Network Automation Lab with EVE-NG aka UNetLab - Ansible and A-Frame

1. Network Automation
for DataCenter Operation
Korea Datacenter Architect Group | KwonSun Bae aka Bebe
Feb 15, 2017

2. AGENDA
• Create the Lab for Automation with EVE-NG
• DataCenter Zero Touch Provisioning with Ansible
• Bulk Configuration with A-Frame (Automation Frame)
Preparation and Demo

3. EVE-NG
What is the EVE-NG?

4. EVE-NG
Supported Images on EVE-NG
• Dynamips (Cisco IOS emulation)
• c7200-adventerprisek9-mz.152-4.S6
• c3725-adventerprisek9-mz.124-15.T14
• c1710-bk9no3r2sy-mz.124-23
• Other images from the above series should work too
• IOL (IOS on Linux also known as IOU)
• L2-ADVENTERPRISE-M-15.1-20131216.bin
• L2-ADVENTERPRISE-M-15.1-20140814.bin
• L2-IPBASEK9-M-15.1-20130726.bin
• L3-ADVENTERPRISEK9-M-15.4-1T.bin
• L3-ADVENTERPRISEK9-M-15.4-2T.bin
• L3-ADVIPSERVICES-M-15.1-2.9S.bin
• And others
• Qemu
• Cisco ASA 8.0.2 (Singe and Multi Context)
• Cisco ASA 8.4.2 (Support Multi Context)
• Cisco ASA 9.1.15 (Support Multi Context)
• Cisco ASAv (ver 9.3.2.200; 9.4.1; 9.5.1)
• Cisco ACS (ver 5.7)
• Cisco CDA (ver 1.0.0.011)
• Cisco IPS - cips (ver 7.0-8)
• Cisco ISE (ver 1.2)
• Cisco vWAAS (ver 5.5.3)
• Cisco WSA virtual appliance - coeus (ver 8-6-0-025-S000V)
• Cisco CSR - csr1000v
• Cisco NX-OSv - titanium (ver 7.1.0.ZD.363; 7.2.0.ZD.0.120)
• Cisco vIOS - vios-adventerprisek9 (ver 15.4.3M L3; 15.5.2 L3)
http://www.unetlab.com/documentation/supported-images/index.html

5. EVE-NG
• Cisco vIOS L2 - viosl2-adventerprisek9 (ver 15.2.411)
• Cisco vNAM (ver 6.2.1)
• Cisco Sourcefire - sourcefire (ver 5.4.0.763)
• Cisco Wireless controller - vwlc (ver K9-8-0-100-0)
• Cisco XRv - xrv-k9 (ver 5.2.2 - 5.3.2)
• A10 Networks vThunder Virtual Appliance
• Alcatel 7750 virtual service router - timos (ver 12.0.R6)
• Arista networks switches (ver 4.14.2F; 4.14.5F; 4.15.0F)
• Aruba Networks security - clearpass (ver 6.4.0.66263)
• Brocade Virtual ADX - brocadevadx (ver 03.1.01)
• Citrix Netscaler VPX virtual - nsvpx (ver 10.5.54.9008)
• Checkpoint Firewall - cpsg (ver R77-20)
• Cumulus VX
• Extreme Networks virtual - extremexos (ver 15.3.2)
Supported Images on EVE-NG
• F5 BIG-IP LM - bigip (ver 11.6.0)
• Fortinet virtual FW - fortinet (ver 5.2.2; 5.2.3_build670)
• HP virtual router - hpvsr (ver 7.1.049P1; 7.10.R0204P01)
• Juniper Networks M series router - olive (ver 12.3R8.7)
• Juniper Networks vMX router - vmx
• Juniper Networks vSRX FW - vsrx Mikrotik (ver 6.30.2)
• Ostinato Traffic Generator
• Palo Alto virtual Firewall - paloalto (ver 6.1.0)
• S-Terra Firewall
• VyOS - vyos (ver vyos-1.1.6-amd64)
• MS Windows 7
• MS Windows XP
• MS Windows Server 2008R2
• MS Windows Server 2003 and 2003 R2
• Various liveCD Linux images (eg. tinycore, damnsmalllinux, slax)
http://www.unetlab.com/documentation/supported-images/index.html

6. EVE-NG
• Just download and provision
to your Vmware Workstation.
• Download for access Labs from
your Client Device.
How to Install
http://www.unetlab.com/download/#main

7. EVE-NG
• Check your image location on VM.
• /opt/unetlab/html/includes/init.php
• Create the folder for your images.
• [Template_Name]-*/hda.qcow2
• You need to image concert with qemu-img
Image upload
/opt/qemu/bin/qemu-img convert -f vmdk -O qcow2 vqfx10k-pfe-20160609-2.vmdk /opt/unetlab/addons/qemu/qfx_pfe-20160609/hda.qcow2

8. EVE-NG
• http://VM_IP:8080/
Access

9. EVE-NG
• Create the Lab (Project)
Create the Lab

10. EVE-NG
• Make your topology
Create the Lab

11. EVE-NG
Power on your Lab

12. EVE-NG
• You have to install Client Pack for
access device through your own tools
• SecureCRT etc.
• Double click your
registry
• Then you can
access your lab device.
Install Client Sides Pack

13. Ansible for
Zero Touch Provisioning

14. Zero Touch Provisioning
Bebe Lab ZTP Workflow
Configuration build request
Configuration build & Store
Base Config & OS Request to DHCP
Base Config & OS Storage reply
Access to storage for download
Configuration and OS download
DHCP Server
Admin
Ansible Server
File Storage
Network Infra
Mgmt Network
• Need to set up below.
• Ansible / DHCP / FTP

15. Ansible
• Apt-get update & apt-get install ansible
• For Juniper module, Ansible-galaxy
• ansible-galaxy install Juniper.junos
• junos_get_facts — Retrieve device-specific information from the host.
• junos_rpc — To execute RPC on device and save output locally
• junos_cli — To execute CLI on device and save output locally
• junos_commit — Commit candidate configuration on device.
• junos_get_config — Retrieve configuration of device.
• junos_install_config — Modify the configuration of a device running Junos OS.
• junos_install_os — Install a Junos OS software package.
• junos_rollback — Rollback configuration of device.
• junos_shutdown — Shut down or reboot a device running Junos OS.
• junos_srx_cluster — Enable/Disable cluster mode for SRX devices
• junos_zeroize — Remove all configuration information on the Routing Engines and reset all key values on a device.
• junos_get_table - Retrieve data from a Junos device using Tables/Views
• junos_ping - execute ping on junos devices
• junos_jsnapy - Integrate JSNAPy to ansible which helps audit network devices
Install Ansible on Ubuntu

16. Ansible
• For Netconf module, need to Pyez
• https://www.juniper.net/techpubs/en_US/junos-
pyez1.0/topics/task/installation/junos-pyez-server-installing.html
• Apt-get install
Python-pip python-dev libxml2-dev libxslt-dev libssl-dev libffi-dev
• pip install junos-eznc
You need to install Juniper PyEZ for netconf

17. Ansible
Playbooks | Inventory | Variables | Modules
ANSIBLE’S AUTOMATION ENGINE
ANSIBLE
PLAYBOOK
PUBLIC /
PRIVATE
CLOUD
CMDB
USERS
INVENTORY
HOSTS
NETWORKING
PLUGINS
API
MODULES

18. Ansible
• Inventory means target devices
• Can groups devices by type/position/roles etc
ZTP Lab Inventory

19. Ansible
• A variable file is a simple YAML file
• Accessible from templates and playbooks
Variables associated with Groups and Hosts

20. Ansible
• One or multiple variable files possible per
• Host
• Group
Variables associated with Groups and Hosts

21. Ansible
Generate configuration with Template for ZTP
• Playbooks
• Roles
• Variables
Pb.conf.common_for_ztp.yaml
Main.conf.j2
Common.yaml

22. Ansible
• Ansible-playbook [playbook]
Final Configuration Final Version

23. Zero Touch Provisioning
Bebe Lab ZTP – Ansible Workflow
Configuration build request
Configuration build & Store
Base Config & OS Request to DHCP
Base Config & OS Storage reply
Access to storage for download
Configuration and OS download
DHCP Server
Admin
Ansible Server
File Storage
Network Infra
Mgmt Network
Pb.conf.ip.fabric.yaml

24. Zero Touch Provisioning
Bebe Lab ZTP – Ansible Workflow
• Roles
• Generate-p2p-ips
• Generate /31 ip for fabric interconnect
main.conf.j2
Generated_p2p_ips.yaml
main.yaml

25. Zero Touch Provisioning
Bebe Lab ZTP – Ansible Workflow
• Roles
• Underlay-eBGP
• Generate the Configure for IP Fabric
main.conf.j2
Generated_p2p_ips.yaml
main.yaml
Host vars
group vars for topology

26. Zero Touch Provisioning
Bebe Lab ZTP – Ansible Workflow
• Roles
• Build-config
• Configuration merge from Generate the Configure for IP Fabric
Folder Variable
Task for Generated_p2p_ips
Task for common Task for Underlay-ebgp
Task for build-config

27. Zero Touch Provisioning
• Result
Bebe Lab ZTP – Ansible Workflow

28. Zero Touch Provisioning
Bebe Lab ZTP – DHCP Server
• Ansible’s Build-config will store final ver CLI to file storage.
• File storage support FTP on this Lab.
• DHCP server have to support DHCP Options.
Base Config & OS Request to DHCP
Base Config & OS Storage reply
Access to storage for download
Configuration and OS download
DHCP Server
File Storage
Network Infra
Mgmt Network

29. Zero Touch Provisioning
Bebe Lab ZTP – DHCP Server
• DHCP Options for base-config and OS upgrade
• Bebe Lab works on isc-dhcp-server

30. Zero Touch Provisioning
Bebe Lab ZTP – File Storage
• Just want to setup with ‘anonymous access’

31. Zero Touch Provisioning
Bebe Lab ZTP – Demo & Packet capture
Configuration build request
Configuration build & Store
Base Config & OS Request to DHCP
Base Config & OS Storage reply
Access to storage for download
Configuration and OS download
DHCP Server
Admin
Ansible Server
File Storage
Network Infra
Mgmt Network

32. Zero Touch Provisioning
Bebe Lab ZTP – Demo & Packet capture

33. Bulk Configuration
with A-Frame
Special thanks to “Nathan Embery”

34. A-Frame
• A-Frame is a minimalistic automation framework / experiment.
• The goal is to allow network engineers to easily use network
automation without programming.
• That means creating and using templates, consuming APIs, etc
• Open Source.
What is the A-Frame

35. A-Frame
• Installing package requirements
• apt-get install
• python-netaddr
• python-pip
• python-nmap
• nmap
• python-lxml
• python-dev
• libssl-dev
• libxslt-dev
• python-paramiko
How to install and play
https://github.com/nembery/aframe/blob/master/tutorial/tutorial.md
• pip install
• django
• junos-eznc
• Blue is already installed for ansible

36. A-Frame
• Clone the Git Repository
• git clone https://github.com/nembery/aframe
• Create the DB
• python ./manage.py migrate
• Run the DJango webserver
• python ./manage.py runserver 0.0.0.0:8080
How to install and play
https://github.com/nembery/aframe/blob/master/tutorial/tutorial.md

37. A-Frame
• Open your browser and access the URL:
• http://<SERVER_IP>:8080
• Try yourself
• https://github.com/nembery/aframe/blob/master/tutorial/tutorial.md
Accessing A-Frame interface

38. A-Frame
Workflow – Demo for Interface Configuration

39. A-Frame
Workflow – Demo for Interface Configuration

40. A-Frame
Workflow – Demo for Interface Configuration

41. A-Frame
Workflow – Demo for Interface Configuration

42. Summary

43. Summary
As a result, there must be a lot of trouble and consider for automation.

44. QnA
And Thanks