Uninett / nav

Network Administration Visualized
GNU General Public License v3.0
194 stars 39 forks source link

Fetch switch port VN (VRF) and Security Group Tag (SGT) from Cisco SDA #3217

Open lunkwill42 opened 4 days ago

lunkwill42 commented 4 days ago

Is your feature request related to a problem? Please describe.

NTNU is slowly migrating their network to a fully Cisco-based infrastructure, complete with Software-Define Access (SDA)

They have expressed a desire for NAV to be able to fetch and display at least two separate switch port attributes from Cisco SDA (presumably through an API), which apparently cannot be pulled from the switch' running config itself using SNMP.

Describe the solution you'd like

Some questions remain unclear and we cannot proceed with planning this feature until they have been clarified. A non-exhaustive list of unclarified question is:

  1. How do we access the Cisco SDA API? (Including: Where do we find API documentation?)
  2. Is there a single API instance for all of the network, or are there multiple controllers/instances controlling groups of devices?
  3. Should NAV fetch and store these values as part of its normal ipdevpoll inventory jobs for devices in such a network, or should it fetch the data live from SDA as the device pages are browser in the NAV web-UI?
  4. How will NAV know which switches to fetch port configuration from SDA for, and which to not?
  5. Where in the UI should NAV display these config values? Specifically, which tools, pages, reports, tabs, tables?

Additional context

NTNU currently have their own implementation/UI to summarize port configuration status, based on pulling configuration information over SSH connections to devices. Their UI currently looks something like this:

2024-03-08_13-08-09