search

netbox-community / netbox

The premier source of truth powering network automation. Open source under Apache 2. Try NetBox Cloud free: https://netboxlabs.com/free-netbox-cloud/
http://netboxlabs.com/oss/netbox/
Apache License 2.0
16.01k stars 2.57k forks source link

Ability to configure napalm_username and napalm_password on a per platform basis #2459

Closed quantumzedno closed 6 years ago

quantumzedno commented 6 years ago

Issue type

[x] Feature request [ ] Bug report [ ] Documentation

Proposed Functionality

Currently you must configure napalm_username and napalm_password in configuration.py I would like the ability to configure these options independently when creating a platform in netbox, either as part of the optional napalm parameters already configurable when creating a platform, or with separate fields which would ideally be encrypted once configured.

Use Case

This would allow managing of various devices/platforms that do not share the same static username/password across devices and platforms. which isn't ideal for security. i.e password abc123 for cisco routers and password 321cba for aruba switches etc.

If this is already possible using the optional args field in the platform creation menu, i haven't been able to figure out how and would appreciate some clarification. Google Group Discussion I created already: https://groups.google.com/forum/#!topic/netbox-discuss/t-qGWrlVtwM

Thank you,

Ben Lockwood

jeremystretch commented 6 years ago

This has already been raised; see #2113. Whatever we end up doing will likely not be limited to the platform model specifically.

quantumzedno commented 6 years ago

Ah, sorry about that! My thinking on the platform model was simply because there is already some napalm config that can be done there and I figured you could always just have more platforms but in the case of globally unique passwords this could be quite a pain.

I like the ideal of having it ties to secrets in some way if you could work out how to allow decryption without introducing a security hole

Great software, I'm still quite new to the platform but would love to help out where I can.

Cheers,

Ben