Juniper ZTP/Homer - Revision history

Admin: /* tcpdump on dhcp server */

2023-02-09T02:09:48Z

tcpdump on dhcp server

Admin: /* tcpdump on dhcp server */

2023-02-09T02:09:10Z

tcpdump on dhcp server

Admin: /* tcdump on dhcp server= */

2023-02-09T02:07:31Z

tcdump on dhcp server=

Admin: /* Running homer */

2023-02-09T02:07:10Z

Running homer

Admin: /* Running homer */

2023-02-08T17:49:15Z

Running homer

Admin: /* Running homer */

2023-02-08T17:47:51Z

Running homer

Admin: /* Script */

2023-02-08T17:34:54Z

Script

Admin: /* ZTP in action */

2023-02-08T16:57:14Z

ZTP in action

Admin: /* ZTP in action */

2023-02-08T16:45:20Z

ZTP in action

Admin: /* ZTP in action */

2023-02-08T16:39:29Z

ZTP in action

@@ Line 471: / Line 471: @@
   	    PAD (0), length 0
 :59:25.122924 IP (tos 0x0, ttl 64, id 14907, offset 0, flags [DF], proto UDP (17), length 367)
-     install1001.dfw.labnet.bootps > 10.193.0.1.bootps: [bad udp cksum 0x26f3 -> 0xb12a!] BOOTP/DHCP, Reply, length 339, hops 1, xid 0x2d895b7c, Flags [Broadcast] (0x8000)
+      install1001.dfw.labnet.bootps > 10.193.0.1.bootps: [bad udp cksum 0x26f3 -> 0xb12a!] BOOTP/DHCP, Reply, length 339, hops 1, xid 0x2d895b7c, Flags [Broadcast] (0x8000)
-	  Your-IP lsw1-a3-dfw.mgmt.dfw.labnet
+ 	  Your-IP lsw1-a3-dfw.mgmt.dfw.labnet
-	  Gateway-IP 10.193.0.1
+ 	  Gateway-IP 10.193.0.1
-	  Client-Ethernet-Address 50:00:00:17:00:00 (oui Unknown)
+ 	  Client-Ethernet-Address 50:00:00:17:00:00 (oui Unknown)
-	  file "nonexistent-file"
+ 	  file "nonexistent-file"
-	  Vendor-rfc1048 Extensions
+ 	  Vendor-rfc1048 Extensions
-	    Magic Cookie 0x63825363
+ 	    Magic Cookie 0x63825363
-	    DHCP-Message (53), length 1: Offer
+ 	    DHCP-Message (53), length 1: Offer
-	    Server-ID (54), length 4: install1001.dfw.labnet
+ 	    Server-ID (54), length 4: install1001.dfw.labnet
-	    Lease-Time (51), length 4: 7200
+ 	    Lease-Time (51), length 4: 7200
-	    Subnet-Mask (1), length 4: 255.255.255.0
+ 	    Subnet-Mask (1), length 4: 255.255.255.0
-	    Default-Gateway (3), length 4: 10.193.0.1
+ 	    Default-Gateway (3), length 4: 10.193.0.1
-	    Domain-Name-Server (6), length 8: ns0.dfw.labnet,ns1.tx.labnet
+ 	    Domain-Name-Server (6), length 8: ns0.dfw.labnet,ns1.tx.labnet
-	    Hostname (12), length 11: "lsw1-a3-dfw"
+ 	    Hostname (12), length 11: "lsw1-a3-dfw"
-	    TFTP-Server-Address (150), length 4: install1001.dfw.labnet
+ 	    TFTP-Server-Address (150), length 4: install1001.dfw.labnet
-	    BR (28), length 4: 10.193.0.255
+ 	    BR (28), length 4: 10.193.0.255
-	    Domain-Name (15), length 15: "mgmt.dfw.labnet"
+ 	    Domain-Name (15), length 15: "mgmt.dfw.labnet"
-	    Vendor-Option (43), length 17: 1.15.106.117.110.111.115.95.115.99.114.105.112.116.46.115.104
+ 	    Vendor-Option (43), length 17: 1.15.106.117.110.111.115.95.115.99.114.105.112.116.46.115.104
-	    END (255), length 0
+ 	    END (255), length 0

@@ Line 466: / Line 466: @@
   	    Magic Cookie 0x63825363
   	    DHCP-Message (53), length 1: Discover
-	    Lease-Time (51), length 4: 86400
+ 	    Lease-Time (51), length 4: 86400
-	    Hostname (12), length 12: "VM5F3D5FF6E7"
+ 	    Hostname (12), length 12: "VM5F3D5FF6E7"
-	    END (255), length 0
+ 	    END (255), length 0
-	    PAD (0), length 0
+ 	    PAD (0), length 0
 :59:25.122924 IP (tos 0x0, ttl 64, id 14907, offset 0, flags [DF], proto UDP (17), length 367)
       install1001.dfw.labnet.bootps > 10.193.0.1.bootps: [bad udp cksum 0x26f3 -> 0xb12a!] BOOTP/DHCP, Reply, length 339, hops 1, xid 0x2d895b7c, Flags [Broadcast] (0x8000)

@@ Line 455: / Line 455: @@
   +   }
-==tcdump on dhcp server===
+==tcpdump on dhcp server==
   ppaul@install1001:~$ sudo tcpdump -vvv 'udp and (src port 67 or src port 68 or src port 69)'

← Older revision		Revision as of 02:07, 9 February 2023
Line 454:		Line 454:
	+ vlan-id 50;		+ vlan-id 50;
	+ }		+ }
		+
		+	==tcdump on dhcp server===
		+
		+	ppaul@install1001:~$ sudo tcpdump -vvv 'udp and (src port 67 or src port 68 or src port 69)'
		+	tcpdump: listening on ens18, link-type EN10MB (Ethernet), snapshot length 262144 bytes
		+	19:59:25.102231 IP (tos 0x0, ttl 64, id 30167, offset 0, flags [none], proto UDP (17), length 293)
		+	10.193.0.1.bootps > install1001.dfw.labnet.bootps: [udp sum ok] BOOTP/DHCP, Request from 50:00:00:17:00:00 (oui Unknown), length 265, hops 1, xid 0x2d895b7c, Flags [Broadcast] (0x8000)
		+	Gateway-IP 10.193.0.1
		+	Client-Ethernet-Address 50:00:00:17:00:00 (oui Unknown)
		+	Vendor-rfc1048 Extensions
		+	Magic Cookie 0x63825363
		+	DHCP-Message (53), length 1: Discover
		+	Lease-Time (51), length 4: 86400
		+	Hostname (12), length 12: "VM5F3D5FF6E7"
		+	END (255), length 0
		+	PAD (0), length 0
		+	19:59:25.122924 IP (tos 0x0, ttl 64, id 14907, offset 0, flags [DF], proto UDP (17), length 367)
		+	install1001.dfw.labnet.bootps > 10.193.0.1.bootps: [bad udp cksum 0x26f3 -> 0xb12a!] BOOTP/DHCP, Reply, length 339, hops 1, xid 0x2d895b7c, Flags [Broadcast] (0x8000)
		+	Your-IP lsw1-a3-dfw.mgmt.dfw.labnet
		+	Gateway-IP 10.193.0.1
		+	Client-Ethernet-Address 50:00:00:17:00:00 (oui Unknown)
		+	file "nonexistent-file"
		+	Vendor-rfc1048 Extensions
		+	Magic Cookie 0x63825363
		+	DHCP-Message (53), length 1: Offer
		+	Server-ID (54), length 4: install1001.dfw.labnet
		+	Lease-Time (51), length 4: 7200
		+	Subnet-Mask (1), length 4: 255.255.255.0
		+	Default-Gateway (3), length 4: 10.193.0.1
		+	Domain-Name-Server (6), length 8: ns0.dfw.labnet,ns1.tx.labnet
		+	Hostname (12), length 11: "lsw1-a3-dfw"
		+	TFTP-Server-Address (150), length 4: install1001.dfw.labnet
		+	BR (28), length 4: 10.193.0.255
		+	Domain-Name (15), length 15: "mgmt.dfw.labnet"
		+	Vendor-Option (43), length 17: 1.15.106.117.110.111.115.95.115.99.114.105.112.116.46.115.104
		+	END (255), length 0

@@ Line 420: / Line 420: @@
   -----------
   [edit]
-+  snmp {
+ +  snmp {
-+      location dfw;
+ +      location dfw;
-+      filter-interfaces {
+ +      filter-interfaces {
-+          interfaces {
+ +          interfaces {
-+              "^.*\.0$";
+ +              "^.*\.0$";
-+          }
+ +          }
-+      }
+ +      }
-+      community password2020 {
+ +      community passwordnotGood {
-+          authorization read-only;
+ +          authorization read-only;
-+      }
+ +      }
-+  }
-[edit routing-options static route 0.0.0.0/0]
+ [edit routing-options static route 0.0.0.0/0]
-+    no-readvertise;
+ +    no-readvertise;
-[edit protocols]
+ [edit protocols]
-+   lldp {
+ +   lldp {
-+       port-id-subtype interface-name;
+ +       port-id-subtype interface-name;
-+       interface all;
+ +       interface all;
-+   }
+ +   }
   [edit vlans]
   -   default {

← Older revision		Revision as of 17:47, 8 February 2023
Line 353:		Line 353:

	Before running homer make sure that the switch is in Netbox and that it has it's DNS Name set.		Before running homer make sure that the switch is in Netbox and that it has it's DNS Name set.
		+
		+	Below is the output of the changes after running homer with diff
		+
		+
		+	ppaul@homer1001:~$ homer lsw1-a2* diff
		+	/usr/local/lib/python3.9/dist-packages/paramiko/transport.py:219: CryptographyDeprecationWarning: Blowfish has been deprecated
		+	"class": algorithms.Blowfish,
		+	INFO:homer.devices:Initialized 46 devices
		+	INFO:homer:Generating diff for query lsw1-a2*
		+	INFO:homer:Gathering global Netbox data
		+	INFO:homer.devices:Matched 1 device(s) for query 'lsw1-a2*'
		+	INFO:homer:Generating configuration for lsw1-a2-dfw.mgmt.dfw.labnet
		+	INFO:homer.transports.junos:Running commit check on lsw1-a2-dfw.mgmt.dfw.labnet
		+	Changes for 1 devices: ['lsw1-a2-dfw.mgmt.dfw.labnet']
		+
		+	[edit system root-authentication]
		+	- encrypted-password "$6$qspxq1Js$f0UFEnzRo7oFEOZ3URiSBVBinJvwYSv4qlZpQ9eKlhc1YlRG3RCCVyqtXN.92mB8P3ilTUK1h.7WOSRjY1z9i."; ## SECRET-DATA
		+	+ encrypted-password "$5$bSgF2gnxBS/rA$sYP/f1pWJhl5d1VN0hHzjxd0jZhmnwGLCiwVm3hE8Z."; ## SECRET-DATA
		+	[edit system root-authentication]
		+	- ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6NF8iallvQVp22WDkTkyrtvp9eWW6A8YVr+kz4TjGYe7gHzIw+niNltGEFHzD8+v1I2YJ6oXevct1YeS0o9HZyN1Q9qgCgzUFtdOKLv6IedplqoPkcmF0aYet2PkEDo3MlTBckFXPITAMzF8dJSIFo9D8HfdOV0IAdx4O7PtixWKn5y2hMNG0zQPyUecp4pzC6kivAIhyfHilFR61RGL+GPXQ2MWZWFYbAGjyiYJnAmCP3NOTd0jMZEnDkbUvxhMmBYSdETk1rRgm+R4LOzFUGaHqHDLKLX+FIPKcF96hrucXzcWyLbIbEgE98OHlnVYCzRdK8jlqm8tehUc9c9WhQ== vagrant insecure public key"; ## SECRET-DATA
		+	[edit system login]
		+	+ class operations {
		+	+ permissions [ admin-control clear configure field interface-control maintenance network rollback secret shell trace-control view view-configuration ];
		+	+ }
		+	+ class rancid {
		+	+ permissions [ view view-configuration ];
		+	+ }
		+	[edit system login]
		+	+ user ppaul {
		+	+ uid 2001;
		+	+ class super-user;
		+	+ authentication {
		+	+ ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCry+y+fh4Yjz/yu+wfUtWl80z0Cd2bHcjEbGSg3kf0bkjmZK9uDRrHrxP /bmMjhqHNQCPwSIi6eRrvddPJxi8yP5Qmr9T2rnE8UxacmjXhGPTL+2GpoDYp5ybGuRhZdJG07EyiXiAFu6jSe9okZdhapRaAbhy/wMr1weZ/rrJwOGar7AKk+XCi4fwahh6vw9b++EEtGqRNzIDMw10nBl/kCc0141hHQ8ZhmvFdzNh2LQt2tvYwu0T/YmENcDs3tb7Us2hd4fw6KXIsqNLqxWLRjWgWj5J5zQpOzHgP/TM1X25ZxUlRh6jttcBsGSfaddzFwISK2qNbP+XvqJkR0g5J tpapaul@Macbooks-MacBook-Air.local"; ## SECRET-DATA
		+	+ }
		+	+ }
		+	- user vagrant {
		+	- uid 2000;
		+	- class super-user;
		+	- authentication {
		+	- ssh-rsa "ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6NF8iallvQVp22WDkTkyrtvp9eWW6A8YVr+kz4TjGYe7gHzIw+niNltGEFHzD8+v1I2YJ6oXevct1YeS0o9HZyN1Q9qgCgzUFtdOKLv6IedplqoPkcmF0aYet2PkEDo3MlTBckFXPITAMzF8dJSIFo9D8HfdOV0IAdx4O7PtixWKn5y2hMNG0zQPyUecp4pzC6kivAIhyfHilFR61RGL+GPXQ2MWZWFYbAGjyiYJnAmCP3NOTd0jMZEnDkbUvxhMmBYSdETk1rRgm+R4LOzFUGaHqHDLKLX+FIPKcF96hrucXzcWyLbIbEgE98OHlnVYCzRdK8jlqm8tehUc9c9WhQ== vagrant insecure public key"; ## SECRET-DATA
		+	- }
		+	- }
		+	[edit system]
		+	+ domain-name mgmt.dfw.labnet;
		+	+ backup-router 10.193.0.1;
		+	+ time-zone UTC;
		+	+ /* Prefer the primary (loopback) address for locally generated packets causing issue on vqfx between fpc and RE */
		+	+ no-redirects;
		+	[edit interfaces]
		+	- et-0/0/0 {
		+	- unit 0 {
		+	- family inet {
		+	- dhcp {
		+	- vendor-id Juniper-qfx10002-72q;
		+	- }
		+	- }
		+	- }
		+	- }
		+	- xe-0/0/0 {
		+	- unit 0 {
		+	- family inet {
		+	- dhcp {
		+	- vendor-id Juniper-qfx10002-72q;
		+	- }
		+	-----------
		+	-----------
		+	[edit]
		+	+ snmp {
		+	+ location dfw;
		+	+ filter-interfaces {
		+	+ interfaces {
		+	+ "^.*\.0$";
		+	+ }
		+	+ }
		+	+ community password2020 {
		+	+ authorization read-only;
		+	+ }
		+	+ }
		+	[edit routing-options static route 0.0.0.0/0]
		+	+ no-readvertise;
		+	[edit protocols]
		+	+ lldp {
		+	+ port-id-subtype interface-name;
		+	+ interface all;
		+	+ }
		+	[edit vlans]
		+	- default {
		+	- vlan-id 1;
		+	- }
		+	+ private1-a-dfw {
		+	+ vlan-id 20;
		+	+ }
		+	+ private1-b-dfw {
		+	+ vlan-id 30;
		+	+ }
		+	+ private1-c-dfw {
		+	+ vlan-id 40;
		+	+ }
		+	+ private1-d-dfw {
		+	+ vlan-id 50;
		+	+ }

@@ Line 112: / Line 112: @@
           hardware ethernet {{ mac_address }};
           fixed-address {{ mgmt_ip }};
-          option option-150 "10.192.16.5";
+          option option-150 10.192.16.5;
           option host-name "{{ hostname }}";
           option ZTP.config-file-name "junos_script.sh";

@@ Line 321: / Line 321: @@
   Exiting configuration mode
-Now the switch is ready to homer on it
+We see in the output below that the homer user, the mgmt interface and the ssh and netconf services are set.
 ==Running homer==
 Before running homer make sure that the switch is in Netbox and that it has it's DNS Name set.

← Older revision		Revision as of 16:45, 8 February 2023
Line 305:		Line 305:
	(no tty) at 16:19 UTC...		(no tty) at 16:19 UTC...
	Auto image Upgrade: Stopped		Auto image Upgrade: Stopped
		+
		+	Please see below for the script log
		+	root@vqfx-re:RE:0% cat /var/log/script_output
		+	Entering configuration mode
		+	configuration check succeeds
		+	commit complete
		+	Exiting configuration mode
		+	Entering configuration mode
		+	configuration check succeeds
		+	commit complete
		+	Exiting configuration mode
		+	Entering configuration mode
		+	configuration check succeeds
		+	commit complete
		+	Exiting configuration mode
		+
		+	Now the switch is ready to homer on it
		+
		+	==Running homer==
		+
		+	Before running homer make sure that the switch is in Netbox and that it has it's DNS Name set.

@@ Line 289: / Line 289: @@
   root@vqfx-re:RE:0%
-Auto Image Upgrade: Interface::   "em0"
+ Auto Image Upgrade: Interface::   "em0"
+ Auto Image Upgrade: Server::      "10.192.16.5"
-Auto Image Upgrade: Server::      "10.192.16.5"
+ Auto Image Upgrade: Image File::  "NOT SPECIFIED"
+ Auto Image Upgrade: Config File:: "junos_script.sh"
-Auto Image Upgrade: Image File::  "NOT SPECIFIED"
+ Auto Image Upgrade: Gateway::     "10.193.0.1"
+ Auto Image Upgrade: Protocol::    "tftp"
-Auto Image Upgrade: Config File:: "junos_script.sh"
+ Auto Image Upgrade: Start fetching junos_script.sh file from server 10.192.16.5
+  through em0 using tftp
-Auto Image Upgrade: Gateway::     "10.193.0.1"
+ Auto Image Upgrade: File junos_script.sh fetched from server 10.192.16.5 throug
+ h em0
-Auto Image Upgrade: Protocol::    "tftp"
+ Auto Image Upgrade: Executing script junos_script.sh
+ Auto Image Upgrade: junos_script.sh executed successfully. See /var/log/script_
+ output
-Auto Image Upgrade: Start fetching junos_script.sh file from server 10.192.16.5
+ Broadcast Message from root@lsw1-a2-dfw
-  through em0 using tftp
+         (no tty) at 16:19 UTC...
+ Auto image Upgrade: Stopped