Networks - Junos Devops Netconf

Habilitando serviço

[edit system services]

user@host# set netconf ssh

root# show | compare

[edit system services]

+ netconf {

+ ssh;

+ }

[edit system services]

root#

[edit]

user@host# commit

Habilitar o acesso ssh

root# set system services ssh root-login allow

from jnpr.junos import Device

from getpass import getpass

import sys

from pprint import pprint

junos_username = input("Junos OS username: ")

junos_password = getpass("Junos OS password: ")

# Conectar-se ao dispositivo Junos

device = Device(host="192.168.1.1", user=junos_username, password=junos_password )

device.open()

pprint(device)

device.close()

Junos OS username: root

Junos OS password:

{'2RE': False,

'HOME': '/root',

'RE0': {'last_reboot_reason': '0x10:misc hardware reason',

'mastership_state': 'master',

'model': 'RE-VMX',

'status': 'OK',

'up_time': '26 minutes, 1 second'},

'RE1': None,

'RE_hw_mi': False,

'current_re': ['master', 'node', 'fwdd', 'member', 'pfem', 're0'],

'domain': None,

'fqdn': '',

'hostname': '',

'hostname_info': {'re0': ''},

'ifd_style': 'CLASSIC',

'junos_info': {'re0': {'object': junos.version_info(major=(14, 1), type=R, minor=4, build=8),

'text': '14.1R4.8'}},

'master': 'RE0',

'model': 'VMX',

'model_info': {'re0': 'VMX'},

'personality': 'MX',

're_info': {'default': {'0': {'last_reboot_reason': '0x10:misc hardware '

'reason',

'mastership_state': 'master',

'model': 'RE-VMX',

'status': 'OK'},

'default': {'last_reboot_reason': '0x10:misc hardware '

'reason',

'mastership_state': 'master',

'model': 'RE-VMX',

'status': 'OK'}}},

're_master': {'default': '0'},

'serialnumber': 'VM55426837BD',

'srx_cluster': None,

'srx_cluster_id': None,

'srx_cluster_redundancy_group': None,

'switch_style': 'BRIDGE_DOMAIN',

'vc_capable': False,

'vc_fabric': None,

'vc_master': None,

'vc_mode': None,

'version': '14.1R4.8',

'version_RE0': '14.1R4.8',

'version_RE1': None,

'version_info': junos.version_info(major=(14, 1), type=R, minor=4, build=8),

'virtual': True}

(junos_env) PS C:\Users\Lucas Fontini\Desktop\estudosJUNIPERDEVOPS>

from jnpr.junos import Device

from getpass import getpass

import sys

from pprint import pprint

import json

from jnpr.junos.utils.start_shell import StartShell

junos_username = input("Junos OS username: ")

junos_password = getpass("Junos OS password: ")

# Conectar-se ao dispositivo Junos

device = Device(host="200.111.121.111", user=junos_username, password=junos_password )

device.open()

shell = StartShell(device)

shell.open()

interfaces = shell.run('cli -c "show interface terse "')

for linhas in interfaces:

print(linhas)

Junos OS username: root

Junos OS password:

False

cli -c "show interface terse "

Interface Admin Link Proto Local Remote

ge-0/0/0 up up

ge-0/0/0.0 up up inet 200.111.121.111/28

multiservice

lc-0/0/0 up up

lc-0/0/0.32769 up up vpls

pfe-0/0/0 up up

pfe-0/0/0.16383 up up inet

inet6

pfh-0/0/0 up up

pfh-0/0/0.16383 up up inet

ge-0/0/1 up up

ge-0/0/2 up up

ge-0/0/3 up up

ge-0/0/4 up up

ge-0/0/5 up up

ge-0/0/6 up up

ge-0/0/7 up up

ge-0/0/8 up up

ge-0/0/9 up up

cbp0 up up

demux0 up up

dsc up up

---(more)---

EXECUTANDO RCP'S VIA SCRIPT remote procedure call (RPC) protocol.

https://www.juniper.net/documentation/us/en/software/junos-pyez/junos-pyez-developer/topics/task/junos-pyez-rpcs-executing.html

root> show route | display xml rpc

<rpc-reply xmlns:junos="http://xml.juniper.net/junos/14.1R4/junos">

<rpc>

<get-route-information>

</get-route-information>

</rpc>

<cli>

</cli>

</rpc-reply>

root>

root> show interfaces terse | display xml rpc

<rpc-reply xmlns:junos="http://xml.juniper.net/junos/14.1R4/junos">

<rpc>

<get-interface-information>

</get-interface-information>

</rpc>

<cli>

</cli>

</rpc-reply>

root>

GET CONFIGURATION

from jnpr.junos import Device

from lxml import etree

with Device(host="200.111.120.28", user="root", password="TEST") as dev:

data = dev.rpc.get_config()

print (etree.tostring(data, encoding='unicode', pretty_print=True))

<authentication-order>password</authentication-order>

<root-authentication>

<encrypted-password>$1$OT1MVdKj$e0M6jx6ybJGNC3kUq.QEA0</encrypted-password>

</root-authentication>

<ssh>

<root-login>allow</root-login>

</ssh>

<ssh>

</ssh>

</netconf>

</services>

<user>

</contents>

</user>

<file>

<name>messages</name>

</contents>

<name>authorization</name>

<info/>

</contents>

</file>

<file>

<name>interactive-commands</name>

<name>interactive-commands</name>

<any/>

</contents>

</file>

</syslog>

</system>

<unit>

<inet>

</address>

</inet>

</family>

</unit>

</interface>

</interfaces>

<routing-options>

<route>

<next-hop>200.108.120.17</next-hop>

</route>

</static>

</routing-options>

</configuration>

PEGA CONFIGURAÇÃO

from jnpr.junos import Device

from getpass import getpass

from jnpr.junos.exception import ConnectError

# Solicitar as credenciais do usuário

junos_username = input("Junos OS username: ")

junos_password = getpass("Junos OS password: ")

# Conectar-se ao dispositivo Junos

device = Device(host=junos_username, user="root", password=junos_password)

try:

device.open()

# Obter as configurações do roteador

configurations = device.rpc.get_config(options={'format': 'text'})

# Imprimir as configurações

print(configurations.text)

# Fechar a conexão com o dispositivo

device.close()

except ConnectError as err:

print ("Cannot connect to device: {0}".format(err))

except Exception as err:

print (err)

unos OS username:

Junos OS password:

## Last changed: 2023-06-23 23:42:33 UTC

version 14.1R4.8;

system {

authentication-order password;

root-authentication {

encrypted-password "$1$OT1MVdKj$e0M6jx6ybJGNC3kUq.QEA0";

}

services {

ssh {

root-login allow;

}

netconf {

ssh;

}

syslog {

user * {

any emergency;

}

file messages {

any notice;

authorization info;

}

interactive-commands any;

}

interfaces {

ge-0/0/0 {

family inet {

address 200.108.120.28/28;

}

routing-options {

static {

route 0.0.0.0/0 next-hop 200.108.120.17;

}

SET COFNIGURATIONS

from jnpr.junos import Device

from jnpr.junos.utils.config import Config

from getpass import getpass

host = input("host: ")

junos_username = input("Junos OS username: ")

junos_password = getpass("Junos OS password: ")

# Definir as configurações a serem aplicadas

config_set = [

"set interfaces ge-0/0/2 unit 0 family inet address 100.120.120.1/30",

"set protocols bgp group my-group type internal",

"set protocols bgp group my-group local-address 100.120.120.1",

"set protocols bgp group my-group neighbor 100.120.120.2",

"set protocols bgp group my-group local-as 65001"

]

# Conectar-se ao dispositivo Junos

device = Device(host=host, user=junos_username, password=junos_password)

device.open()

# Carregar a configuração atual

session = Config(device)

session.lock()

# Converter a lista de configurações em uma única string

config_str = "\n".join(config_set)

# Aplicar as configurações

session.load(config_str, format="set")

session.commit()

# Desbloquear a configuração e fechar a conexão

cu.unlock()

device.close()

resultado

root> show configuration protocols

bgp {

group my-group {

type internal;

local-address 100.120.120.1;

local-as 65001;

neighbor 100.120.120.2;

}

root> show configuration interfaces ge-0/0/2

unit 0 {

family inet {

address 100.120.120.1/30;

}

root>

TABLES AND VIEWS

from jnpr.junos import Device

from jnpr.junos.op.routes import RouteTable

from jnpr.junos.op.ethport import EthPortTable

with Device(host="1.1.1.10", user="root", password="ROOT") as dev:

route = RouteTable(dev)

output = route.get("0.0.0.0/0")

print(output.keys())

# pega informações das interfaces via tabela

# https://www.juniper.net/documentation/us/en/software/junos-pyez/junos-pyez-developer/topics/task/junos-pyez-views-op-defining.html

eths = EthPortTable(dev)

eths.get()

for item in eths:

print ('Interface name' ,item.name)

print ('Status operacional' , item.oper)

print ('Status Admin' , item.admin)

print ("MTU ", item.mtu)

['100.120.120.1/32', '200.108.120.28/32']

Interface name ge-0/0/0

Status operacional up

Status Admin up

MTU 1514

Interface name ge-0/0/1

Status operacional up

Status Admin up

MTU 1514

Interface name ge-0/0/2

Status operacional up

Status Admin up

MTU 1514

Interface name ge-0/0/3

Status operacional up

Status Admin up

MTU 1514

Interface name ge-0/0/4

Status operacional up

Status Admin up

MTU 1514

Interface name ge-0/0/5

Status operacional up

Status Admin up

MTU 1514

Interface name ge-0/0/6

Status operacional up

Status Admin up

MTU 1514

Interface name ge-0/0/7

Status operacional up

Status Admin up

MTU 1514

Interface name ge-0/0/8

Status operacional up

Status Admin up

MTU 1514

Interface name ge-0/0/9

Status operacional up

Status Admin up

MTU 1514