chronot1995/campus-switch-deployment

campus-switch-deployment

DEPRECATED - Please check out Nvidia Air at https://air.nvidia.com for up-to-date examples

Summary:

Cumulus Linux 3.7.11
Underlying Topology Converter to 4.7.0
Tested against Vagrant 2.1.5 on Mac and Linux. Windows is not supported.
Tested against Virtualbox 5.2.32 on Mac 10.14
Tested against Libvirt 1.3.1 and Ubuntu 16.04 LTS

Description

This is an Ansible demo which configures a Cumulus VX switch with standard campus features using Jinja2 and the NCLU Ansible module

The purpose of this playbook is to show network engineers, new to automation, a demo to configure a campus switch solution.

Network Diagram:

Tasks completed in this demo:

Configures all of the front facing ports (1-29, in my example / it would be 1 - 4# in a real world design)
Configures VLANs 100, 200, 300, and 500
Sets the PVID and VID on all of the front facing ports for VoIP Phone access
Sets up DHCP Relaying
Sets up NTP
Sets up 802.1X and MAB auth
TACACS client install
TACACS server + TACACS accounting setup
Appropriate file permissions for TACACS user
Deploy VLAN and SVI configurations using Infrastructure as Code
SNMP Configuration
SSH Banner

Install and Setup Virtualbox on Mac

Setup Vagrant for the first time on Mojave, MacOS 10.14.6

Install Homebrew 2.1.9 (This will also install Xcode Command Line Tools)

https://brew.sh
Install Virtualbox (Tested with 5.2.32)

https://www.virtualbox.org

I had to go through the install process twice to load the proper security extensions (System Preferences > Security & Privacy > General Tab > "Allow" on bottom)

Install Vagrant (Tested with 2.1.5)

https://www.vagrantup.com

Install and Setup Linux / libvirt demo environment:

First, make sure that the following is currently running on your machine:

This demo was tested on a Ubuntu 16.04 VM w/ 4 processors and 32Gb of Diagram
Following the instructions at the following link:

https://docs.cumulusnetworks.com/cumulus-vx/Development-Environments/Vagrant-and-Libvirt-with-KVM-or-QEMU/
Download the latest Vagrant, 2.1.5, from the following location:

https://www.vagrantup.com/

Initializing the demo environment:

Copy the Git repo to your local machine:

    git clone https://github.com/chronot1995/campus-switch-deployment/

Change directories to the following

    campus-switch-deployment

3a. Run the following for Virtualbox:

    ./start-vagrant-vbox-poc.sh

3b. Run the following for Libvirt:

    ./start-vagrant-libvirt-poc.sh

Running the Ansible Playbook

1a. SSH into the Virtualbox oob-mgmt-server:

    cd vx-vbox-simulation
    vagrant ssh oob-mgmt-server

1a. SSH into the Libvirt oob-mgmt-server:

    cd vx-libvirt-simulation  
    vagrant ssh oob-mgmt-server

Copy the Git repo unto the oob-mgmt-server:

    git clone https://github.com/chronot1995/campus-switch-deployment

Change directories to the following

    campus-switch-deployment/automation

Run the following:

    ./provision.sh

This will run the automation script and configure the environment.

Errata

To shutdown the demo, run the following command from the vx-simulation directory:

    vagrant destroy -f

This topology was configured using the Cumulus Topology Converter found at the following URL:

https://github.com/CumulusNetworks/topology_converter
The following command was used to run the Topology Converter within the appropriate vx-sim directory:

     ./topology_converter.py campus-switch-deployment.dot -c --provider=virtualbox
     ./topology_converter.py campus-switch-deployment.dot -c --provider=libvirt

After the above command is executed, the following configuration changes are necessary:

Within "/helper_scripts/auto_mgmt_network/OOB_Server_Config_auto_mgmt.sh"

The following stanza:

echo " ### Creating cumulus user ###" useradd -m cumulus

Will be replaced with the following:

echo " ### Creating cumulus user ###" useradd -m cumulus -m -s /bin/bash

The following stanza:

#Install Automation Tools
puppet=0
ansible=1
ansible_version=2.6.3

Will be replaced with the following:

#Install Automation Tools
puppet=0
ansible=1
ansible_version=2.9.3

Add the following echo right before the end of the file.

echo " ### Adding .bash_profile to auto login as cumulus user"
echo "sudo su - cumulus" >> /home/vagrant/.bash_profile
echo "exit" >> /home/vagrant/.bash_profile
echo "### Adding .ssh_config to avoid HostKeyChecking"
printf "Host * \n\t StrictHostKeyChecking no\n" >> /home/cumulus/.ssh/config

echo "############################################"
echo "      DONE!"
echo "############################################"

helper_scripts > auto_mgmt_network > dhcpd.hosts:

Errata #5 + #6 are required to pull down the TACACS+ client from the Internet

Enable "option routers 192.168.200.254" and 8.8.8.8 as the DNS server:

    group {

      option domain-name-servers 8.8.8.8;
      option domain-name "simulation";
      option routers 192.168.200.254;
      option www-server 192.168.200.254;
      option default-url = "http://192.168.200.254/onie-installer";

helper_scripts > auto_mgmt_network > dhcpd.conf:

This is an ancillary configuration to #6

    # OOB Management subnet
    shared-network LOCAL-NET{
    subnet 192.168.200.0 netmask 255.255.255.0 {
      range 192.168.200.10 192.168.200.50;
      option domain-name-servers 8.8.8.8;
      option domain-name "simulation";
      option routers 192.168.200.254;
      default-lease-time 172800;  #2 days
      max-lease-time 345600;      #4 days
      option www-server 192.168.200.254;
      option default-url = "http://192.168.200.254/onie-installer";
      option cumulus-provision-url "http://192.168.200.254/ztp_oob.sh";
      option ntp-servers 192.168.200.254;
    }

chronot1995 / campus-switch-deployment