aristanetworks / avd

Arista Validated Designs
https://avd.arista.com
Apache License 2.0
252 stars 188 forks source link

eos_cli_config_gen: nac #4179

Open duddis1 opened 3 days ago

duddis1 commented 3 days ago

Enhancement summary

We are implementing nac config and some missing variables. We need to generate the following config

!
management api gnmi
 no shutdown
!
router segment-security
 no shutdown

to work around it it we might have to use the following config: for management api grmi we do not have the option to shutdown.

eos_cli: |
!
management api gnmi
 no shutdown
!
router segment-security
 no shutdown

Which component of AVD is impacted

eos_cli_config_gen

Use case example

please detail your use caseto work around it it we might have to use the following config:

eos_cli: |
!
management api gnmi
 no shutdown
!
router segment-security
 no shutdown

Describe the solution you would like

If model can be extended to support above that will be very useful https://avd.arista.com/4.7/roles/eos_cli_config_gen/docs/input-variables.html?h=dot1x#__tabbed_22_2

Describe alternatives you have considered

eos_cli: |
!
management api gnmi
 no shutdown
!
router segment-security
 no shutdown

Additional context

nac configuration

Contributing Guide

gmuloc commented 3 days ago

Hello @duddis1. Thanks for opening the issue

for

router segment-security
 no shutdown

You have already: https://avd.arista.com/devel/roles/eos_cli_config_gen/docs/input-variables.html#__tabbed_148_2

router_segment_security:
  enabled: true

that will generate the config you need.

For the gnmi part, we have no key to generate the no shutdown today indeed. I have just checked on some cEOS device and a 7280 and cannot see the option:

host2(config-mgmt-api-gnmi)#no shutdown
% Incomplete command
host2(config-mgmt-api-gnmi)#show active
host2(config-mgmt-api-gnmi)#show cli commands
[no|default] APPEND [ COMMENT ]
[no|default] comment
do CMD
exit
[no|default] operation set persistence
[no|default] provider eos-native
show active
show active all [ detail ]
show comment
[no|default] transport grpc TRANSPORT_NAME
[no|default] transport grpc-tunnel TRANSPORT

can you please confirm the syntax and the platform?