CISCO NA Crosswork Huri Aunoatanga NSO Function Pack Aratohu Tāuta

Kupu Whakataki
Ko tenei tuhinga e whakaatu ana me pehea te tango, te whakauru, me te whirihora i te kete mahi a Cisco CrossWorks Change Automation (CA) ki runga Cisco Network Services Orchestrator (NSO). I tua atu, ko te tuhinga e whakaatu ana i te whirihoranga e hiahiatia ana mo CrossWorks Change Automation i Cisco CrossWorks.
Te kaupapa
Ko tenei aratohu e whakaatu ana:
- Te whakauru i te cw-na-fp-ca-5.0.0-nso-6.1.tar.gz mokihi mahi i runga i Cisco NSO 6.1 me nga whirihoranga e hono ana mo te kete mahi i runga i Cisco NSO.
- Ko nga whirihoranga roopu AUTH mo te hanga mapi kaiwhakamahi ahurei (ump) mo te Huri Aunoatanga.
- Ko nga whirihoranga DLM me nga tautuhinga tono Huri Aunoatanga e hiahiatia ana i roto i te Cisco CrossWorks 5.0.0
Tuhinga o mua
Ko te rarangi i raro nei e whakaatu ana i nga putanga iti rawa o te Cisco NSO me Cisco CrossWorks e hototahi ana te CrossWorks Change Automation pack v5.0:
- Cisco NSO: v6.1 tāuta pūnaha
- Cisco CrossWorks:v5.0.0
Te Tāuta me te Whirihora
Ko nga waahanga kei raro nei e whakaatu ana me pehea te whakauru i te kete mahi cw-device-auth ki te punaha whakauru Cisco NSO 6.1 teitei ake ranei.
Te Tāuta i te Mōkihi Mahi
- Tangohia te cw-device-auth v5.0.0 mai i te putunga ki to Cisco NSO.
- Tāruatia te pūranga tar.gz kua tikiakehia o te mōkihi mahi ki tō putunga mōkihi.
Tuhipoka: Ka taea te rereke te whaiaronga mokihi i runga i nga tautuhinga kua tohua i te wa o te whakaurunga. Mo te nuinga o te Cisco NSO kua whakauruhia e te punaha, kei te "/var/opt/ncs/packages" te raarangi mokete i te taunoa. Tirohia nga ncs. conf i runga i to whakaurunga ki te kimi i to kaiwhakahaere kete - Whakarewahia te NCS CLI ka whakahaere i nga whakahau e whai ake nei: admin@nso1:~$ ncs_cli -C -u admin admin i hono mai i te 2003:10:11::50 ma te whakamahi i te ssh i runga i te nso1 admin@ncs# nga kete ka utaina ano.
- Manatokohia kua oti pai te whakaurunga o te kete ka oti te uta ano. admin@ncs# whakaatu pōkai mōkihi cw-pūrere-auth pōkai mōkihi cw-pūrere-auth mōkihi-putanga 5.0.0 whakaahuatanga "CrossWorks taputapu whakamanatanga mokihi mahi" ncs-min-putanga [ 6.0] python-package vim-ingoa cw-pūrere -AUTH whaiaronga /var/opt/n's/state/packages-in-use/1/cw-device-auth component action application python-class-name cw_ device _a uth. mahi. Taupānga tono timatanga-wāhanga wāhanga2 oper tūnga ake
Te hanga i tetahi Kaiwhakamahi Whakauru Motuhake i Cisco NSO
Ka whakamahia e Cisco CrossWorks Change Automation tetahi kaiwhakamahi uru motuhake ki te hono atu ki a Cisco NSO mo nga huringa whirihoranga katoa. Ko te tikanga kaore e taea e koe te whakamahi i te kaiwhakamahi kotahi ki te DLM, ki nga ratonga kohinga ranei hei uru atu ki a Cisco NSO. Ko tenei waahanga e korero ana mo nga whakaritenga mo te hanga kaiwhakamahi.
Tuhipoka: Ko nga taahiraa i raro nei e kii ana kei te whakahaere a Cisco NSO i runga i te VM Ubuntu. Mena kei te rere to whakaurunga Cisco NSO i runga i tetahi punaha whakahaere rereke, tena koa whakarereketia nga hikoi kia rite.
- Waihangahia he kaiwhakamahi sudo hou i runga i to Ubuntu VM. Exampi konei. Ko nga taahiraa i raro nei e whakaatu ana me pehea te hanga kaiwhakamahi "cwuser" ki to VM Ubuntu. Ko tenei ingoa ingoa hou ka taea e koe te whiriwhiri. root@nso:/home/admin# adducer causer Te taapiri i te kaiwhakamahi `causer' … Te taapiri i te roopu hou `causer' (1004) … Te taapiri i te kaiwhakamahi hou `cwuser' (1002) me te roopu `cwuser Te hanga i te whaiaronga kaainga `/home/causer' … Te kape files from `/etc/skel' … Whakauruhia he kupuhipa UNIX hou: Pato ano i te kupuhipa UNIX hou: kua paahi: kua pai te whakahou i te kupuhipa Te huri i nga korero kaiwhakamahi mo cwuser Whakauruhia te uara hou, pehia ranei te ENTER mo te taunoa Ingoa Katoa : Tau Ruma: Waea Mahi: Waea Kainga: Ētahi atu: He tika nga korero? [Y/n] y root@nso:/home/admin# user MoD -aG sudo causer root@nso:/home/admin# usermod -a -G sysadmin cwuser
- Me whakarite kei a koe te kaiwhakamahi hou i hanga e koe HTTP a HTTPS uru ki te Cisco NSO tūmau. Ka taea tenei ma te whakamahi i te ngawari RESTCONF API e whakaatuhia ana i raro nei. curl -u : –tauwāhi –tono HAERE 'https://:8888/restconf/data/tailf-ncs:packages/package=cw-device-auth' \ –header 'Whakaae: application/yang-data+json' \ –header 'Ihirangi-Momo: tono/ yang-data+json' \ –data-raw ” I te wa e karangahia ana te curl whakahau i runga ake nei, me whiwhi koe i te whakautu penei i raro nei. Ko etahi atu whakautu ka tohu ko tetahi atu tautuhinga i mua i tenei kaore i mahi. { “tailf-ncs:package”: [ { “ingoa”: “cw-device-auth”, “package-version”: “1.0.0”, “description”: “Crosswork device authorization actions pack”, “ncs- min-version”: [“6.0”], “python-package”: {“vm-name”: “cw-device-auth” }, “directory”: “/var/opt/ncs/state/packages-in -whakamahi/1/cw-device-auth”, “waahanga”: [ { “ingoa”: “mahi”, “tono”: { “ingoa-akomanga-python”: “cw_device_auth.action.App”, “tīmata- wāhanga”: “wāhanga2” } } ], “tūnga-mahi”: {
Te taapiri mapi kaiwhakamahi (umap) ki Cisco NSO Rōpū AUTH
Ka taea e Cisco NSO nga kaiwhakamahi ki te tautuhi i nga roopu AUTH mo te tohu tohu mo te uru taputapu ki te tonga. Ka taea e te roopu-authgroup he mahere-taunoa, he mahere-kaiwhakamahi ranei (umap). I tua atu, ka taea te tautuhi i te umap i roto i te roopu-authgroup mo te whakakore i nga tohu taunoa mai i te mahere-taunoa, i etahi atu umaps ranei.
Ko te Huringa Whakawhiti Whakaaunoa "whakakore i nga tohu tohu" e whakamahi ana i tenei umap. Hei whakamahi i te Whakaaunoa Huri Crosswork, me hanga he whirihoranga umap i roto i te roopu authauto mo nga taputapu.
Mo te exampNa, whakaarohia he taputapu koe "xrv9k-1" kua whakauruhia ki Cisco NSO. Ka whakamahia e tenei taputapu te roopu mana, "whakawhitiwhiti".
taker @ncs# whakaatu i nga taputapu whirihora whakahaere xrv9k-1 taputapu roopu roopu taputapu xrv9k-1 kupu whakawhiti roopu AUTH
A ko te whirihoranga o te roopu AUTH "whakawhiti kupu" e whai ake nei: causer @ncs# show running-config devices AUTH groups group crossword devices AUTH groups group crossword ump admin remote-name cisco remote-password $9$LzskzrvZd7LeWwVNGZTdUBDdKN7IgVV/UkJebwM1eKg
Tāpirihia he umap mo te kaiwhakamahi hou i hanga e koe (cwuser i tenei example). Ka taea te mahi penei:
taker @ncs# whirihora
taker @ncs(config)# whakaaro AUTH roopu roopu kupu ump causer callback-node /cw-credsget action-name tiki taker @ncs(config-ump-causer)# commit dry-run cli { local-node { data device { AUTH roopu { kupu whakawhiti roopu { + ump causer { + callback-node /cw-creds-get; + mahi-ingoa tiki; taker @ncs(config-umap-cwuser)# commit Kua oti.
Whai muri i te whirihoranga, me penei te ahua o te roopu mana:
cwuser@ncs# whakaatu i nga taputapu whirihora whakahaere AUTH roopu roopu kupu whakawhiti kupu roopu roopu AUTH kupu whakawhiti roopu umap admin ingoa-mamao cisco kupuhipa-mamao $9$LzskzrvZd7LeWwVNGZTdUBDdKN7IgVV/UkJebwM1eKg=mapi kaikorero-whakahoki-kopuku /cw-ingoa whiwhi-tiki
Me whakarite
- Ka taapirihia te umap ki tetahi roopu AUTH o te taputapu (ng) e whai paanga ana.
- Kei te whakamahi a umap i te ingoa kaiwhakamahi tika.
Mena kaore i te tika tetahi o nga mea i runga ake nei, ka kite koe i nga take i te wa whakahaere.
Te whirihora i te DLM ki Cisco CrossWorks
I muri i te whakauru me te whirihora i te kete mahi i Cisco NSO, me whakarite e koe te whirihoranga i DLM i roto i te mahi Cisco Cross. Ko enei tautuhinga whirihoranga ka taea te Huri Aunoatanga ki te uru atu ki a Cisco NSO ma te kaiwhakamahi hou i hangaia me te whirihora ma te whakamahi i nga tohu taapiri ina hiahiatia.
Waihangatia te ca_device_auth_nso Credential Profile
Waihangahia he tohu tohu houfile i roto i Cisco NSO mo te kaiwhakamahi uru motuhake i hanga e koe i roto i te waahanga Te hanga i tetahi Kaiwhakamahi Whakauru Motuhake i roto i te NSO o tenei aratohu. Tāpirihia nga tohu tohu HTTP me te HTTPS mo te kaiwhakamahi i roto i tenei tohu tohufile. Ko te ahua i raro nei e whakaatu ana i te tohu kaiwhakamahi me te kupuhipa mo te kaiwhakamahi, "cwuser".

NUI
Me te ca_device_auth_nso credential profile, ka whiwhi koe i tetahi atu tohu tohufile i roto i te DLM e tohu ana i nga korero ingoa ingoa/kupuhipa ki a Cisco NSO mo era atu waahanga katoa o Cisco Crosswork. I roto i te exampi raro nei, tenei tohu tohufile ka kiia ko "nso-creds". He mea nui: Me whakarite ko te ingoa kaiwhakamahi mo nga tohu tohu DLM auaufile he rereke mai i te ingoa kaiwhakamahi kei roto i te ca_device_auth_nso profile

Tāpiri Taonga Kaiwhakarato DLM
Ina oti i a koe te hanga i te tohu tohufile i roto i te DLM, me taapiri he taonga ki nga kaiwhakarato Cisco NSO katoa i DLM ka whakamahia ki Cross work CA. Ko te ahua i raro nei e whakaatu ana i te whakaritenga o nga rawa

Raparongoā
Ko te ripanga e whai ake nei e whakaatu ana i nga hapa noa ka tupono pea koe
| Kao. | Raroroto Hapa | Raruraru | Whakatau |
| 1. | nso umap kaiwhakamahi me he pro credential profile kaiwhakamahi | ca_device_auth_nso ingoa kaiwhakamahi kaore e taurite ki nga kaiwhakamahi umap. |
|
| 2. | Putua te roopu mana umap mai i nso | Karekau he umap i kitea i roto i te Cisco NSO authgroup. | Tāpirihia te umap. |
| 3. | i rahua te tiki i te putake rauemi RESTCONF. koa manatoko NSO ka taea te toro atu ma te RESTCONF | I rahua te hono atu a Crosswork CA ki Cisco NSO mā RESTCONF. | Me whakarite ko te ingoa kaiwhakamahi/kupuhipa kua tohua i roto i te cw_device_auth_nso cred profile ka taea te hono atu ki a Cisco NSO ma RESTCONF. |
| 4. | I rahua ki te tautuhi i nga tohu tohu whakakore i te taputapu i roto i te NSO, karekau te uru (3): karekau te uru | Kua ngaro te whirihora: tm-tc fp ki te mahi me nga taputapu cli NED me te Crosswork. | Hoatu nga whirihoranga e rua e whai ake nei ki te aratau nso kore-cisco: whakaturia cisco-tm-tc-fp: cfp-whirihoranga dynamic-device-mapping cisco-iosxr-cli- 7.33: cisco-iosxr-cli-7.33 python-impl- class-name tm_tc_multi_vendors. IosXR tautuhi cisco-tm-tc-fp:cfp-whirihoranga tāpae-ratonga-whakahohea |
Ko nga tuhinga kua whakaritea mo tenei hua e ngana ana ki te whakamahi i te reo kore korero. Mo nga kaupapa o tenei huinga tuhinga, kua tautuhia te kore-kore ki roto i te reo kaore e kii ana i te whakahāwea i runga i te pakeke, te hauatanga, te ira tangata, te tuakiri iwi, te tuakiri iwi, te takotoranga wahine, te stutus socioeconomic, me te whakawhitinga. Kei roto pea nga tuunga i roto i nga tuhinga na te reo e whakapakeketia ana i roto i nga tohu kaiwhakamahi o te rorohiko hua, te reo whakamahia besett ors stand ants documentation, te reo ranei e whakamahia ana e tetahi hua tuatoru-tuatoru.
Ko Cisco me te moko Cleco he tohu tohu, he tohu rehita ranei na Cisco me/ranei ona hononga i te US me etahi atu whenua. Ki view he rarangi o nga tohu tohu Cisco, haere ki tenei URL: https://www.cisco.com/c/en/us/about/legal/tohu. noml. Ko nga tohu tohu-tuatoru e kii ana ko nga rawa o ratou ake rangatira. Ko te whakamahi i te kupu hoa ehara i te mea he hononga hononga i waenga i a Cisco me etahi atu kamupene. (1721) 2023 Claco me/ranei ona hononga. Kua rahuitia nga aights.

Tuhinga / Rauemi
![]() |
CISCO NA Crosswork Huri Aunoatanga NSO Function Pack [pdf] Aratohu Tāuta NA Crosswork Huri Aunoa NSO Taumahi Pack, NA, Crosswork Huri Aunoatanga NSO Taumahi Pack, Automation NSO Taumahi Pack, NSO Function Pack, Taumahi Pack, Pack |
