def main():
"""
Main execution routine
:return: None
"""
# Create a tenant
tenant = Tenant('Coke')
# Create a Context and a BridgeDomain
context = Context('VRF-1', tenant)
context.set_allow_all()
bd = BridgeDomain('BD-1', tenant)
bd.add_context(context)
# Create an App Profile and an EPG
app = AppProfile('sap', tenant)
epg = EPG('sapepg', app)
# Attach the EPG to 2 interfaces using VLAN 5 as the encap
if1 = Interface('eth', '1', '101', '1', '62')
if2 = Interface('eth', '1', '101', '1', '63')
vlan5_on_if1 = L2Interface('vlan5_on_if1', 'vlan', '5')
vlan5_on_if2 = L2Interface('vlan5_on_if2', 'vlan', '5')
vlan5_on_if1.attach(if1)
vlan5_on_if2.attach(if2)
epg.attach(vlan5_on_if1)
epg.attach(vlan5_on_if2)
# Dump the necessary configuration
print('URL: ' + str(tenant.get_url()))
print('JSON: ' + str(tenant.get_json()))
send_to_apic(tenant)
def test_preexisting_endpoints_consume_imported_contract(self):
self.setup_export_contract()
self.consume_exported_contract()
session2 = self._login_session(SITE2_URL, SITE2_LOGIN, SITE2_PASSWORD)
tenant = Tenant('multisite')
app = AppProfile('my-demo-app', tenant)
new_epg_name = 'another-epg'
web_epg = EPG(new_epg_name, app)
# Create the Endpoint
mac = '00:77:55:44:33:22'
ip = '8.3.2.1'
ep = Endpoint(mac, web_epg)
ep.mac = mac
ep.ip = ip
intf = Interface('eth', '1', '101', '1', '38')
# Create a VLAN interface and attach to the physical interface
vlan_intf = L2Interface('vlan-5', 'vlan', '5')
vlan_intf.attach(intf)
# Attach the EPG to the VLAN interface
web_epg.attach(vlan_intf)
# Assign Endpoint to the L2Interface
ep.attach(vlan_intf)
resp = tenant.push_to_apic(session2)
self.assertTrue(resp.ok)
self.consume_exported_contract(epg_name=new_epg_name)
tenants = Tenant.get_deep(session2, names=['multisite'])
multisite_tenant = tenants[0]
app = multisite_tenant.get_child(AppProfile, 'my-demo-app')
self.assertIsNotNone(app)
epg = app.get_child(EPG, new_epg_name)
self.assertIsNotNone(epg)
multisite_ep = epg.get_child(Endpoint, mac)
self.assertIsNotNone(multisite_ep)
session1 = self._login_session(SITE1_URL, SITE1_LOGIN, SITE1_PASSWORD)
self._assert_l3extsubnet_exists(session1,
tenant_name='multisite',
mac=mac,
ip=ip)
self.unconsume_exported_contract(new_epg_name)
time.sleep(2)
self._assert_l3extsubnet_does_not_exist(session1,
tenant_name='multisite',
mac=mac,
ip=ip)
web_epg.mark_as_deleted()
tenant.push_to_apic(session2)
time.sleep(1)
self.teardown_export_contract()
def add_consuming_static_endpoint(self,
mac,
ip,
site1=False,
epg_name='web-frontend'):
if site1:
session = self._login_session(SITE1_URL, SITE1_LOGIN,
SITE1_PASSWORD)
else:
session = self._login_session(SITE2_URL, SITE2_LOGIN,
SITE2_PASSWORD)
tenant = Tenant('multisite')
app = AppProfile('my-demo-app', tenant)
web_epg = EPG(epg_name, app)
# Create the Endpoint
ep = Endpoint(mac, web_epg)
ep.mac = mac
ep.ip = ip
intf = Interface('eth', '1', '101', '1', '38')
# Create a VLAN interface and attach to the physical interface
vlan_intf = L2Interface('vlan-5', 'vlan', '5')
vlan_intf.attach(intf)
# Attach the EPG to the VLAN interface
web_epg.attach(vlan_intf)
# Assign Endpoint to the L2Interface
ep.attach(vlan_intf)
resp = tenant.push_to_apic(session)
self.assertTrue(resp.ok)
tenants = Tenant.get_deep(session, names=['multisite'])
multisite_tenant = tenants[0]
app = multisite_tenant.get_child(AppProfile, 'my-demo-app')
self.assertIsNotNone(app)
epg = app.get_child(EPG, epg_name)
self.assertIsNotNone(epg)
ep = epg.get_child(Endpoint, mac)
self.assertIsNotNone(ep)
if site1:
session = self._login_session(SITE2_URL, SITE2_LOGIN,
SITE2_PASSWORD)
else:
session = self._login_session(SITE1_URL, SITE1_LOGIN,
SITE1_PASSWORD)
self._assert_l3extsubnet_exists(session,
tenant_name='multisite',
mac=mac,
ip=ip)
def main():
"""
Main execution routine
"""
creds = Credentials('apic')
args = creds.get()
session = Session(args.url, args.login, args.password)
session.login()
tenant = Tenant('ATX16_l3Out')
context = Context('vrf', tenant)
outside_l3 = OutsideL3('out-1', tenant)
outside_l3.add_context(context)
phyif = Interface('eth', '1', '104', '1', '41')
phyif.speed = '1G'
l2if = L2Interface('eth 1/104/1/41', 'vlan', '1330')
l2if.attach(phyif)
l3if = L3Interface('l3if')
#l3if.set_l3if_type('l3-port')
l3if.set_l3if_type('sub-interface')
l3if.set_mtu('1500')
l3if.set_addr('1.1.1.2/30')
l3if.add_context(context)
l3if.attach(l2if)
rtr = OSPFRouter('rtr-1')
rtr.set_router_id('23.23.23.23')
rtr.set_node_id('101')
ifpol = OSPFInterfacePolicy('myospf-pol', tenant)
ifpol.set_nw_type('p2p')
ospfif = OSPFInterface('ospfif-1', router=rtr, area_id='1')
ospfif.set_area_type('nssa')
ospfif.auth_key = 'password'
ospfif.int_policy_name = ifpol.name
ospfif.auth_keyid = '1'
ospfif.auth_type = 'simple'
tenant.attach(ospfif)
ospfif.networks.append('55.5.5.0/24')
ospfif.attach(l3if)
contract1 = Contract('contract-1')
outside_epg = OutsideEPG('outepg', outside_l3)
outside_epg.provide(contract1)
contract2 = Contract('contract-2')
outside_epg.consume(contract2)
outside_l3.attach(ospfif)
print(tenant.get_json())
resp = session.push_to_apic(tenant.get_url(), tenant.get_json())
if not resp.ok:
print('%% Error: Could not push configuration to APIC')
print(resp.text)
def create_interface(tenant, session, epgs):
''' The epgs are in the form of a dictionary with provide and consume.
There can be only one of each.
'''
context = Context('{}_VRF'.format(tenant), tenant)
outside_l3 = OutsideL3('Campus_Connection', tenant)
outside_l3.add_context(context)
phyif = Interface('eth', '1', '201', '1', '6')
phyif.speed = '1G'
l2if = L2Interface('eth 201/1/6', 'vlan', '40')
l2if.attach(phyif)
l3if = L3Interface('l3if')
l3if.set_l3if_type('l3-port')
# l3if.set_mtu('1500')
l3if.set_addr('192.168.255.2/24')
l3if.add_context(context)
l3if.attach(l2if)
rtr = OSPFRouter('rtr-2')
rtr.set_router_id('22.22.22.22')
rtr.set_node_id('201')
ifpol = OSPFInterfacePolicy('1G_OSPF', tenant)
#ifpol.set_nw_type('p2p')
ospfif = OSPFInterface('Campus_IF', router=rtr, area_id='42')
ospfif.auth_key = ''
ospfif.int_policy_name = ifpol.name
ospfif.auth_keyid = '1'
ospfif.auth_type = 'simple'
tenant.attach(ospfif)
ospfif.networks.append('0.0.0.0/0')
ospfif.attach(l3if)
contract1 = Contract(epgs['provide'])
outside_epg = OutsideEPG('Campus_Gateway-EPG', outside_l3)
outside_epg.provide(contract1)
contract2 = Contract(epgs['consume'])
outside_epg.consume(contract2)
outside_l3.attach(ospfif)
resp = session.push_to_apic(tenant.get_url(), tenant.get_json())
if not resp.ok:
print('%% Error: Could not push configuration to APIC')
print(resp.text)
def add_providing_static_endpoint(self, mac, ip):
session = self._login_session(SITE1_URL, SITE1_LOGIN, SITE1_PASSWORD)
tenant = Tenant('multisite')
app = AppProfile('my-demo-app', tenant)
web_epg = EPG('database-backend', app)
# Create the Endpoint
ep = Endpoint(mac, web_epg)
ep.mac = mac
ep.ip = ip
intf = Interface('eth', '1', '101', '1', '38')
# Create a VLAN interface and attach to the physical interface
vlan_intf = L2Interface('vlan-5', 'vlan', '5')
vlan_intf.attach(intf)
# Attach the EPG to the VLAN interface
web_epg.attach(vlan_intf)
# Assign Endpoint to the L2Interface
ep.attach(vlan_intf)
resp = tenant.push_to_apic(session)
if not resp.ok:
self.assertTrue(resp.ok)
print resp, resp.text
time.sleep(1)
# Verify that the Endpoint was pushed successfully
tenants = Tenant.get_deep(session, names=['multisite'])
multisite_tenant = tenants[0]
app = multisite_tenant.get_child(AppProfile, 'my-demo-app')
self.assertIsNotNone(app)
epg = app.get_child(EPG, 'database-backend')
self.assertIsNotNone(epg)
ep = epg.get_child(Endpoint, mac)
self.assertIsNotNone(ep)
# Verify that the entry was pushed to the other site
session = self._login_session(SITE2_URL, SITE2_LOGIN, SITE2_PASSWORD)
self._assert_l3extsubnet_exists(session,
tenant_name='multisite',
mac=mac,
ip=ip)
def main():
"""
Main execution routine
:return: None
"""
creds = Credentials('apic')
args = creds.get()
session = Session(args.url, args.login, args.password)
session.login()
tenant = Tenant('cisco')
context = Context('ctx1', tenant)
outside_l3 = OutsideL3('out-1', tenant)
phyif = Interface('eth', '1', '101', '1', '46')
phyif.speed = '1G'
l2if = L2Interface('eth 1/101/1/46', 'vlan', '1')
l2if.attach(phyif)
l3if = L3Interface('l3if')
l3if.set_l3if_type('l3-port')
l3if.set_addr('1.1.1.2/30')
l3if.add_context(context)
l3if.attach(l2if)
bgpif = BGPSession('test', peer_ip='1.1.1.1', node_id='101')
bgpif.router_id = '172.1.1.1'
bgpif.attach(l3if)
bgpif.options = 'send-ext-com'
bgpif.networks.append('0.0.0.0/0')
contract1 = Contract('icmp')
outside_epg = OutsideEPG('outepg', outside_l3)
outside_epg.provide(contract1)
outside_l3.add_context(context)
outside_epg.consume(contract1)
outside_l3.attach(bgpif)
bgp_json = bgpif.get_json()
resp = session.push_to_apic(tenant.get_url(), tenant.get_json())
if not resp.ok:
print('%% Error: Could not push configuration to APIC')
print(resp.text)
def main():
"""
Main execution routine
:return: None
"""
# Create the physical interface objects
intf1 = Interface('eth', '1', '101', '1', '38')
intf2 = Interface('eth', '1', '101', '1', '39')
intf3 = Interface('eth', '1', '102', '1', '38')
intf4 = Interface('eth', '1', '102', '1', '39')
# Create a port channel and add physical interfaces
pc = PortChannel('pc1')
pc.attach(intf1)
pc.attach(intf2)
pc.attach(intf3)
pc.attach(intf4)
# pc.mark_as_deleted()
# Create a VLAN interface on the port channel
# This is the L2 interface representing a single VLAN encap
# on this particular interface.
vlan5_on_pc = L2Interface('vlan5_on_pc', 'vlan', '5')
vlan5_on_pc.attach(pc)
# Create a tenant, app profile, and epg
tenant = Tenant('acitoolkitdemo')
app = AppProfile('app', tenant)
epg = EPG('epg', app)
# Connect EPG to the VLAN interface
# Remember, this VLAN interface is on the port channel we created
# so the EPG will be attached to the port channel on VLAN 5
epg.attach(vlan5_on_pc)
# Print the resulting JSON
print(pc.get_json())
print(tenant.get_json())
def remove_providing_static_endpoint(self, mac, ip):
session = self._login_session(SITE1_URL, SITE1_LOGIN, SITE1_PASSWORD)
tenant = Tenant('multisite')
app = AppProfile('my-demo-app', tenant)
web_epg = EPG('database-backend', app)
# Create the Endpoint
ep = Endpoint(mac, web_epg)
ep.mac = mac
ep.ip = ip
intf = Interface('eth', '1', '101', '1', '38')
# Create a VLAN interface and attach to the physical interface
vlan_intf = L2Interface('vlan-5', 'vlan', '5')
vlan_intf.attach(intf)
# Attach the EPG to the VLAN interface
web_epg.attach(vlan_intf)
# Assign Endpoint to the L2Interface
ep.attach(vlan_intf)
# Mark the Endpoint as deleted
ep.mark_as_deleted()
resp = tenant.push_to_apic(session)
self.assertTrue(resp.ok)
# Verify that the Endpoint has been removed
time.sleep(1)
tenants = Tenant.get_deep(session, names=['multisite'])
multisite_tenant = tenants[0]
app = multisite_tenant.get_child(AppProfile, 'my-demo-app')
self.assertIsNotNone(app)
epg = app.get_child(EPG, 'web-frontend')
self.assertIsNotNone(epg)
ep = epg.get_child(Endpoint, mac)
self.assertIsNone(ep)
def setup_multisite_test(printonly=False, delete=False):
# Create the Tenant
tenant1 = Tenant('multisite')
# Create the Application Profile
app = AppProfile('my-demo-app', tenant1)
# Create the EPGs
web_epg = EPG('web-frontend', app)
db_epg = EPG('database-backend', app)
# Create a Context and BridgeDomain
# Place both EPGs in the Context and in the same BD
context = Context('VRF-1', tenant1)
bd = BridgeDomain('BD-1', tenant1)
bd.add_context(context)
web_epg.add_bd(bd)
db_epg.add_bd(bd)
# Define a contract with a single entry
contract = Contract('multisite_mysqlcontract', tenant1)
entry1 = FilterEntry('entry1',
applyToFrag='no',
arpOpc='unspecified',
dFromPort='3306',
dToPort='3306',
etherT='ip',
prot='tcp',
sFromPort='1',
sToPort='65535',
tcpRules='unspecified',
parent=contract)
# Provide the contract from 1 EPG and consume from the other
db_epg.provide(contract)
web_epg.consume(contract)
context = Context('ctx0', tenant1)
#contract = Contract('contract', tenant)
phyif = Interface('eth', '1', '102', '1', '25')
l2if = L2Interface('eth 1/102/1/25', 'vlan', '500')
l2if.attach(phyif)
l3if = L3Interface('l3if')
l3if.set_l3if_type('ext-svi')
l3if.set_addr('20.0.0.1/16')
l3if.add_context(context)
l3if.attach(l2if)
#l3if.networks.append('1.1.1.1/32')
#outside.provide(contract)
l3if.attach(l2if)
rtr = OSPFRouter('rtr-1')
rtr.set_router_id('101.101.101.101')
rtr.set_node_id('102')
# net1 = OutsideNetwork('1.1.1.1/32')
# net1.network = '1.1.1.1/32'
# net1.provide(contract)
ospfif = OSPFInterface('ospfif-1', router=rtr, area_id='0.0.0.1')
ospfif.attach(l3if)
# ospfif.networks.append(net1)
outside = OutsideEPG('multisite-l3out', tenant1)
outside.attach(ospfif)
#outside.add_context(context)
# Create the Tenant
tenant2 = Tenant('multisite')
# Create the Application Profile
app = AppProfile('my-demo-app', tenant2)
# Create the EPGs
web_epg = EPG('web-frontend', app)
# Create a Context and BridgeDomain
# Place both EPGs in the Context and in the same BD
context = Context('VRF-1', tenant2)
bd = BridgeDomain('BD-1', tenant2)
bd.add_context(context)
web_epg.add_bd(bd)
context = Context('ctx0', tenant2)
#contract = Contract('contract', tenant)
phyif = Interface('eth', '1', '102', '1', '25')
l2if = L2Interface('eth 1/102/1/25', 'vlan', '500')
l2if.attach(phyif)
l3if = L3Interface('l3if')
l3if.set_l3if_type('ext-svi')
l3if.set_addr('20.0.0.2/16')
l3if.add_context(context)
l3if.attach(l2if)
#outside.provide(contract)
l3if.attach(l2if)
rtr = OSPFRouter('rtr-1')
rtr.set_router_id('102.102.102.102')
rtr.set_node_id('102')
ospfif = OSPFInterface('ospfif-1', router=rtr, area_id='0.0.0.1')
ospfif.attach(l3if)
#ospfif.networks.append('1.1.1.1/32')
#ospfif.networks.append('1.1.1.2/32')
outside = OutsideEPG('multisite-l3out', tenant2)
outside.attach(ospfif)
if not printonly:
# Login to APIC and push the config
session = Session(SITE1_URL, SITE1_LOGIN, SITE1_PASSWORD)
session.login()
# Cleanup (uncomment the next line to delete the config)
if delete:
print 'Deleting...'
tenant1.mark_as_deleted()
resp = tenant1.push_to_apic(session)
if resp.ok:
# Print what was sent
print('Pushed the following JSON to the APIC', resp.text)
else:
print resp, resp.text
print('URL: ' + str(tenant1.get_url()))
print('JSON:')
print json.dumps(tenant1.get_json(), indent=4, separators=(',',':'))
if not printonly:
# Login to APIC and push the config
session = Session(SITE2_URL, SITE2_LOGIN, SITE2_PASSWORD)
session.login()
# Cleanup (uncomment the next line to delete the config)
if delete:
tenant2.mark_as_deleted()
resp = tenant2.push_to_apic(session)
if resp.ok:
# Print what was sent
print('Pushed the following JSON to the APIC', resp.text)
else:
print resp, resp.text
print('URL: ' + str(tenant2.get_url()))
print('JSON:')
print json.dumps(tenant2.get_json(), indent=4, separators=(',',':'))