Hi I have installed PyATS on an Ubuntu 16.04 LTS VM... see below kaj0103@ubuntu:~/NPA$ pyats version You are currently running pyATS version: 19.0 Python: 3.5.2 [64bit] Package Version -------------------- ------- pyats 19.0 pyats.aereport 19.0 pyats.aetest 19.0.1 pyats.async 19.0 pyats.connections 19.0 pyats.datastructures 19.0 pyats.easypy 19.0.1 pyats.examples 19.0 pyats.kleenex 19.0.1 pyats.log 19.0.1 pyats.results 19.0 pyats.tcl 19.0 pyats.templates 19.0 pyats.topology 19.0 pyats.utils 19.0.1   I then installed genie using the following command, "pip install genie --user"   and every time I enter the genie command, regardless of what I try to do I get this output: kaj0103@ubuntu:~/NPA$ genie Traceback (most recent call last): File "src/genie/utils/profile.py", line 45, in genie.utils.profile profile.py and cProfile.py modules. File "<frozen importlib._bootstrap_external>", line 388, in _check_name_wrapper File "<frozen importlib._bootstrap_external>", line 809, in load_module File "<frozen importlib._bootstrap_external>", line 668, in load_module File "<frozen importlib._bootstrap>", line 268, in _load_module_shim File "<frozen importlib._bootstrap>", line 693, in _load File "<frozen importlib._bootstrap>", line 673, in _load_unlocked File "<frozen importlib._bootstrap_external>", line 661, in exec_module File "<frozen importlib._bootstrap_external>", line 766, in get_code File "<frozen importlib._bootstrap_external>", line 818, in get_data FileNotFoundError: [Errno 2] No such file or directory: '/usr/genie_yamls/__init__.py' The above exception was the direct cause of the following exception: Traceback (most recent call last): File "/home/kaj0103/.local/bin/genie", line 6, in <module> from genie.cli.__main__ import main File "src/genie/cli/__main__.py", line 9, in init genie.cli.__main__ File "src/genie/cli/commands/diff.py", line 20, in init genie.cli.commands.diff File "/home/kaj0103/.local/lib/python3.5/site-packages/genie/harness/__init__.py", line 34, in <module> from .main import main File "src/genie/harness/main.py", line 18, in init genie.harness.main File "src/genie/harness/discovery.py", line 23, in init genie.harness.discovery File "/home/kaj0103/.local/lib/python3.5/site-packages/genie/harness/commons.py", line 4, in <module> from . import _commons_internal File "src/genie/harness/_commons_internal.py", line 36, in init genie.harness._commons_internal File "src/genie/utils/profile.py", line 47, in init genie.utils.profile """ ImportError: Cannot import genie_yamls module.   Can anyone offer some help or guidance on this please? I feel as though I have not done anything out of the ordinary to do this installation, but, on the other hand I am no unix admin so am not really equipped to troubleshoot it that well. Any guidance or advice would be appreciated. P.s. I have tried uninstalling and reinstalling genie, same outcome. Many thanks ... View more

Hello I am installing a Prime NAM 2404 to a Nexus 7K environment that is using VDC's and I want the NAM to span the VDC's. What I am struggling with is the best install for this as there doesn't seem to be a great amount of information on this. As an example, I am assuming that I can get the management IP from anywhere as with any other device, but then the documentation talks about the management port and the data ports being allowed to have the same IP address.... why do the data ports even need an IP address? My next issue is why RISSE is not available as  feature in the Admin VDC but that is the context that seems most logical to me for the install. RISE is only available in production VDC as a feature so I wonder on how you are supposed to move a data port to a different VDC when it is on a port assigned to a specific VDC. Is anyone able to help? Many thanks Anthony ... View more

Hello I think I am missing a level of understanding in the behaviour of VACL's. Hopefully someone can explain. Firstly, to describe the topology, it is very simeple, 2 x 6509's, port channel between both, all relevant vlans up, trunked, active, L3 working, etc etc. The issue is, the VACL is not dropping traffic on the local switch, so, let's say there is a VACL on VLAN10 (identical on both switches) and no VACL on VLAN20. The VACL on VLAN 10 has an ACL that allows some addresses, drops others. The action for a match is to forward, denied traffic from the end of the acl will go to the implicit drop in the VACL sequence. So, if I now do a series of extended pings, first of all on the local switch, using a physical device that lives on the switch as a destination in VLAN 20, using the VLAN10 SVI as the source, this is successful. If I do the same ping but put the VLAN 20 SVI in the destination, this also works. Vice versa is also OK. Now, if I try to make the same tests, however, I go from one switch to another to reach the destination ALL attemps fail. Essentially, it looks like the traffic is being dropped by the VACL when it traverses both switches. It looks like the VACL is not dropping traffic when it originates and terminates on the same switch. Am I missing a fundamental behaviour with the way the switch treats traffic that does not hop through more than one L2 hop, e.g. when on the same switch it gets routed then sent straight onto the VLAN, rather than travelling around it which is what happens when you traverse the switches? Thanks in advance Anthony   ... View more

Hello I have a strange issue where a "show ip arp" only populates local addresses but does not populate with addresses learnt on interfaces in that VLAN. For example, vlan 10 has dozens of IP addresses attached on individual access ports. If I ping the broadcast, most of these addresses reply, but if I do "show ip arp" for the mac association, i get nothing. I am using 3750x with 15.x software. Can anyone shed any light on this at all? We have other 3750X switches with the same sort of config that are populting the output. Thanks in advance ... View more

Hi                   I am trying to ensure that I match the Amazon Web Services config I have been given for a VPN, but I always get the "duplicate first packet" error and it never makes the IKE SA. In looking further into the config, when I see the Configuration>site-to-site vpn>advanced>IKE Policies page, I have priority 201, which is defined as aes-128 - sha - 2 - pre-share - 28800 BUT When I edit the item, it always has encryption as des and this  item does not get chosen. I think that this may be why we are not able to build phase 1. I have attached a picture for evidence of what I am seeing. This is non edited since opening the edit box for this policy. Any suggestions on the phase1 not forming would be handy too.... AWS are strict in their config and have given me this...... I am thinking I have followed it. Configure the IKE SA as follows   - Authentication Method    : Pre-Shared Key   - Pre-Shared Key           : AZxyiirs0IFXGIPwLG9l3ncDVkcz4rpc   - Authentication Algorithm : sha1   - Encryption Algorithm     : aes-128-cbc   - Lifetime                 : 28800 seconds   - Phase 1 Negotiation Mode : main   - Perfect Forward Secrecy  : Diffie-Hellman Group 2 #2: IPSec Configuration Configure the IPSec SA as follows:   - Protocol                 : esp   - Authentication Algorithm : hmac-sha1-96   - Encryption Algorithm     : aes-128-cbc   - Lifetime                 : 3600 seconds   - Mode                     : tunnel   - Perfect Forward Secrecy  : Diffie-Hellman Group 2 IPSec Dead Peer Detection (DPD) will be enabled on the AWS Endpoint. We recommend configuring DPD on your endpoint as follows:   - DPD Interval             : 10   - DPD Retries              : 3 Thanks in advance Anthony ... View more