vagrant up for Network Engineers Do it like they do on the Developer Channel!

Transcription

1

2 DEVNET-1364 vagrant up for Network Engineers Do it like they do on the Developer Channel! Hank Preston, NetDevOps Evangelist ccie 38336,

3 Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot#devnet Cisco and/or its affiliates. All rights reserved. Cisco Public

4 Agenda Vagrant 101 Hands On: Your first vagrant up! Hands On: Vagrant + Ansible Discuss: Multi-Node Topologies How to do it yourself!

5 Lab Preparation

6 Setup your laptop Clone the Repository Setup Python Virtual Environment $ cd ~/code/ciscolive_workshops/devnet-1364 $ source labsetup.sh $ ls l README.md hands_on_1 hands_on_2 hands_on_3 iosxr_example nxos_example requirements.txt venv DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 6

7 Vagrant 101

8 Development Environments Made Easy Open Source Develop Tooling by HashiCorp Simple configuration file stored with code easy to configure, reproducible, and portable work environments Multi-Platform for both guest and host lab\ $ vagrant init iosxe/ lab\ $ vagrant up Bringing machine 'default' up with 'virtualbox' provider... ==> default: Importing box 'iosxe/16.6.1'... ==> default: Forwarding ports... default: 830 (guest) => 2223 (host) default: 80 (guest) => 2224 (host) default: 443 (guest) => 2225 (host) default: 22 (guest) => 2222 (host) lab\ $ vagrant ssh csr1kv# DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 8

9 Key Terms and Concepts Vagrantfile Configuration file for vagrant Box Base images for different individual environments Provider Virtualization technology used by vagrant Default is VirtualBox, many other supported lab\ $ ls Vagrantfile lab\ $ vagrant box list centos/7 (virtualbox, ) ubuntu/trusty64 (virtualbox, ) iosxe/ (virtualbox, 0) iosxr/6.1.2 (virtualbox, 0) nxos/7.0.3.i6.1 (virtualbox, 0) lab\ $ vagrant status Current machine states: default running (virtualbox) DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 9

10 Vagrant Commands vagrant init box name Initialize a new Vagrantfile in a directory vagrant up / halt / destroy Start, stop, and delete an environment vagrant resume / suspend Pause and restart an environment vagrant ssh [machine] Connect via SSH to a running environment vagrant port View the nat d ports for the environment vagrant provision Re-run configured provisioner (eg Ansible) vagrant box list Display list of available boxes vagrant status / global-status Display current status of environments lab\ $ vagrant suspend ==> default: Saving VM state and suspending lab\ $ vagrant resume ==> default: Resuming suspended VM... lab\ $ vagrant port 830 (guest) => 2223 (host) 22 (guest) => 2222 (host) lab\ $ vagrant ssh csr1kv# DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 10

11 Vagrantfile Basics (for Network Devices) # -*- mode: ruby -*- # vi: set ft=ruby : Box Name Don t insert Vagrant public key. Recommended Forward local ports for API/App access. SSH is forwarded by default Create environment networks. eth1 connected to host by default Vagrant.configure("2") do config # Every Vagrant development environment requires a box. You can search for # boxes at config.vm.box = "iosxe/16.6.1" config.ssh.insert_key = false # Create a forwarded port mapping which allows access to a specific port # within the machine from a port on the host machine. config.vm.network "forwarded_port", guest: 830, host: 2223, id: "netconf" config.vm.network "forwarded_port", guest: 80, host: 2224, id: http" config.vm.network "forwarded_port", guest: 443, host: 2225, id: "restconf-ssl" # Create a private network, which allows host-only access to the machine # using a specific IP. config.vm.network :private_network, virtualbox intnet: "link1", auto_config: false config.vm.network :private_network, virtualbox intnet: "link2", auto_config: false end Note: Vagrant Boxes can include default settings * Simplified and edited sample DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 11

12 Hands On 1: Your first vagrant up!

13 Initialize your Vagrantfile View available boxes Initialize new Vagrant File lab\ $ cd hands_on_1/ hands_on_1\ $ vagrant box list hands_on_1\ $ vagrant init iosxe/ hands_on_1\ $ open Vagrantfile DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 13

14 Let s add more interfaces! Open Vagrantfile Add 2 Interfaces to Configuration Specific positioning in file is irrelevant * Must be within config block Vagrant.configure("2") do config config.vm.box = "iosxe/16.6.1" * Simplified and edited sample # Create a private networks config.vm.network :private_network, virtualbox intnet: "link1", auto_config: false config.vm.network :private_network, virtualbox intnet: "link2", auto_config: false end or cp Vagrantfile.solution Vagrantfile DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 14

15 Start a Vagrant Environment Start environment Connect to running switch hands_on_1\ $ vagrant up hands_on_1\ $ vagrant ssh DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 15

16 Explore the Vagrant Environment Baseline Configurations Logins User / Cert APIs Interfaces Make an API Call # Run from Vagrant Environment (ie vagrant ssh) csr1kv#sh run aaa csr1kv#sh run sec pubkey-chain csr1kv#show run int Gig1 csr1kv#sh run inc conf # Exit from Vagrant Environment hands_on_1\ $ python netconf_example1.py DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 16

17 Do some configuration Configure interface details on GigabitEthernet2 using NETCONF Verify hands_on_1\ $ python netconf_example3.py.. <?xml version="1.0" encoding="utf-8"?> <rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:6e d8-=" xmlns:nc="urn:ietf:params:xml:ns:netconf:base:1.0"> <ok/> </rpc-reply> hands_on_1\ $ vagrant ssh csr1kv#sh ip int bri Interface IP-Address GigabitEthernet DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 17

18 Build a new Base Box Template vagrant up and customize vagrant halt -f to shut down vagrant package to build new box Include default Vagrantfile to ease use vagrant box add to make available hands_on_1\ $ vagrant halt -f hands_on_1\ $ vagrant package \ --output Custom_IOS_XE.box \ --vagrantfile embedded_vagrantfile_xe hands_on_1\ $ vagrant box add iosxe/custom1 \ Custom_IOS_XE.box hands_on_1\ $ mkdir custom_box hands_on_1\ $ cd custom_box hands_on_1\ $ vagrant init iosxe/custom1 DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 18

19 Review Sample Embedded Vagrantfile Vagrant.configure(2) do config config.vm.synced_folder '.', '/vagrant', disabled: true # Give IOS XE 400 seconds to come up config.vm.boot_timeout = 400 # Port 830 is XE NETCONF config.vm.network :forwarded_port, guest: 830, host: 2223, id: 'netconf', auto_correct: true # Port 80 is XE HTTP config.vm.network :forwarded_port, guest: 80, host: 2224, id: 'http', auto_correct: true # Port 443 is XE RESTCONF / SSL config.vm.network :forwarded_port, guest: 443, host: 2225, id: 'restconf-ssl', auto_correct: true config.ssh.forward_agent = true config.ssh.guest_port = 22 config.ssh.insert_key = false config.vm.guest = :other # turn off the check if the plugin is installed if Vagrant.has_plugin?("vagrant-vbguest") config.vbguest.auto_update = false end. end * Simplified and edited sample DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 19

20 Destroy Hands on Demo 1 Destroy this environment hands_on_1\ $ vagrant destroy DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 20

21 Hands On 3: Provisioning

22 Come on... Really vagrant ssh and config t?!? Infrastructure as Code dictates entire configuration in code Building multiple box versions for variations = template sprawl Human error in manual configurations There has to be a better way DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 22

23 Vagrant Provisioners Run with vagrant up Install software Alter configurations Run commands/code Types Shell, Ansible, Puppet, Chef, Docker, Salt, CFEngine Vagrant.configure("2") do config #... other configuration config.vm.provision "shell" do s s.inline = "echo hello" end end DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 23

24 Hands On 3 Directory Move to Hands On 3 Start the vagrant up process now so it runs while we discuss hands_on_1\ $ cd../ lab\ $ cd hands_on_3/ hands_on_3\ $ ls Vagrantfile host_vars hosts ansible_provision.yaml netconf_interface_template.j2 hands_on_3\ $ open Vagrantfile hands_on_3\ $ vagrant up DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 24

25 hands_on_3/vagrantfile Specify provisioning details in the file For Ansible, specify hosts file Used for config details Vagrant.configure("2") do config # Every Vagrant development environment requires a box. You can search f # boxes at config.vm.box = "iosxe/ " end # Create a private network, which allows host-only access to the machine # using a specific IP. # config.vm.network "private_network", ip: " " config.vm.network :private_network, virtualbox intnet: "link1", auto_co config.vm.network :private_network, virtualbox intnet: "link2", auto_co # Enable provisioning with Ansible shell script. config.vm.provision "ansible" do ansible ansible.playbook = "ansible_provision.yaml" ansible.inventory_path = "./hosts" end * Simplified and edited sample DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 25

26 hands_on_3/hosts Ansible inventory file [vagrant] default ansible_python_interpreter="/usr/bin/env python" Specify interpreter to link to Python Virtual Environment * Partial Playbook for screen display DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 26

27 hands_on_3/ansible_provision.yaml Ansible Playbook defines configuration Several options to use ios_config, ios_command, etc netconf_config name: Provision IOS XE Devices hosts: all connection: local tasks: - name: Pause to complete boot pause: seconds: 5 - name: Configure NETCONF and RESTCONF ios_config: provider: host: "{{mgmt_ip}}" port: "{{ssh_port}}" username: "{{username}}" password: "{{password}}" lines: - netconf-yang - netconf-yang cisco-odm polling-enable - restconf - ip http server - ip http secure-server register: output_interfaces * Partial Playbook for screen display DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 27

28 hands_on_3/host_vars/default.yaml Host specific details Vagrant network intricacies require explicit ip and port info --- mgmt_ip: netconf_port: 2223 ssh_port: 2222 username: vagrant password: vagrant interfaces: - interface_type: GigabitEthernet interface_id: 2 description: Link 2 - Configured by Ansible with Vagrant ip_address: subnet_mask: interface_type: GigabitEthernet interface_id: 3 description: Link 3 - Configured by Ansible with Vagrant ip_address: subnet_mask: * Partial Playbook for screen display DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 28

29 Vagrant Up After device fully up provisioning runs hands_on_3\ $ vagrant up Bringing machine 'default' up with 'virtualbox' provider... ==> default: Machine booted and ready! ==> default: Running provisioner: ansible... default: Running ansible-playbook... PLAY [Provision IOS XE Devices] ****************************************** TASK [Configure NETCONF and RESTCONF] ************************************ ok: [default] TASK [Configure Interfaces] ********************************************** changed: [default] => (item={u'subnet_mask': u' ', u'interface u'gigabitethernet', u'ip_address': u' ', u'description': u'li by Ansible with Vagrant', u'interface_id': 2}) changed: [default] => (item={u'subnet_mask': u' ', u'interface u'gigabitethernet', u'ip_address': u' ', u'description': u'li by Ansible with Vagrant', u'interface_id': 3}) PLAY RECAP *************************************************************** default : ok=5 changed=1 unreachable=0 failed= * Simplified and edited sample DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 29

30 Verify device provisioned properly Trust, but verify hands_on_3\ $ vagrant ssh csr1kv#show ip int bri Interface IP-Address OK? Method Status P GigabitEthernet YES DHCP up u GigabitEthernet YES other up u GigabitEthernet YES other up u * Simplified and edited sample DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 30

31 Destroy Hands on Demo 3 Destroy this environment hands_on_3\ $ vagrant destroy DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 31

32 Discuss: Multi-Node

33 Hands On 2 Directory Move to Hands on 2 hands_on_1\ $ cd../ lab\ $ cd hands_on_2/ hands_on_2\ $ ls Vagrantfile hands_on_2\ $ open Vagrantfile DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 33

34 Multi-Node Vagrantfile Vagrant.configure("2") do config # Node 1: IOS XE Device Configuration for multiple nodes Different boxes supported Network them together! config.vm.define "iosxe1" do node node.vm.box = "iosxe/ " end # Gig2 connected to link1 # Gig3 connected to hosts1 # auto-config not supported. node.vm.network :private_network, virtualbox intnet: "link1", auto node.vm.network :private_network, virtualbox intnet: hosts1", aut # Node 2: IOS XE Device config.vm.define "iosxe2" do node node.vm.box = "iosxe/ " end end # Gig2 connected to link1 # Gig3 connected to hosts2 # auto-config not supported. node.vm.network :private_network, virtualbox intnet: "link1", auto node.vm.network :private_network, virtualbox intnet: hosts2", aut * Simplified and edited sample DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 34

35 Vagrant Up $ vagrant up Bringing machine 'iosxe1' up with 'virtualbox' provider... Bringing machine 'iosxe2' up with 'virtualbox' provider... ==> iosxe1: Preparing network interfaces based on configuration... iosxe1: Adapter 1: nat iosxe1: Adapter 2: intnet iosxe1: Adapter 3: intnet ==> iosxe1: Forwarding ports... iosxe1: 830 (guest) => 2223 (host) (adapter 1) iosxe1: 80 (guest) => 2224 (host) (adapter 1) iosxe1: 443 (guest) => 2225 (host) (adapter 1) iosxe1: 22 (guest) => 2222 (host) (adapter 1) ==> iosxe1: Machine booted and ready! ==> iosxe2: Importing base box 'iosxe/16.6.1'... ==> iosxe2: Fixed port collision for 830 => Now on port ==> iosxe2: Fixed port collision for 80 => Now on port ==> iosxe2: Fixed port collision for 443 => Now on port ==> iosxe2: Fixed port collision for 22 => Now on port iosxe2: Adapter 1: nat iosxe2: Adapter 2: intnet iosxe2: Adapter 3: intnet ==> iosxe2: Forwarding ports... ==> iosxe2: Machine booted and ready! * Simplified and edited sample DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 35

36 Checkout the Vagrant Environment Check status of machines vagrant ssh name (venv2) hands_on_2\ $ vagrant status Current machine states: iosxe1 iosxe2 running (virtualbox) running (virtualbox) This environment represents multiple VMs. The VMs are all listed above with their current state. For more information about a specific VM, run `vagrant status NAME`. (venv2) hands_on_2\ $ vagrant ssh iosxe1 csr1kv#exit (venv2) hands_on_2\ $ vagrant ssh iosxe2 csr1kv#exit DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 36

37 Impact on host system Each node takes resources Switches/Routers aren t small VMs Monitor Memory Usage DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 37

38 Lab Cleanup

39 Vagrant Commands Make sure all environments destroyed $ vagrant global-status # Move to the parent directory of lab $ cd ~/coding/temp # Delete lab directory $ rm Rf vagrant_net_prog DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 39

40 The right tool for the right job

41 Network Testing and Dev Options DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 41

42 When and Why to Use Vagrant Modern Development Tool Run everything local Few dependencies Independent Environments Ship with Code Samples Test and experiment with APIs DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 42

43 When NOT to use Vagrant Large topologies Data Plane important Multiple simultaneous developers Long running tests DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 43

44 How to do it yourself!

45 Getting Started with Vagrant On Your Own Install Vagrant Create Your Own Boxes for Cisco IOS XE, IOS XR, and Open NX-OS Go to box_building/readme.md Simple instructions and scripts to create Boxes from available resources (ie from CCO) **Some downloads require entitlements DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 45

46 Got more questions? Come find facebook.com/ciscodevnet/ DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 46

47 Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot#devnet Cisco and/or its affiliates. All rights reserved. Cisco Public

48 Please complete your Online Session Evaluations after each session Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt All surveys can be completed via the Cisco Live Mobile App or the Communication Stations Complete Your Online Session Evaluation Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at Cisco and/or its affiliates. All rights reserved. Cisco Public

49 Continue Your Education Demos in the Cisco campus Walk-in Self-Paced Labs Tech Circle Meet the Engineer 1:1 meetings Related sessions DEVNET Cisco and/or its affiliates. All rights reserved. Cisco Public 49

50 Thank you

51