CISCO NA Crosswork Canjin Aiki Aiki NSO Jagoran Shigar Fakitin Aiki

Gabatarwa

Wannan takaddun yana bayyana yadda ake saukewa, shigarwa, da kuma daidaita fakitin aikin Cisco CrossWorks Change Automation (CA) akan Cisco Network Services Orchestrator (NSO). Bugu da ƙari, daftarin aiki ya bayyana tsarin da ake buƙata don Canjin Canjin Automation na CrossWorks a cikin Cisco CrossWorks.

Manufar
Wannan jagorar yana bayyana:

• Shigar da fakitin aikin cw-na-fp-ca-5.0.0-nso-6.1.tar.gz akan Cisco NSO 6.1 da haɗin haɗin gwiwa don fakitin aikin akan Cisco NSO.
• Ƙungiya ta AUTH don ƙirƙirar taswirar mai amfani na musamman (ump) don Canja Automation.
• Saitunan DLM da Canza saitunan aikace-aikacen Automation da ake buƙata a cikin Cisco CrossWorks 5.0.0

Abubuwan da ake bukata
Jerin da ke ƙasa yana nuna ƙaramin juzu'in Cisco NSO da Cisco CrossWorks waɗanda fakitin Canjin Canjin Automation na CrossWorks v5.0 ya dace:

• Cisco NSO: v6.1 tsarin shigar
• Cisco CrossWorksku: v5.0.0

Shigarwa da Gudanarwa

Sassan da ke ƙasa suna nuna yadda ake shigar da fakitin aikin cw-na'urar-auth akan tsarin shigar Cisco NSO 6.1 ko sama.

Kunshin Aiki na Shigarwa

1. Zazzage cw-na'urar-auth v5.0.0 daga wurin ajiya zuwa Cisco NSO.
2. Kwafi tarihin fakitin tar.gz da aka zazzage zuwa ma'ajiyar kunshin ku.
   Lura: Jagorar fakitin na iya bambanta dangane da saitunan da aka zaɓa a lokacin shigarwa. Don yawancin Cisco NSO da aka shigar da tsarin, kundin adireshin yana samuwa a “/var/opt/ncs/packages” ta tsohuwa. Duba ncs. conf akan shigarwa don nemo daraktan kunshin ku
3. Kaddamar da NCS CLI kuma gudanar da waɗannan umarni masu zuwa: admin@nso1: ~$ ncs_cli -C -u admin admin wanda aka haɗa daga 2003:10:11::50 ta amfani da ssh akan nso1 admin@ncs# fakitin sake lodawa
4. Tabbatar cewa an yi nasarar shigar da kunshin da zarar an gama sakewa. admin@ncs# nuna fakitin fakitin cw-na'urar-auth fakitin cw-na'urar-auth fakitin-version 5.0.0 bayanin "CrossWorks na'urar izinin ayyukan fakitin" ncs-min-version [6.0] python-kunshin vim-name cw-na'urar -AUTH directory /var/opt/n's/state/packs-in-amfani/1/cw-na'urar-auth kayan aikin aikace-aikacen python-class-name cw_ device _a uth. aiki. Matsayin opera na aikace-aikacen farawa-fase2

Ƙirƙirar Mai Amfani na Musamman a Cisco NSO

Cisco CrossWorks Change Automation yana amfani da mai amfani na musamman don haɗawa zuwa Cisco NSO don duk canje-canjen sanyi. Wannan yana nufin cewa ba za ku iya amfani da mai amfani iri ɗaya kamar DLM ko ayyukan tarawa don samun damar Cisco NSO ba. Wannan sashe yana tattauna abubuwan da ake buƙata kafin ƙirƙirar mai amfani.

Lura: Matakan da ke ƙasa suna ɗauka cewa Cisco NSO yana gudana akan VM Ubuntu. Idan shigarwar Cisco NSO naka yana gudana akan wani tsarin aiki daban, da fatan za a gyara matakan daidai.

1. Ƙirƙiri sabon mai amfani sudo akan Ubuntu VM ɗin ku. Exampku nan. Matakan da ke ƙasa suna nuna yadda ake ƙirƙirar “cwuser” mai amfani akan VM ɗin ku na Ubuntu. Wannan sabon sunan mai amfani na iya zama duk abin da kuka zaɓa. tushen @nso:/gida/admin# mai haifar da adducer Ƙara mai amfani `causer' … Ƙara sabon rukuni `masu kawo hari' (1004) … Ƙara sabon mai amfani `cwuser' (1002) tare da rukuni `cwuser Ƙirƙirar gida directory `/gida/causer' … Ana kwafi files from `/etc/skel' … Shigar da sabuwar kalmar sirri ta UNIX: Sake rubuta sabuwar kalmar sirri ta UNIX: wucewa: kalmar sirri da aka sabunta cikin nasara Canja bayanin mai amfani don cwuser Shigar da sabuwar ƙima, ko danna ENTER don tsoho cikakken Suna: Lambar ɗaki: Wayar Aiki: Wayar Gida: Wani: Shin bayanin daidai ne? [Y / n] y tushen @ nso: / gida / admin # mai amfani MoD -aG sudo tushen tushen @ nso: / home / admin # usermod -a -G sysadmin cwuser
2. Tabbatar cewa sabon mai amfani da ka ƙirƙira yana da HTTP kuma HTTPS samun dama ga Cisco NSO uwar garken. Ana iya yin wannan ta amfani da sauƙi RESTCONF API kamar yadda aka nuna a ƙasa. curl -u : –wuri –request SAMU 'https://:8888/restconf/data/tailf-ncs:packages/package=cw-device-auth' \ -header 'Accept: application/yang-data+json' \ -header 'Content-Type: application/ yang-data+json' \ –data-raw ” Bayan kiran curl umarnin da ke sama, yakamata ku karɓi amsa kamar yadda aka nuna a ƙasa. Duk wani martani zai nuna cewa ƙarin saitin kafin wannan bai yi aiki ba. {"tailf-ncs: package": [{"suna": "cw-na'urar-auth", "kunshi-version": "1.0.0", "bayani": "Krosswork na'urar izni ayyuka fakitin", "ncs- min-version": ["6.0"], "python-package": {"vm-name": "cw-device-auth"}, "directory": "/var/opt/ncs/state/packages-in -use/1/cw-na'urar-auth", "bangaren": [ {"suna": "aiki", "application": {"python-class-name": "cw_device_auth.action.App", "fara- lokaci": "phase2"}}], "oper-status": {

Ƙara taswirar mai amfani (taswirar) zuwa Cisco NSO Kungiyar AUTH

Cisco NSO yana ba masu amfani damar ayyana ƙungiyoyin AUTH don ƙayyadaddun takaddun shaida don samun damar na'urar da ke kan iyakar kudu. Ƙungiya ta auth zata iya ƙunsar tsohuwar taswira ko taswirar mai amfani (taswirar). Bugu da ƙari, ana iya ayyana umap a cikin rukunin auth don ƙetare tsoffin takaddun shaida daga taswirar tsoho ko wasu umaps.

Canjin Canjin Automation Automation "Sake Ƙaddamar da Takaddun shaida Passthrough" yana amfani da wannan umap. Don amfani da Canjin Canjin Automation, ana buƙatar ƙirƙira saitin umap a cikin rukunin na'urorin.

Don misaliampDon haka, la'akari da cewa kuna da na'urar "xrv9k-1" da ke cikin Cisco NSO. Wannan na'urar tana amfani da rukunin auth, "crosswork".

mai haddasa @ncs# nuna na'ura mai aiki da na'ura xrv9k-1 authgroup devices xrv9k-1 AUTH crossword
Kuma daidaitawar ƙungiyar AUTH "crossword" ita ce kamar haka: mai haifar @ncs # nuna na'urori masu gudana-config AUTH groups group crossword devices AUTH groups group crossword ump admin remote-name cisco remote-password $9$LzskzrvZd7LeWwVNGZTdUBDdKN7IgVV/UkJebwM1eK

Ƙara umap don sabon mai amfani da kuka ƙirƙira (cwuser a cikin wannan tsohonample). Ana iya yin haka kamar haka:

mai haddasa @ncs# saitin
mai haddasa @ncs(saifi)# na'urorin AUTH ƙungiyoyin crossword ump mai haifar da callback-node /cw-credsget mataki-name samun mai haifar @ncs(config-ump-causer)# aikata bushe-gudu cli { gida-kumburi {data na'urorin {AUTH ƙungiyoyi {crossuwar rukuni {+ mai haifar da ump {+ callback-node /cw-creds-get; + aikin-suna samun; mai haifar @ncs(config-umap-cwuser)# ƙaddamar da cikawa.

Bayan daidaitawa, rukunin mawallafin ya kamata yayi kama da haka:
cwuser@ncs# nuna na'urorin daidaitawa masu gudana AUTH ƙungiyoyin na'urorin ƙetare na'urorin AUTH ƙungiyoyin giciye umap admin ramut-sunan cisco m-password $9$LzskzrvZd7LeWwVNGZTdUBDdKN7IgVV/UkJebwM1eKg=taswirar taswirar kiran baya-node /cw-cred sunayen

Tabbatar da haka

• ana ƙara umap zuwa ƙungiyar AUTH data kasance na na'urar (s) mai ban sha'awa.
• umap yana amfani da sunan mai amfani daidai.

Idan ɗaya daga cikin abubuwan da ke sama ba daidai ba ne, za ku ga batutuwa a lokacin aiki.

Ana saita DLM a cikin Cisco CrossWorks

Bayan shigarwa da daidaita fakitin aikin a cikin Cisco NSO, kuna buƙatar saita saitin a cikin DLM a cikin aikin Cisco Cross. Waɗannan saitunan saitin za su ba da damar Canja Automation don samun damar Cisco NSO ta hanyar sabon mai amfani da aka ƙirƙira da kuma saita ta amfani da ƙetare takaddun shaida lokacin da ake buƙata.

Ƙirƙiri ca_device_auth_nso Credential Profile
Ƙirƙiri sabon ma'aikaci mai fa'idafile a cikin Cisco NSO don mai amfani na musamman wanda kuka ƙirƙira a sashe Ƙirƙirar mai amfani ta musamman a cikin NSO na wannan jagorar. Ƙara takaddun shaida na HTTP da HTTPS don mai amfani a cikin wannan ingantaccen aikinfile. Hoton da ke ƙasa yana nuna takamaiman mai amfani da kalmar sirri don mai amfani, “cwuser”.

MUHIMMANCI

Tare da ca_device_auth_nso takardar shaidar profile, za ku sami wani pro credential profile a cikin DLM wanda zai ƙayyade sunan mai amfani/babban kalmar sirri zuwa Cisco NSO don duk sauran abubuwan haɗin gwiwar Cisco Crosswork. A cikin example kasa, wannan takardar shaidar profile ana kiransa "nso-creds". Muhimmi: Tabbatar cewa sunan mai amfani don ƙimar shaidar DLM na yau da kullunfile ya bambanta da sunan mai amfani a cikin ca_device_auth_nso profile

Ƙara Dukiyar Mai Ba da DLM
Da zarar kun ƙirƙiri takaddun shaida profile a DLM, kana buƙatar ƙara dukiya ga duk masu samar da Cisco NSO a cikin DLM wanda za a yi amfani da shi a cikin aikin Cross CA. Hoton da ke ƙasa yana nuna ƙayyadaddun kadarorin

Shirya matsala

Tebur mai zuwa yana lissafin kurakurai gama gari waɗanda za ku iya fuskanta

A'a.	Kuskuren Substring	Matsala	Ƙaddamarwa
1.	nso umap mai amfani dole ne kuma ya zama mai sahihan bayanaifile mai amfani	ca_device_auth_nso sunan mai amfani bai dace da kowane mai amfani da umap ba.	Ƙara/gyara umap. Shirya ca_device_auth_nso cred profile.
2.	komai auth group umap daga nso	Babu umap da aka samu a cikin ƙungiyar mawaƙa ta Cisco NSO.	Ƙara umap.
3.	ya kasa dawo da tushen albarkatun RESTCONF. da fatan za a tabbatar da NSO ana iya samun su ta hanyar RESTCONF	Crosswork CA ya kasa haɗi zuwa Cisco NSO ta RESTCONF.	Tabbatar cewa sunan mai amfani/kalmar sirri kamar yadda aka ƙayyade a cw_device_auth_nso cred profile na iya haɗawa zuwa Cisco NSO ta hanyar RESTCONF.
4.	Ba a yi nasarar saita na'urar da za ta kawar da takaddun shaida a cikin NSO, an hana samun dama (3): an hana samun dama	nso config bace: tm-tc fp don aiki tare da cli NED na'urorin da Crosswork.	Aiwatar da saituna biyu masu zuwa akan yanayin da ba cisco ba: saita cisco-tm-tc-fp:cfp-tsari mai ƙarfi-na'urar-taswirar cisco-iosxr-cli- 7.33:cisco-iosxr-cli-7.33 python-impl- class-name tm_tc_multi_vendors. IosXR saita cisco-tm-tc-fp: cfp-daidaitacce stacked-service-enabled

Saitin takaddun don wannan samfurin yana ƙoƙari don amfani da harshe marar son zuciya. Don dalilai na wannan saitin takaddun, an bayyana rashin son zuciya a cikin yare wanda baya nufin nuna bambanci dangane da shekaru, nakasa, jinsi, asalin launin fata, asalin kabila, yanayin jima'i, stutus na zamantakewar al'umma, da tsaka-tsaki. Banda iya kasancewa a cikin takaddun saboda yaren da ke da ƙarfi a cikin madaidaicin madaidaicin software na samfurin, yaren da aka yi amfani da shi ko kuma bayanan tururuwa, ko yaren da samfur na ɓangare na uku ke amfani da shi.

Cisco da tambarin Cleco alamun kasuwanci ne ko alamun kasuwanci masu rijista na Cisco da/ko masu haɗin gwiwa a Amurka da wasu ƙasashe. Zuwa view jerin alamun kasuwanci na Cisco, je zuwa wannan URL: https://www.cisco.com/c/en/us/about/legal/alamomin kasuwanci. noml. Alamomin kasuwanci na ɓangare na uku da aka ambata kamar mallakin masu su. Amfani da kalmar abokin tarayya baya nufin alaƙar haɗin gwiwa tsakanin Cisco da kowane kamfani. (1721) 2023 Claco da/ko abokansa. An tanadi Aights.

Takardu / Albarkatu

CISCO NA Crosswork Canjin Aiki Automation NSO Kunshin Aiki [pdf] Jagoran Shigarwa NA Crosswork Canjin Automation Kunshin Aiki NSO, NA, Canjin Canjin Aiki Automation Kunshin Aiki NSO, Kunshin Aiki NSO Aiki Aiki, Kunshin Aiki NSO, Kunshin Aiki, Kunshin

Magana

• Manual mai amfani