.show(CiscoApicdcNed.java:590) at com.tailf.ned.NedWorker.dorun(NedWorker.java:1578) at com.tailf.ned.NedWorker.run(NedWorker.java:292) Caused by: java.lang.NullPointerException at com.tailf.packages.ned.ciscoApicdc.XmlUtil.addSubtree(XmlUtil.java:370) at com.tailf.packages.ned.ciscoApicdc.XmlUtil.getSubTrees(XmlUtil.java:283) at com.tailf.packages.ned.ciscoApicdc.XmlUtil.getDeviceConfig(XmlUtil.java:230) at com.tailf.packages.ned.ciscoApicdc.CiscoApicdcNed.getCompleteConfigFromFile(CiscoApicdcNed.java:931) at com.tailf.packages.ned.ciscoApicdc.CiscoApicdcNed.show(CiscoApicdcNed.java:581)

jjgrinwis · 06-11-2018

hmm,good one.tested with tailf:link, that's working fine:---import resource-allocator { prefix rallo...

jjgrinwis · 06-11-2018

thanx for the answer.I'm now just writing the selected pw-id as operational data of the service:---w...

jjgrinwis · 06-06-2018

Hi,doing some tests with the resource manager package.It's all working fine and ID allocted for a ne...

jjgrinwis · 04-27-2018

Hello Larry,config is not present when we apply the service and it's a very basic service, no RFM in...

jjgrinwis · 04-26-2018

HI,we're testing a server-template where we set the speed option to 1Gbit/s for certain interfaces.T...

jjgrinwis · 04-12-2018

I guess you want this, applying a template to a device:

jjgrinwis · 04-11-2018

We upgraded to the latest version which solved our issue.

jjgrinwis · 03-26-2018

Hi,a customer of us is doing some tests with exnternal authentication. They can login via the CLI, a...

jjgrinwis · 02-12-2018

The "unsafe" option did the trick:admin@ncs> show configuration devices global-settings commit-queue...

jjgrinwis · 02-09-2018

Hi,I'm doing some tests with a couple of REST calls to provision several instances of a service on a...

jjgrinwis · 07-06-2017

how do we invoke an rpc-call from the CLI or REST with a payload to clear the log?URI should be: htt...

jjgrinwis · 07-06-2017

Just found it :http://{{server}}/api/operational/devices/device/mx01/live-status/IF-MIB/ifTable/ifEn...

jjgrinwis · 07-05-2017

Hi,we compiled some MIBs, configured our device to use SNMP(RO) and can get live-status information ...

jjgrinwis · 09-11-2016

hi,We can build EPG's, modify all kind of parameters of the EPG with the ACI Toolkit but is there an...

jjgrinwis · 03-30-2016

Hmm, look like there is no support for dvsVersion 6.0:admin@ncs> request devices device aci.t-i.demo...

Date Registered	‎01-05-2012 05:00 AM
Date Last Visited	‎01-03-2019 05:49 AM
Total Messages Posted	38
Total Helpful Votes Received	7

Re: leafref to allocated pw-id using re...

Re: leafref to allocated pw-id using re...

leafref to allocated pw-id using resour...

Re: commit-dry run not showing config e...

commit-dry run not showing config entry...

Re: Execute config-template XML using A...

Re: group assignment error during re-de...

group assignment error during re-deploy

Re: async-commit-queue, one device mult...

async-commit-queue, one device multiple...

Re: live-status show command execution ...

Re: live-status via REST

live-status via REST

how to attach monitoring poiicy to EPG

Re: nso and aci

Re: leafref to allocated pw-id using resource-manager bundle

Re: leafref to allocated pw-id using resource-manager bundle

leafref to allocated pw-id using resource-manager bundle

Re: commit-dry run not showing config entry being added

commit-dry run not showing config entry being added

Re: Execute config-template XML using API

Re: group assignment error during re-deploy

group assignment error during re-deploy

Re: async-commit-queue, one device multiple service instance

async-commit-queue, one device multiple service instance

Re: live-status show command execution on Junos

Re: live-status via REST

live-status via REST

how to attach monitoring poiicy to EPG

Re: nso and aci