cisco_node_utils_mgx 2.1.0.1

data/lib/cisco_node_utils/vxlan_vtep.rb

@@ -0,0 +1,286 @@
+#
+# NXAPI implementation of VXLAN_VTEP class
+#
+# November 2015, Deepak Cherian
+#
+# Copyright (c) 2015-2018 Cisco and/or its affiliates.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+require_relative 'node_util'
+require_relative 'vrf'
+
+module Cisco
+  # node_utils class for vxlan_vtep
+  class VxlanVtep < NodeUtil
+    attr_reader :name
+
+    def initialize(name, instantiate=true)
+      fail TypeError unless name.is_a?(String)
+      fail ArgumentError unless name.length > 0
+      @name = name.downcase
+
+      create if instantiate
+    end
+
+    def self.vteps
+      hash = {}
+      return hash unless Feature.nv_overlay_enabled?
+      vtep_list = config_get('vxlan_vtep', 'all_interfaces')
+      return hash if vtep_list.nil?
+
+      vtep_list.each do |id|
+        id = id.downcase
+        hash[id] = VxlanVtep.new(id, false)
+      end
+      hash
+    end
+
+    def self.mt_full_support
+      config_get('vxlan_vtep', 'mt_full_support')
+    end
+
+    def self.mt_lite_support
+      config_get('vxlan_vtep', 'mt_lite_support')
+    end
+
+    def create
+      if FabricpathGlobal.fabricpath_feature == :enabled &&
+         node.product_id[/N(5|6)K/]
+        fail 'VxLAN cannot be enabled with Fabricpath configured'
+      end
+      Feature.nv_overlay_enable
+      Feature.vn_segment_vlan_based_enable if VxlanVtep.mt_lite_support
+      # re-use the "interface command ref hooks"
+      config_set('interface', 'create', name: @name)
+    end
+
+    def destroy
+      # re-use the "interface command ref hooks"
+      config_set('interface', 'destroy', name: @name)
+    end
+
+    def ==(other)
+      name == other.name
+    end
+
+    ########################################################
+    #                      PROPERTIES                      #
+    ########################################################
+
+    def description
+      config_get('interface', 'description', name: @name, show_name: @name)
+    end
+
+    def description=(desc)
+      fail TypeError unless desc.is_a?(String)
+      state = desc.empty? ? 'no' : ''
+      config_set('interface', 'description',
+                 name: @name, state: state, desc: desc)
+    end
+
+    def default_description
+      config_get_default('interface', 'description')
+    end
+
+    def host_reachability
+      hr = config_get('vxlan_vtep', 'host_reachability', name: @name)
+      hr == 'bgp' ? 'evpn' : hr
+    end
+
+    def host_reachability=(val)
+      set_args = { name: @name, proto: 'bgp' }
+      if val.to_s == 'flood' && host_reachability == 'evpn'
+        set_args[:state] = 'no'
+      elsif val.to_s == 'evpn'
+        set_args[:state] = ''
+      else
+        return
+      end
+      config_set('vxlan_vtep', 'host_reachability', set_args)
+    end
+
+    def default_host_reachability
+      config_get_default('vxlan_vtep', 'host_reachability')
+    end
+
+    def source_interface
+      config_get('vxlan_vtep', 'source_intf', name: @name)
+    end
+
+    def source_interface_set(val)
+      set_args = { name: @name, lpbk_intf: val }
+      set_args[:state] = val.empty? ? 'no' : ''
+      config_set('vxlan_vtep', 'source_intf', set_args)
+    end
+
+    def source_interface=(val)
+      # The source interface can only be changed if the nve
+      # interface is in a shutdown state.
+      current_state = shutdown
+      self.shutdown = true unless shutdown
+      source_interface_set(val)
+      self.shutdown = current_state
+    end
+
+    def default_source_interface
+      config_get_default('vxlan_vtep', 'source_intf')
+    end
+
+    def source_interface_hold_down_time
+      config_get('vxlan_vtep', 'source_intf_hold_down_time', name: @name)
+    end
+
+    def source_interface_hold_down_time=(time)
+      state = time == default_source_interface_hold_down_time ? 'no' : ''
+      # Cli rejects removing hold-down-time without an argument, so make
+      # sure it is configured before attempting to remove it
+      if state == 'no'
+        time = source_interface_hold_down_time
+        unless time == default_source_interface_hold_down_time
+          config_set('vxlan_vtep', 'source_intf_hold_down_time', name: @name,
+                             state: state, time: time)
+        end
+      else
+        config_set('vxlan_vtep', 'source_intf_hold_down_time', name: @name,
+                               state: state, time: time)
+      end
+    end
+
+    def default_source_interface_hold_down_time
+      config_get_default('vxlan_vtep', 'source_intf_hold_down_time')
+    end
+
+    def shutdown
+      config_get('vxlan_vtep', 'shutdown', name: @name)
+    end
+
+    def shutdown=(bool)
+      state = (bool ? '' : 'no')
+      config_set('vxlan_vtep', 'shutdown', name: @name, state: state)
+    end
+
+    def default_shutdown
+      config_get_default('vxlan_vtep', 'shutdown')
+    end
+
+    def multisite_border_gateway_interface
+      config_get('vxlan_vtep', 'multisite_bg_intf', name: @name)
+    end
+
+    def multisite_border_gateway_interface=(val)
+      set_args = { name: @name }
+      set_args[:state] = val.empty? ? 'no' : ''
+      # rubocop:disable LineLength
+      set_args[:lpbk_intf] = val.empty? ? multisite_border_gateway_interface : val
+      # rubocop:enable LineLength
+      if set_args[:state] == 'no'
+        intf = multisite_border_gateway_interface
+        unless intf == default_multisite_border_gateway_interface
+          config_set('vxlan_vtep', 'multisite_bg_intf', set_args)
+        end
+      else
+        config_set('vxlan_vtep', 'multisite_bg_intf', set_args)
+      end
+    end
+
+    def default_multisite_border_gateway_interface
+      config_get_default('vxlan_vtep', 'multisite_bg_intf')
+    end
+
+    def global_ingress_replication_bgp
+      config_get('vxlan_vtep', 'global_ingress_replication_bgp', name: @name)
+    end
+
+    def global_ingress_replication_bgp=(state)
+      set_args = { name: @name }
+      if state
+        set_args[:state] = ''
+        # Host reachability must be enabled for this property
+        unless VxlanVtep.new(@name).host_reachability == 'evpn'
+          fail "Dependency: vxlan_vtep host_reachability must be 'evpn'."
+        end
+        config_set('vxlan_vtep', 'global_ingress_replication_bgp', set_args)
+      else
+        set_args[:state] = 'no'
+        config_set('vxlan_vtep',
+                   'global_ingress_replication_bgp', set_args) if
+                   global_ingress_replication_bgp
+      end
+    end
+
+    def default_global_ingress_replication_bgp
+      config_get_default('vxlan_vtep', 'global_ingress_replication_bgp')
+    end
+
+    def global_suppress_arp
+      config_get('vxlan_vtep', 'global_suppress_arp', name: @name)
+    end
+
+    def global_suppress_arp=(state)
+      set_args = { name: @name }
+      if state
+        set_args[:state] = ''
+        # Host reachability must be enabled for this property
+        unless VxlanVtep.new(@name).host_reachability == 'evpn'
+          fail "Dependency: vxlan_vtep host_reachability must be 'evpn'."
+        end
+        Feature.nv_overlay_evpn_enable if
+        Feature.nv_overlay_evpn_supported? && !Feature.nv_overlay_evpn_enabled?
+        config_set('vxlan_vtep', 'global_suppress_arp', set_args)
+      else
+        set_args[:state] = 'no'
+        config_set('vxlan_vtep',
+                   'global_suppress_arp', set_args) if global_suppress_arp
+      end
+    end
+
+    def default_global_suppress_arp
+      config_get_default('vxlan_vtep', 'global_suppress_arp')
+    end
+
+    def global_mcast_group_l2
+      config_get('vxlan_vtep', 'global_mcast_group_l2', name: @name)
+    end
+
+    def global_mcast_group_l2=(val)
+      if val
+        set_args = { name: @name, ip: val, state: '' }
+      else
+        set_args = { name: @name, ip: '', state: 'no' }
+      end
+      config_set('vxlan_vtep', 'global_mcast_group_l2', set_args)
+    end
+
+    def default_global_mcast_group_l2
+      config_get_default('vxlan_vtep', 'global_mcast_group_l2')
+    end
+
+    def global_mcast_group_l3
+      config_get('vxlan_vtep', 'global_mcast_group_l3', name: @name)
+    end
+
+    def global_mcast_group_l3=(val)
+      if val
+        set_args = { name: @name, ip: val, state: '' }
+      else
+        set_args = { name: @name, ip: '', state: 'no' }
+      end
+      config_set('vxlan_vtep', 'global_mcast_group_l3', set_args)
+    end
+
+    def default_global_mcast_group_l3
+      config_get_default('vxlan_vtep', 'global_mcast_group_l3')
+    end
+  end  # Class
+end    # Module

data/lib/cisco_node_utils/vxlan_vtep_vni.rb

@@ -0,0 +1,331 @@
+#
+# NXAPI implementation of VxlanVtepVni class
+#
+# November 2015 Michael G Wiebe
+#
+# Copyright (c) 2015-2018 Cisco and/or its affiliates.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+require_relative 'cisco_cmn_utils'
+require_relative 'node_util'
+require_relative 'vxlan_vtep'
+
+module Cisco
+  # VxlanVtepVni - node utility for vxlan vtep vni members.
+  class VxlanVtepVni < NodeUtil
+    attr_reader :name, :vni, :assoc_vrf
+
+    def initialize(name, vni, assoc_vrf=false, instantiate=true)
+      @name = name
+      @vni = vni
+      @assoc_vrf = assoc_vrf
+
+      set_args_keys_default
+      create if instantiate
+    end
+
+    def self.vnis
+      hash = {}
+      VxlanVtep.vteps.each do |name, _obj|
+        hash[name] = {}
+        get_args = { name: name }
+        vni_list = config_get('vxlan_vtep_vni', 'all_vnis', get_args)
+        next if vni_list.nil?
+        vni_list.each do |vni, assoc_vrf|
+          assoc_vrf = assoc_vrf.nil? ? false : true
+          hash[name][vni] = VxlanVtepVni.new(name, vni, assoc_vrf, false)
+        end
+      end
+      hash
+    end
+
+    def ==(other)
+      (name == other.name) && (vni == other.vni) &&
+        (assoc_vrf == other.assoc_vrf)
+    end
+
+    def set_args_keys_default
+      keys = { name: @name, vni: @vni }
+      keys[:assoc_vrf] = @assoc_vrf ? 'associate-vrf' : ''
+      @get_args = @set_args = keys
+    end
+
+    # rubocop:disable Style/AccessorMethodName
+    def set_args_keys(hash={})
+      set_args_keys_default
+      @set_args = @get_args.merge!(hash) unless hash.empty?
+    end
+    # rubocop:enable Style/AccessorMethodNamefor
+
+    def create_with_associate_vrf?
+      !@set_args[:assoc_vrf].eql?('')
+    end
+
+    def destroy_existing(key)
+      getargs = { name: @name, vni: @vni, state: '' }
+      return unless config_get('vxlan_vtep', key, getargs)
+      getargs[:assoc_vrf] = key.eql?('vni_with_vrf') ? 'associate-vrf' : ''
+      getargs[:state] = 'no'
+      config_set('vxlan_vtep', 'vni', getargs)
+    end
+
+    def create
+      # The configuration for this resource can be either of the following:
+      # - member nve 5000
+      # - member nve 5000 associate-vrf
+      # They are mutually exclusive and one must be removed before the other
+      # can be configured.
+      set_args_keys(state: '')
+      if create_with_associate_vrf?
+        destroy_existing('vni_without_vrf')
+      else
+        destroy_existing('vni_with_vrf')
+      end
+      config_set('vxlan_vtep', 'vni', @set_args)
+    end
+
+    def destroy
+      set_args_keys(state: 'no')
+      config_set('vxlan_vtep', 'vni', @set_args)
+    end
+
+    ########################################################
+    #                      PROPERTIES                      #
+    ########################################################
+
+    def ingress_replication_supported?
+      node.cmd_ref.supports?('vxlan_vtep_vni', 'ingress_replication')
+    end
+
+    def ingress_replication
+      config_get('vxlan_vtep_vni', 'ingress_replication', @get_args)
+    end
+
+    def set_host_reachability(vtep_name, protocol)
+      # This is a helper method for the ingress_replication setter.
+      # In later versions of Nexus, a check was added to make sure
+      # the host_reachability setting is correct for the desired
+      # ingress_replication setting.
+      #
+      case protocol
+      when 'bgp'
+        host_reachability = 'evpn'
+      when 'static'
+        host_reachability = 'flood'
+      else
+        fail "Protocol #{protocol} currently not supported"
+      end
+      VxlanVtep.new(vtep_name).host_reachability = host_reachability
+    end
+
+    def remove_add_ingress_replication(protocol)
+      # Note: ingress-replication is not supported on all platforms.
+      # Use to_s.empty check to also handle nil check.
+      unless ingress_replication.to_s.empty?
+        set_args_keys(state: 'no', protocol: ingress_replication)
+        config_set('vxlan_vtep_vni', 'ingress_replication', @set_args)
+      end
+      set_host_reachability(@set_args[:name], protocol)
+      set_args_keys(state: '', protocol: protocol)
+      config_set('vxlan_vtep_vni', 'ingress_replication', @set_args)
+    end
+
+    def ingress_replication=(protocol)
+      return if protocol.to_s == ingress_replication
+      # Only set ingress_replicatin to the default value if it's not already.
+      if protocol.to_s == default_ingress_replication &&
+         (ingress_replication != default_ingress_replication)
+        set_args_keys(state: 'no', protocol: ingress_replication)
+        config_set('vxlan_vtep_vni', 'ingress_replication', @set_args)
+      else
+        # Multicast group and ingress replication are mutually exclusive
+        # properties, so remove multicast_group first
+        unless multicast_group.empty?
+          set_args_keys(state: 'no', ip_start: '', ip_end: '')
+          config_set('vxlan_vtep_vni', 'multicast_group', @set_args)
+        end
+        remove_add_ingress_replication(protocol.to_s)
+      end
+    end
+
+    def default_ingress_replication
+      config_get_default('vxlan_vtep_vni', 'ingress_replication')
+    end
+
+    def multicast_group
+      g1, g2 = config_get('vxlan_vtep_vni', 'multicast_group', @get_args)
+      g2.nil? ? g1 : g1 + ' ' + g2
+    end
+
+    def remove_add_multicast_group(ip_start, ip_end)
+      set_args_keys(state: 'no', ip_start: '', ip_end: '')
+      config_set('vxlan_vtep_vni', 'multicast_group', @set_args)
+      set_args_keys(state: '', ip_start: ip_start, ip_end: ip_end)
+      config_set('vxlan_vtep_vni', 'multicast_group', @set_args)
+    end
+
+    def multicast_group=(range)
+      if range == default_multicast_group
+        # Due to CSCux78514, trying to remove multicast-group in CLI
+        # when ingress replication is configured results in removing
+        # ingress replication from nvgen. So be careful and negate
+        # Multicast-group only is it is configured.
+        unless multicast_group.empty?
+          set_args_keys(state: 'no', ip_start: '', ip_end: '')
+          config_set('vxlan_vtep_vni', 'multicast_group', @set_args)
+        end
+      else
+        ip_start, ip_end = range.split(' ')
+        ip_end = '' if ip_end.nil?
+        # Since multicast group and ingress replication are exclusive
+        # properties, remove ingress replication first
+        if ingress_replication_supported? && !ingress_replication.empty?
+          set_args_keys(state: 'no', protocol: ingress_replication)
+          config_set('vxlan_vtep_vni', 'ingress_replication', @set_args)
+        end
+        remove_add_multicast_group(ip_start, ip_end)
+      end
+    end
+
+    def default_multicast_group
+      config_get_default('vxlan_vtep_vni', 'multicast_group')
+    end
+
+    def peer_list
+      config_get('vxlan_vtep_vni', 'peer_list', @get_args)
+    end
+
+    def peer_list=(should_list)
+      delta_hash = Utils.delta_add_remove(should_list, peer_list)
+      return if delta_hash.values.flatten.empty?
+      [:add, :remove].each do |action|
+        Cisco::Logger.debug('peer_list' \
+          "#{@get_args}\n #{action}: #{delta_hash[action]}")
+        delta_hash[action].each do |peer|
+          state = (action == :add) ? '' : 'no'
+          @set_args[:state] = state
+          @set_args[:peer] = peer
+          config_set('vxlan_vtep_vni', 'peer_list', @set_args)
+        end
+      end
+    end
+
+    def default_peer_list
+      config_get_default('vxlan_vtep_vni', 'peer_list')
+    end
+
+    def suppress_arp
+      config_get('vxlan_vtep_vni', 'suppress_arp', @get_args)
+    end
+
+    def suppress_arp=(state)
+      if state
+        set_args_keys(state: '')
+        # Host reachability must be enabled for this property
+        unless VxlanVtep.new(@name).host_reachability == 'evpn'
+          fail "Dependency: vxlan_vtep host_reachability must be 'evpn'."
+        end
+        config_set('vxlan_vtep_vni', 'suppress_arp', @set_args)
+      else
+        set_args_keys(state: 'no')
+        # Remove suppress-arp only if it is configured. Suppress-arp needs
+        # free TCAM region for arp-ether ACL. Customers who don't need
+        # suppress-arp, needn't see cli failures warning about TCAM regions
+        # issued due to 'no suppress-arp'. Note that for suppress-arp, default
+        # is 'false' which is no suppress-arp
+        config_set('vxlan_vtep_vni', 'suppress_arp', @set_args) if suppress_arp
+      end
+    end
+
+    def default_suppress_arp
+      config_get_default('vxlan_vtep_vni', 'suppress_arp')
+    end
+
+    def suppress_arp_disable
+      # suppress_arp_disable is really a boolean kind, however,
+      # since the get is looking for a string with 'disable'
+      # we have to treat it as string first and then massage it
+      # to boolean
+      str = config_get('vxlan_vtep_vni', 'suppress_arp_disable', @get_args)
+      str.nil? ? false : true
+    end
+
+    def suppress_arp_disable=(state)
+      if state
+        set_args_keys(state: '')
+        # Host reachability must be enabled for this property
+        unless VxlanVtep.new(@name).host_reachability == 'evpn'
+          fail "Dependency: vxlan_vtep host_reachability must be 'evpn'."
+        end
+        Feature.nv_overlay_evpn_enable if
+        Feature.nv_overlay_evpn_supported? && !Feature.nv_overlay_evpn_enabled?
+        config_set('vxlan_vtep_vni', 'suppress_arp_disable', @set_args)
+      else
+        set_args_keys(state: 'no')
+        # Remove suppress-arp-disable only if it is configured.
+        config_set('vxlan_vtep_vni', 'suppress_arp_disable', @set_args) if
+        suppress_arp_disable
+      end
+    end
+
+    def default_suppress_arp_disable
+      config_get_default('vxlan_vtep_vni', 'suppress_arp_disable')
+    end
+
+    def suppress_uuc
+      config_get('vxlan_vtep_vni', 'suppress_uuc', @get_args)
+    end
+
+    def suppress_uuc=(state)
+      if state
+        set_args_keys(state: '')
+        # Host reachability must be enabled for this property
+        unless VxlanVtep.new(@name).host_reachability == 'evpn'
+          fail "Dependency: vxlan_vtep host_reachability must be 'evpn'"
+        end
+        config_set('vxlan_vtep_vni', 'suppress_uuc', @set_args)
+      else
+        set_args_keys(state: 'no')
+        # Remove suppress-uuc only if it is configured. Note that for
+        # suppress-uuc, default is 'false' which is no suppress-uuc.
+        config_set('vxlan_vtep_vni', 'suppress_uuc', @set_args) if suppress_uuc
+      end
+    end
+
+    def default_suppress_uuc
+      config_get_default('vxlan_vtep_vni', 'suppress_uuc')
+    end
+
+    def multisite_ingress_replication
+      config_get('vxlan_vtep_vni', 'multisite_ingress_replication', @get_args)
+    end
+
+    def multisite_ingress_replication=(state)
+      @set_args[:state] = state ? '' : 'no'
+      if @set_args[:state] == 'no'
+        unless multisite_ingress_replication ==
+               default_multisite_ingress_replication
+          config_set('vxlan_vtep_vni', 'multisite_ingress_replication',
+                     @set_args)
+        end
+      else
+        config_set('vxlan_vtep_vni', 'multisite_ingress_replication', @set_args)
+      end
+    end
+
+    def default_multisite_ingress_replication
+      config_get_default('vxlan_vtep_vni', 'multisite_ingress_replication')
+    end
+  end
+end