sam
0c91cad55f
The stack side is portable; the router side had no reference material -- a
new operator standing up OBMP has no guide for what to configure on their
devices to feed it. Adds two artifacts, both vendor-neutral in intent,
IOS-XR-specific in syntax:
docs/router-integration.md
Multi-path tour of the four ingest paths (BMP, BGP-LS, gNMI,
NETCONF) with a bring-up checklist and cross-references. The BMP
section is deliberately thin -- it hands off to docs/router-bmp-config.md
for the address-selection, port-choice, and RR-scope activation
detail already covered there.
router-blueprints/iosxr/*.cfg
Copy-paste config fragments, one per ingest path plus a
role-route-reflector overlay. All values are <PLACEHOLDER>
substitutions -- no hardcoded IPs, no lab-gear names. Fragments
align to the ROUTER_FACING_IP / ROUTER_FACING_PORT convention
introduced in docs/router-bmp-config.md.
router-blueprints/README.md
Substitution legend + layout, cross-links to PORTABILITY-FINDINGS.md
finding 4 (why routers can't target HOST_IP on WSL).
Also appends the multi-path guide link to the Greenfield deploy section
in README.md so router-side integration is discoverable from the top.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
39 lines
1.5 KiB
INI
39 lines
1.5 KiB
INI
! ============================================================================
|
|
! 00-netconf.cfg -- IOS-XR NETCONF/SSH enablement (prerequisite)
|
|
! ============================================================================
|
|
! The stack's automation (rib-poller, RR diff pipeline, any
|
|
! ncclient-based configurator) connects to routers on TCP/830 using the
|
|
! IOS-XR NETCONF device dialect. If NETCONF is not enabled, none of that
|
|
! works and the BMP ingest path is the only thing that can succeed.
|
|
!
|
|
! Apply once per router before any of the other fragments. Substitute
|
|
! <NETCONF_USER> and its password with values that match your stack's
|
|
! .env (IOSXR_NETCONF_USER / IOSXR_NETCONF_PASS).
|
|
! ============================================================================
|
|
|
|
! --- SSH server (NETCONF-over-SSH transport) --------------------------------
|
|
ssh server v2
|
|
ssh server netconf vrf default
|
|
!
|
|
|
|
! --- NETCONF-YANG agent -----------------------------------------------------
|
|
netconf-yang agent
|
|
ssh
|
|
!
|
|
|
|
! --- Local user for NETCONF (skip if you use AAA/TACACS+) -------------------
|
|
username <NETCONF_USER>
|
|
group root-lr
|
|
group cisco-support
|
|
secret <PLAINTEXT_OR_HASHED_PASSWORD>
|
|
!
|
|
|
|
! --- Verify -----------------------------------------------------------------
|
|
! show netconf-yang statistics
|
|
! show ssh
|
|
! show run formal ssh
|
|
!
|
|
! From the stack host, quick sanity check:
|
|
! ssh -p 830 <NETCONF_USER>@<ROUTER_MGMT_IP> -s netconf
|
|
! (should return an <hello> capability exchange, not a shell prompt)
|