/r/networkautomation

Photograph via snooOG

A community for sharing knowledge and engaging with a growing community of network automation specialists.

/r/networkautomation

6,250 Subscribers

2

Wi-Fi network coverage extension

Good day to all!
I'm currently facing a severe problem in ongoing hotel project. initial designer has designed the building allocating one Access Point for each apartment. But certain apartments available that are larger than others. An AP does not sufficient to cover these certain apartments. There is one conduit path to AP network. there for we cannot allocate two APs. I'm looking for a wireless repeater option, does it make any sense to coverage? Or any industry level Solution?

0 Comments
2024/05/13
04:35 UTC

3

Automation Network Monitoring

Hi, anyone can share or suggest the best medium or tool for automated network monitoring process?

7 Comments
2024/05/12
16:00 UTC

0

Standing up a Linux server dedicated to network automation. What distro and specs should I go with?

Wanted to hear your opinions on what you think is best. I also need to know how much CPU, Ram, disk I need (company has a lot of resources available so regardless it won’t be a problem).

7 Comments
2024/05/09
16:25 UTC

2

Mastering Ansible: cisco.ios.l3_interfaces Module tutorial and configuration states explained

0 Comments
2024/05/07
15:26 UTC

6

Get full running config using ncclient takes too long

Hi. I was wondering if someone had an explanation for why it would take so long just to get the running config from a catalyst 3650 using ncclient (NETCONF python module). I timed it and it took almost 2 minutes.

The code is pretty simple:

from ncclient import manager
import xml.dom.minidom

m = manager.connect(
    host='[IP address here]',
    port=830,
    username='[user]',
    password='[password]',
    hostkey_verify=False,
    device_params={'name' : 'iosxe'},
    manager_params={'timeout':300}
    )

#print('#Supported Capabilities (YANG models):')
#for capability in m.server_capabilities:
#    print(capability)

netconf_reply = m.get_config(source='running')
print(xml.dom.minidom.parseString(netconf_reply.xml).toprettyxml())

By comparison, RESTCONF took about 20 seconds and that's even with the device formatting the data in JSON. Here's the RESTCONF code:

import json
import requests

requests.packages.urllib3.disable_warnings()

api_url = 'https://[IP address]/restconf/data/Cisco-IOS-XE-native:native'

headers = { 'Accept': 'application/yang-data+json',
            'Content-type':'application/yang-data+json'
            }
#Format received data in JSON

basicauth = ('[user]', '[password]')
#device login information


resp = requests.get(api_url, auth=basicauth, headers=headers, verify=False)
#Create a variable to send the request and hold the response
 
print(resp)
#Print response from device
 
response_json = resp.json()
 
print(json.dumps(response_json, indent=4))
2 Comments
2024/05/06
02:30 UTC

4

How to Create Ansible Custom Modules using Python |Passing Arguments to AnsibleModule

0 Comments
2024/05/05
10:30 UTC

1

Publish your Ansible Roles to Galaxy using GitHub Repository | ansible-galaxy role install support

0 Comments
2024/05/01
10:04 UTC

1

RESTCONF request not authorized: %DMI-5-AUTHORIZATION_FAILED: R0/0: dmiauthd: User 'admin' from <my IP address>:0 was not authorized for rest over http

Hi there,

I'm new to this subreddit and overall fairly new to network automation. I am having trouble with my RESTCONF request being unauthorized.

I'm running a Cisco ISR 4321 running IOS-XE version 17.06.04 with the following commands:

ip http secure-server
ip http authentication local
restconf
username admin privilege 15 secret 9 <hash contents omitted>

There is no firewall in between my PC and the router, and no ACLs or any other traffic restriction on the router. It is also set up for SSH and has a self-signed digital cert generated on it.

I can't get any RESTCONF requests to process. I can see in Wireshark that the TCP handshake and TLS handshake are successful. I have tried disabling cert verification and enabling it (using the router's .pem certificate), by using curl in a Windows 10 command prompt and using the requests library in Python. From what I can tell, it doesn't appear to be a cert issue. I even modified the .pem cert for my router on my PC to invalidate it and confirmed that in Wireshark I can see the cert validation fail, which otherwise doesn't happen when using the valid cert.

In my syslog server and terminal debugging, I see the following error:

%DMI-5-AUTHORIZATION_FAILED: R0/0: dmiauthd: User 'admin' from <my IP address>:0 was not authorized for rest over http

On the command prompt or Python terminal, I get the following returned:

<errors xmlns="urn:ietf:params:xml:ns:yang:ietf-restconf">
  <error>
    <error-type>protocol</error-type>
    <error-tag>access-denied</error-tag>
  </error>
</errors>

Can someone please help me identify why it says my local admin account isn't authorized for rest over http?

10 Comments
2024/04/30
18:18 UTC

4

looking for script to automate network diagram

Hello Folks,

I am looking for script to draw topology from ISIS or OSPF database ?

anyone has any idea of it before creating one?

6 Comments
2024/04/24
14:02 UTC

1

Send Slack notification from Ansible Callback Notification Plugin | Incoming Webhooks Setup Tutorial

0 Comments
2024/04/22
06:40 UTC

6

Best Course for Network Automation

Hey Guys,

Can someone suggest best course to learn network automation on udemy or youtube or any other app/site?

6 Comments
2024/04/17
18:51 UTC

5

Mastering Ansible Automation: Cisco IOS Backup Options and ios_config module usage example

0 Comments
2024/04/16
13:17 UTC

0

Can't ping the router IP

Recently i start learning GNS3, There I have some issue that I can't able to ping the router IP through the local host computer.

(I connect the router with the cloud )

2 Comments
2024/04/16
11:50 UTC

5

Palo Alto Automation: Commit and Print Config Changes | Ansible Playbook Example

0 Comments
2024/04/08
13:11 UTC

6

equivalent of unix "nice" command to spare the CPU on cisco switches

Hello,

I have a python script (for auditing during business hours) that sends a lot of command on switches running cisco IOS classic and XE, including the CPU taxing one "show run" (only run once though). Our 2960S switches are already busy enough (inspecting ARP and DHCP) to reach 100% sometimes (spikes).

Is there a way to send my commands with low priority the same way we do it on an unix systems with the "nice" command ?

If anyone knows how to achieve this on Juniper and Palo Alto firewalls too, I'm interested to hear how.

PS : some background

I tried to gather all the results I need through commands that give the currenat status (like show vlan brief) but some items can only be found in the configuration (I did extensive research). And I need to work on runtime data only so I can't check the startup-configuration or stored files elsewhere.

7 Comments
2024/04/05
11:24 UTC

0

Breaking News: Liber8 Proxy has released Anti-Detect Virtual Machines with Anti-Detect & Residential Proxies. OS Windows & Kali, enabling users to create multiple users on their Clouds, each User with Unique Device Fingerprints, Unlimited Residential Proxies (Zip Code Targeting) and RDP/VNC Access.

1 Comment
2024/04/04
19:08 UTC

1

Palo Alto Automation: Security Rule Configuration using Ansible galaxy collection |Playbook Example

0 Comments
2024/04/04
15:07 UTC

1

Library for network diagram

Hello experts i am searching library which can help me to create an network diagram using json or database Such as router switches firewall etc

2 Comments
2024/04/04
04:19 UTC

0

Brand new online course about Network+ CompTIA exam study guide. Need Feedback!

Here is an online course about passing the Network+ Comp TIA exam. Go to sexycollegetutor.com. First three lessons are free and to see the rest for free, just enroll, and put a real email and you can fake your address and name, since I dont want your personal info. I will never sell your email dont worry. Its still a work in progress, for I still need to add some PBQ,s and more about subnetting. There are lots of lessons and quizzes. At the end are over 400 questions to help you study. Any feedback or investors? I would like to start a Security+ course, but I want to see if this course will turn a profit first, or gets any interest

1 Comment
2024/04/01
16:03 UTC

3

Palo Alto Automation: Filter Address Group Objects using Ansible json_query filter |Playbook Example

0 Comments
2024/04/01
06:55 UTC

4

PaloAlto Automation Tutorial: Create Delete or Update Address Objects using Ansible Playbook

0 Comments
2024/03/28
16:46 UTC

3

Python module to extract config from switch

Hello, is there a reverse python module of jinja2? for example, I have the following config

interface gi0/1

description port1

switchport mode tunk

interface gi0/2

description port2

switchport mode tunk

interface gi0/3

description port3

switchport mode access

switchport access vlan 100

I want the information to be jsonfied so I can use in python.

8 Comments
2024/03/27
21:27 UTC

29

I wrote an AI-Powered Network Engineer that can autonomously troubleshoot/configure networks

Code here. You can see it an action here.

I'd be very surprised if this hasn't been done before but I wasn't able to easily find something when searching. I think historically GPT-4 maybe would struggle to produce results of this quality, but I'd been really impressed with the new model from Anthropic, so I threw this together to see how it handled networking tasks on live (lab) devices. Honestly pretty impressed so far.

You can provide a topology image, or just describe it, in my example I spun up a lab of cEOS devices and told it the following:

There are 4 devices:
- lab1
- lab2
- lab3
- lab4

Use LLDP to figure out how they are connected

I then gave it the following tasks:

This is a new lab environment of EOS devices.

It is a lab so use whatever numbering schemas (IP, ASNs, etc) you desire.

Since this is a lab you may make changes to all devices at once at each step if you want.

Configure all the connected links on our devices as point to point layer 3 links (e.g., /30s between each device).

Configure BGP on all devices and advertise the loopback interfaces into BGP.

You can configure these steps in whatever order you think is most efficient.

When you finish configuration, verify connectivity by running a ping from lab1 to lab3 loopback ip. If you can ping, you are done. If you can't ping, troubleshoot and fix the issue.

It took over from there, and was able to configure everything and validate connectivity as requested in just over 2 minutes. It didn't just slap the entire configuration on, but instead took an iterative approach and validated things along the way. You can see how it worked through the problem here. It even ran into an issue when it realized IP routing wasn't enabled and went back and fixed it.

Don't get me wrong, the context window is not unlimited so the more devices it needs to track and output from commands it gets, the more confused it will eventually get. But it's still pretty wild. I've also tried breaking the lab after it finishes configuring it and it is able to quickly fix the problem.

Next step is to look into using cheaper models to parse and summarize the command output and have a higher level model handle the more serious logic.

4 Comments
2024/03/25
13:59 UTC

5

Anyone here do Cisco UC/Collaboration automation?

I’m a VOIP engineer and our org has roughly 100 Cisco voice routers, a few CUBEs/SBCs, and 10 CUCM + CUC clusters. I looking to learning some automation, specifically by starting with the CLAUTO exam to finish my CCNP Collaboration cert, and I’m sure there have got to be some good use cases for automation in our environment, but I’m having a hard time listing them.

Currently we use Orion for monitoring and pushing config changes en mass, and it is very useful for that, but I’m sure there’s got to be a lot of things that I don’t know that I don’t know.

6 Comments
2024/03/24
17:47 UTC

4

VMware's Licensing Squeeze

With VMware going all Barron Harkonnen with respect to squeezing their customers with massive cost increases, a lot of shops are looking for VMware alternatives. And of course with free ESXi going away, many of us need to find new home lab platforms.

How has VMware's price increases/policy changes affected your automation setups?

0 Comments
2024/03/17
21:16 UTC

5

Industrial network vs IT network

Hi all, I'm trying to understand what is the difference between IT and automation networks. To be honest I don't know exactly what I don't understand so that might make my question not clear to you.

For example, let's say I have a plc, an instrument and a workstation. The instrument communicate with the plc through modbus for example, but how do the plc talk to the workstation? Do plcs understand tcp/ip? I know that might be different from manufacturer to manufacturer but it is a bit confusing to me as we don't think about those stuff when we work in a pure IT network.

I'm not looking for an answer to my example above, I'm looking for a reference, guide or a course to clear my confusion as I know every case/setup will have a different scenario.

I hope I was clear, thnx

4 Comments
2024/03/16
21:09 UTC

4

Smart Connect in my car

My car has smart connect in it, but I never put in it. My hotspot shows as Toyota Crown. The password that I can change is only the 2.4 but the 5G automatically hook up what I get in range of my house. It has been set up, obviously behind my back Along with another network completely I’m almost 100% positive is in my house. How do I find it? My husband refused to cut on his Wi-Fi. He started hiding his keys and his wallet. This has been going on for three years and he kept telling me I had no clue what I was talking about, but I was never able to access the home Internet at home. I found out that he had been recording me on security cameras that I did not know we had and that he told me that we had taken down. He had smart things set up on his phone with everything that I owned. We are now not living together because he still will not tell the truth and I couldn’t at this point anyway, he also likes to do something with the wiring and the breakers in the house the breakers 11 and 13 depending on which way you shut them off and cut them on different things will come on and turn off. Could this be a port switch of some sort?

3 Comments
2024/03/15
21:02 UTC

6

Event Driven Ansible for Networks "Don't Shut my ports!!!"

0 Comments
2024/03/13
15:55 UTC

Back To Top