netstack 0.1.1 → 0.2.0

data/resources/configuration/cisco-server-port.erb

@@ -0,0 +1,43 @@
+configure terminal
+! Cisco switch ports / <%= stack_mode %>
+! ============================================================
+! 1. Logical port-channel interfaces
+! ============================================================
+<% aggregates.each do |port| %>interface port-channel<%= port.aggregate_id %>
+ description <%= port.local_description %>
+ switchport
+ mtu 9216
+<% if port.trunk_all %> switchport mode trunk
+ spanning-tree port type edge trunk
+<% end %><% if port.trunk_list %> switchport mode trunk
+ switchport trunk allowed vlan <%= port.vlan %>
+ spanning-tree port type edge trunk
+<% end %><% if port.access %> switchport mode access
+ switchport access vlan <%= port.vlan %>
+ spanning-tree port type edge
+<% end %><% if port.vpc %> vpc <%= port.aggregate_id %>
+<% end %> no shutdown
+<% end %>
+! ============================================================
+! 2. Physical member interfaces
+! ============================================================
+<% allocations.each do |port| %>interface <%= port.local_iface %>
+ description <%= port.local_description %>
+ switchport
+ mtu 9216
+<% if port.trunk_all %> switchport mode trunk
+ spanning-tree port type edge trunk
+<% end %><% if port.trunk_list %> switchport mode trunk
+ switchport trunk allowed vlan <%= port.vlan %>
+ spanning-tree port type edge trunk
+<% end %><% if port.access %> switchport mode access
+ switchport access vlan <%= port.vlan %>
+ spanning-tree port type edge
+<% end %><% if port.port_channel %> channel-group <%= port.aggregate_id %> mode active
+<% end %> no shutdown
+<% end %>
+! ============================================================
+! 3. Save configuration
+! ============================================================
+end
+copy running-config startup-config

data/resources/configuration/h3c-bootstrap.erb

@@ -0,0 +1,108 @@
+# H3C bootstrap: <%= hostname %>
+# Device role: <%= device_role %>
+system-view
+sysname <%= hostname %>
+clock timezone <%= system.timezone %> add 08:00:00
+clock protocol ntp
+stp mode mstp
+stp priority <%= stp_priority %>
+dns domain <%= system.domain_name %>
+<% system.dns_servers.each do |server| %>dns server <%= server %>
+<% end %><% system.ntp_servers.each do |server| %>ntp-service unicast-server <%= server %>
+<% end %><% system.syslog_servers.each do |server| %>info-center loghost <%= server %>
+<% end %>
+interface Vlan-interface<%= system.management_vlan %>
+ description MGMT
+ ip address <%= mgmt_ip %> <%= mgmt_mask %>
+ undo shutdown
+quit
+ip route-static 0.0.0.0 0 <%= mgmt_gateway %>
+
+interface range <%= access_interface_start %> to <%= access_interface_end %>
+ port link-type trunk
+ port trunk permit vlan all
+ undo shutdown
+quit
+<% h3c_uplinks.each do |uplink| %>interface <%= uplink.interface %>
+ description <%= uplink.description %>
+ port link-type trunk
+ port trunk permit vlan all
+ undo shutdown
+quit
+<% end %>
+
+snmp-agent
+snmp-agent community read <%= system.snmp_community %>
+snmp-agent sys-info location <%= snmp_location %>
+snmp-agent sys-info version v2c
+hwtacacs scheme TACACS
+<% system.tacacs_entries.each do |server| %> <%= server.role %> authentication <%= server.address %>
+ <%= server.role %> authorization <%= server.address %>
+ <%= server.role %> accounting <%= server.address %>
+<% end %> key authentication simple <%= system.tacacs_secret %>
+ key authorization simple <%= system.tacacs_secret %>
+ key accounting simple <%= system.tacacs_secret %>
+quit
+domain system
+ authentication login hwtacacs-scheme TACACS local
+ authorization login hwtacacs-scheme TACACS local
+ accounting login hwtacacs-scheme TACACS local
+quit
+<% if access_auth_enabled %>
+# 802.1X and MAB access authentication
+radius scheme RADIUS
+<% system.radius_entries.each do |server| %> <%= server.role %> authentication <%= server.address %>
+ <%= server.role %> accounting <%= server.address %>
+<% end %> key authentication simple <%= system.radius_secret %>
+ key accounting simple <%= system.radius_secret %>
+ user-name-format without-domain
+quit
+dot1x
+dot1x authentication-method eap
+mac-authentication
+mac-authentication domain <%= access_auth_domain %>
+mac-authentication user-name-format mac-address with-hyphen lowercase
+domain <%= access_auth_domain %>
+ authentication lan-access radius-scheme RADIUS none
+ authorization lan-access radius-scheme RADIUS none
+ accounting lan-access radius-scheme RADIUS none
+quit
+interface range <%= access_auth_interface_start %> to <%= access_auth_interface_end %>
+ port link-type hybrid
+ undo port hybrid vlan 1
+ port hybrid vlan <%= access_auth_vlan %> untagged
+ port hybrid pvid vlan <%= access_auth_vlan %>
+ stp edged-port
+ dot1x
+ undo dot1x handshake
+ dot1x mandatory-domain <%= access_auth_domain %>
+ undo dot1x multicast-trigger
+ dot1x unicast-trigger
+ mac-authentication
+ mac-authentication parallel-with-dot1x
+ dhcp snooping binding record
+quit
+<% end %>
+
+acl number 3001 name SSH-MANAGEMENT
+<% system.ssh_acl_entries.each do |entry| %> rule <%= entry.sequence %> permit ip source <%= entry.wildcard %>
+<% end %>quit
+ssh server enable
+ssh server acl 3001
+line vty 0 63
+ authentication-mode scheme
+ protocol inbound ssh
+ idle-timeout <%= system.vty_timeout_minutes %> 0
+quit
+<% system.local_users.each do |user| %>local-user <%= user.username %> class manage
+ password simple <%= user.password %>
+ service-type ssh
+ authorization-attribute user-role <%= user.h3c_role %>
+quit
+<% end %><% if system.base_security_enabled %>password-control length <%= system.password_min_length %>
+<% if system.disable_telnet %>undo telnet server enable
+<% end %><% if system.disable_http %>undo ip http enable
+undo ip https enable
+<% end %><% if system.enable_bpdu_protection %>stp bpdu-protection
+stp global enable
+<% end %><% end %>save force

data/resources/configuration/h3c-irf.erb

@@ -0,0 +1,57 @@
+# H3C IRF
+# Stage 1 - master
+system-view
+irf member 1 priority 32
+interface range <%= port1 %> to <%= port2 %>
+ shutdown
+quit
+irf-port 1/2
+ port group interface <%= port1 %>
+ port group interface <%= port2 %>
+quit
+interface range <%= port1 %> to <%= port2 %>
+ undo shutdown
+quit
+irf-port-configuration active
+save force
+# Stage 2 - standby renumber
+system-view
+irf member 1 renumber 2
+save force
+reboot
+# Stage 3 - standby links
+system-view
+interface range <%= port3 %> to <%= port4 %>
+ shutdown
+quit
+irf-port 2/1
+ port group interface <%= port3 %>
+ port group interface <%= port4 %>
+quit
+interface range <%= port3 %> to <%= port4 %>
+ undo shutdown
+quit
+irf-port-configuration active
+save force
+# Stage 4 - BFD MAD
+system-view
+vlan <%= mad_vlan %>
+ description IRF_BFD_MAD
+quit
+interface range <%= mad_port1 %> <%= mad_port2 %>
+ port link-type access
+ port access vlan <%= mad_vlan %>
+ undo shutdown
+quit
+interface Vlan-interface<%= mad_vlan %>
+ mad bfd enable
+ mad ip address <%= mad_member1_ip %> <%= mad_mask %> member 1
+ mad ip address <%= mad_member2_ip %> <%= mad_mask %> member 2
+quit
+save force
+display irf
+display irf topology
+display irf link
+display irf configuration
+display mad verbose
+display bfd session

data/resources/configuration/h3c-server-port.erb

@@ -0,0 +1,36 @@
+system-view
+# H3C switch ports / <%= stack_mode %>
+# ============================================================
+# 1. Logical Bridge-Aggregation interfaces
+# ============================================================
+<% aggregates.each do |port| %>interface Bridge-Aggregation<%= port.aggregate_id %>
+ description <%= port.local_description %>
+<% if port.trunk_all %> port link-type trunk
+ port trunk permit vlan all
+<% end %><% if port.trunk_list %> port link-type trunk
+ port trunk permit vlan <%= port.vlan_space %>
+<% end %><% if port.access %> port link-type access
+ port access vlan <%= port.vlan %>
+<% end %> link-aggregation mode dynamic
+ undo shutdown
+quit
+<% end %>
+# ============================================================
+# 2. Physical member interfaces
+# ============================================================
+<% allocations.each do |port| %>interface <%= port.local_iface %>
+ description <%= port.local_description %>
+<% if port.trunk_all %> port link-type trunk
+ port trunk permit vlan all
+<% end %><% if port.trunk_list %> port link-type trunk
+ port trunk permit vlan <%= port.vlan_space %>
+<% end %><% if port.access %> port link-type access
+ port access vlan <%= port.vlan %>
+<% end %><% if port.port_channel %> port link-aggregation group <%= port.aggregate_id %>
+<% end %> undo shutdown
+quit
+<% end %>
+# ============================================================
+# 3. Save configuration
+# ============================================================
+save force

data/resources/configuration/hillstone-ipsec-vpn.erb

@@ -0,0 +1,68 @@
+configure
+# Hillstone IPsec VPN: <%= site_name %>
+<% if ikev1 %>isakmp proposal "<%= site_name %>_P1"
+ hash <%= hillstone_ike_hash %>
+ encryption <%= hillstone_ike_encryption %>
+ group <%= hillstone_ike_group %>
+ lifetime <%= ike_lifetime %>
+exit
+isakmp peer "<%= site_name %>"
+ isakmp-proposal "<%= site_name %>_P1"
+ pre-share "<%= preshared_key %>"
+ peer <%= remote_ip %>
+ accept-all-peer-id
+ dpd interval <%= dpd_interval %> retry <%= dpd_retry %> periodic
+ interface <%= local_interface %>
+exit
+ipsec proposal "<%= site_name %>_P2"
+ hash <%= hillstone_ipsec_hash %>
+ encryption <%= hillstone_ipsec_encryption %>
+ lifetime <%= ipsec_lifetime %>
+exit
+tunnel ipsec "<%= site_name %>" auto sa-index <%= hillstone_sa_index %>
+ ipsec-proposal "<%= site_name %>_P2"
+ auto-connect
+ check-id
+ isakmp-peer "<%= site_name %>"
+<% proxy_ids.each do |proxy| %> id local <%= proxy.local %> remote <%= proxy.remote %> service "Any"
+<% end %>exit
+<% end %><% if ikev2 %>ikev2 proposal "<%= site_name %>_P1"
+ hash <%= hillstone_ike_hash %>
+ encryption <%= hillstone_ikev2_encryption %>
+ lifetime <%= ike_lifetime %>
+exit
+ikev2 ipsec-proposal "<%= site_name %>_P2"
+ hash <%= hillstone_ipsec_hash %>
+ encryption <%= hillstone_ipsec_v2_encryption %>
+ lifetime <%= ipsec_lifetime %>
+exit
+ikev2 peer "<%= site_name %>"
+ interface <%= local_interface %>
+ match-peer "<%= remote_ip %>"
+ ikev2-proposal "<%= site_name %>_P1"
+ local-id ip <%= local_ip %>
+ remote key "<%= preshared_key %>"
+ ikev2-profile "<%= site_name %>"
+<% proxy_ids.each do |proxy| %>  traffic-selector "<%= proxy.name %>"
+   local <%= proxy.local %>
+   remote <%= proxy.remote %>
+  exit
+<% end %> exit
+exit
+tunnel ipsec "<%= site_name %>" ikev2 sa-index <%= hillstone_sa_index %>
+ ikev2-peer "<%= site_name %>"
+ ipsec-proposal "<%= site_name %>_P2"
+ auto-connect
+exit
+<% end %>interface <%= tunnel %>
+ zone "<%= tunnel_zone %>"
+ description "<%= site_name %>"
+<% if ikev1 %> tunnel ipsec "<%= site_name %>"
+<% end %><% if ikev2 %> tunnel ikev2 "<%= site_name %>"
+<% end %>
+ no reverse-route
+exit
+<% if add_route %>ip vrouter "<%= virtual_router %>"
+<% routes.each do |route| %> ip route <%= route.subnet %> "<%= tunnel %>"
+<% end %>exit
+<% end %>save

data/resources/configuration/hillstone-policy.erb

@@ -0,0 +1,31 @@
+configure
+# Hillstone security policies
+<% service_objects.each do |service| %>service <%= service.name %>
+ <%= service.protocol %> dst-port <%= service.first_port %><% if service.port_range %> <%= service.last_port %><% end %>
+exit
+<% end %><% address_objects.each do |address| %>address <%= address.name %>
+<% address.entries.each do |entry| %><% if entry.range %> range <%= entry.first %> <%= entry.last %>
+<% else %> ip <%= entry.value %>
+<% end %><% end %>exit
+<% end %><% service_groups.each do |group| %>servgroup <%= group.name %>
+<% group.services.each do |service_name| %> service <%= service_name %>
+<% end %>exit
+<% end %><% policies.each do |policy| %>rule top
+<% if policy.has_description %> description "<%= policy.description %>"
+<% end %> src-zone <%= policy.src_zone %>
+<% if policy.src_any %> src-addr Any
+<% else %><% if policy.src_object %> src-addr <%= policy.src_object %>
+<% else %><% policy.src_entries.each do |entry| %><% if entry.range %> src-range <%= entry.first %> <%= entry.last %>
+<% else %> src-ip <%= entry.value %>
+<% end %><% end %><% end %><% end %> dst-zone <%= policy.dst_zone %>
+<% if policy.dst_any %> dst-addr Any
+<% else %><% if policy.dst_object %> dst-addr <%= policy.dst_object %>
+<% else %><% policy.dst_entries.each do |entry| %><% if entry.range %> dst-range <%= entry.first %> <%= entry.last %>
+<% else %> dst-ip <%= entry.value %>
+<% end %><% end %><% end %><% end %><% if policy.service_any %> service Any
+<% else %><% if policy.service_group %> service <%= policy.service_group %>
+<% else %><% policy.service_names.each do |service_name| %> service <%= service_name %>
+<% end %><% end %><% end %> action <%= policy.action %>
+<% if policy.log %> log session-end
+<% end %>exit
+<% end %>save

data/resources/configuration/paloalto-ipsec-vpn.erb

@@ -0,0 +1,39 @@
+configure
+# Palo Alto IPsec VPN: <%= site_name %>
+set network ike crypto-profiles ike-crypto-profiles <%= site_name %> hash <%= ike_authentication %>
+set network ike crypto-profiles ike-crypto-profiles <%= site_name %> dh-group <%= ike_dh_group %>
+set network ike crypto-profiles ike-crypto-profiles <%= site_name %> encryption <%= ike_encryption %>
+set network ike crypto-profiles ike-crypto-profiles <%= site_name %> lifetime seconds <%= ike_lifetime %>
+set network ike crypto-profiles ipsec-crypto-profiles <%= site_name %> esp authentication <%= ipsec_authentication %>
+set network ike crypto-profiles ipsec-crypto-profiles <%= site_name %> esp encryption <%= ipsec_encryption %>
+set network ike crypto-profiles ipsec-crypto-profiles <%= site_name %> lifetime seconds <%= ipsec_lifetime %>
+set network ike gateway <%= site_name %> authentication pre-shared-key key <%= preshared_key %>
+<% if ikev1 %>set network ike gateway <%= site_name %> protocol ikev1 ike-crypto-profile <%= site_name %>
+set network ike gateway <%= site_name %> protocol ikev1 exchange-mode aggressive
+set network ike gateway <%= site_name %> protocol ikev1 dpd enable yes
+set network ike gateway <%= site_name %> protocol ikev1 dpd interval <%= dpd_interval %>
+set network ike gateway <%= site_name %> protocol ikev1 dpd retry <%= dpd_retry %>
+<% end %><% if ikev2 %>set network ike gateway <%= site_name %> protocol ikev2 ike-crypto-profile <%= site_name %>
+set network ike gateway <%= site_name %> protocol ikev2 dpd enable yes
+set network ike gateway <%= site_name %> protocol ikev2 pq-ppk enabled yes
+set network ike gateway <%= site_name %> protocol ikev2 pq-ppk negotiation-mode preferred
+<% end %>set network ike gateway <%= site_name %> protocol version <%= ike_version %>
+set network ike gateway <%= site_name %> local-address ip <%= local_ip %>
+set network ike gateway <%= site_name %> local-address interface <%= local_interface %>
+set network ike gateway <%= site_name %> protocol-common nat-traversal enable yes
+set network ike gateway <%= site_name %> protocol-common passive-mode no
+set network ike gateway <%= site_name %> peer-address ip <%= remote_ip %>
+set network tunnel ipsec <%= site_name %> auto-key ipsec-crypto-profile <%= site_name %>
+set network tunnel ipsec <%= site_name %> auto-key ike-gateway <%= site_name %>
+set network tunnel ipsec <%= site_name %> tunnel-monitor enable no
+set network tunnel ipsec <%= site_name %> tunnel-interface <%= tunnel %>
+set network tunnel ipsec <%= site_name %> disabled no
+<% proxy_ids.each do |proxy| %>set network tunnel ipsec <%= site_name %> auto-key proxy-id <%= proxy.name %> protocol any
+set network tunnel ipsec <%= site_name %> auto-key proxy-id <%= proxy.name %> local <%= proxy.local %>
+set network tunnel ipsec <%= site_name %> auto-key proxy-id <%= proxy.name %> remote <%= proxy.remote %>
+<% end %><% if add_route %><% routes.each do |route| %>set network virtual-router <%= virtual_router %> routing-table ip static-route <%= route.name %> bfd profile None
+set network virtual-router <%= virtual_router %> routing-table ip static-route <%= route.name %> destination <%= route.subnet %>
+set network virtual-router <%= virtual_router %> routing-table ip static-route <%= route.name %> interface <%= tunnel %>
+set network virtual-router <%= virtual_router %> routing-table ip static-route <%= route.name %> metric <%= route_metric %>
+set network virtual-router <%= virtual_router %> routing-table ip static-route <%= route.name %> route-table unicast
+<% end %><% end %># Commit after peer review

data/resources/configuration/radware-load-balancer.erb

@@ -0,0 +1,26 @@
+# Radware load balancer services
+/c/l3/route/ip4
+<% real_servers.each do |server| %> add <%= server.address %> 255.255.255.255 <%= next_hop %> <%= route_metric %>
+<% end %><% real_servers.each do |server| %>/c/slb/real <%= server.address %>
+ ena
+ ipver v4
+ rip <%= server.address %>
+<% end %><% groups.each do |group| %>/c/slb/group <%= group.group_name %>
+ ipver v4
+<% if group.health_check %> health <%= group.health_check %>
+<% end %><% group.real_ips.each do |address| %> add <%= address %>
+<% end %><% end %><% virtuals.each do |virtual| %>/c/slb/virt <%= virtual.virtual_name %>
+ ena
+ ipver v4
+ vip <%= virtual.virtual_ip %>
+ vname "<%= virtual.virtual_name %>_AUTO"
+<% virtual.services.each do |service| %>/c/slb/virt <%= virtual.virtual_name %>/service <%= service.service_port %> <%= service.service_type %>
+ name "<%= service.service_name %>"
+ group <%= service.group_name %>
+ rport <%= service.app_port %>
+ tmout <%= service.timeout %>
+<% if service.client_ip_persistence %> pbind clientip
+<% end %>/c/slb/virt <%= virtual.virtual_name %>/service <%= service.service_port %> <%= service.service_type %>/pip
+ mode address
+ addr v4 <%= service.proxy_ip %> 255.255.255.255 persist disable
+<% end %><% end %># Review before applying

data/resources/textfsm/cisco_cdp_neighbors_detail.textfsm

@@ -0,0 +1,7 @@
+Value Required LOCAL_INTERFACE (\S+)
+Value Required NEIGHBOR_NAME (\S+)
+Value Required NEIGHBOR_INTERFACE (\S+)
+
+Start
+  ^\s*Device ID:\s*${NEIGHBOR_NAME}\s*$$
+  ^\s*Interface:\s*${LOCAL_INTERFACE},\s*Port ID \(outgoing port\):\s*${NEIGHBOR_INTERFACE}\s*$$ -> Record

data/resources/textfsm/cisco_ios_running_config_interfaces.textfsm

@@ -0,0 +1,12 @@
+Value Required INTERFACE (\S+)
+Value DESCRIPTION (.*)
+
+Start
+  ^interface ${INTERFACE}$$ -> Interface
+
+Interface
+  ^\s+description ${DESCRIPTION}$$
+  ^!$$ -> Record Start
+  ^interface .+ -> Continue.Record
+  ^interface ${INTERFACE}$$
+  ^end$$ -> Record End

data/resources/textfsm/cisco_ios_show_ip_interface_brief.textfsm

@@ -0,0 +1,7 @@
+Value Required INTERFACE (\S+)
+Value IP_ADDRESS (\S+)
+Value STATUS (administratively down|up|down)
+Value PROTOCOL (up|down)
+
+Start
+  ^${INTERFACE}\s+${IP_ADDRESS}\s+\S+\s+\S+\s+${STATUS}\s+${PROTOCOL}$$ -> Record

data/resources/textfsm/h3c_interface_descriptions.textfsm

@@ -0,0 +1,11 @@
+Value Required INTERFACE (\S+)
+Value DESCRIPTION (.*)
+
+Start
+  ^interface ${INTERFACE}$$ -> Interface
+
+Interface
+  ^\s+description ${DESCRIPTION}$$
+  ^#$$ -> Record Start
+  ^interface .+ -> Continue.Record
+  ^interface ${INTERFACE}$$

data/resources/textfsm/h3c_lldp_local_first.textfsm

@@ -0,0 +1,8 @@
+Value Required LOCAL_INTERFACE (\S+)
+Value NEIGHBOR_NAME (\S+)
+Value Required CHASSIS_ID (\S+)
+Value Required NEIGHBOR_INTERFACE (Port\s+\d+|\S+)
+
+Start
+  ^\s*display lldp neighbor-information list\s*$$
+  ^\s*${LOCAL_INTERFACE}\s+${CHASSIS_ID}\s+${NEIGHBOR_INTERFACE}\s+${NEIGHBOR_NAME}\s*$$ -> Record

data/resources/textfsm/h3c_lldp_name_first.textfsm

@@ -0,0 +1,8 @@
+Value Required LOCAL_INTERFACE (\S+)
+Value NEIGHBOR_NAME (\S+)
+Value Required CHASSIS_ID (\S+)
+Value Required NEIGHBOR_INTERFACE (Port\s+\d+|\S+)
+
+Start
+  ^\s*display lldp neighbor-information list\s*$$
+  ^\s*${NEIGHBOR_NAME}\s+${LOCAL_INTERFACE}\s+${CHASSIS_ID}\s+${NEIGHBOR_INTERFACE}\s*$$ -> Record

data/resources/textfsm/hillstone_interface_descriptions.textfsm

@@ -0,0 +1,11 @@
+Value Required INTERFACE (\S+)
+Value DESCRIPTION (.*)
+
+Start
+  ^interface ${INTERFACE}$$ -> Interface
+
+Interface
+  ^\s+description ${DESCRIPTION}$$
+  ^\s*exit\s*$$ -> Record Start
+  ^interface .+ -> Continue.Record
+  ^interface ${INTERFACE}$$

data/resources/textfsm/hillstone_lldp_neighbors.textfsm

@@ -0,0 +1,7 @@
+Value Required LOCAL_INTERFACE (\S+)
+Value NEIGHBOR_NAME (\S+)
+Value Required CHASSIS_ID (\S+)
+Value Required NEIGHBOR_INTERFACE (\S+)
+
+Start
+  ^\s*${NEIGHBOR_NAME}\s+${LOCAL_INTERFACE}\s+${CHASSIS_ID}\s+${NEIGHBOR_INTERFACE}\s*$$ -> Record

data/resources/textfsm/index

@@ -0,0 +1,8 @@
+Template, Vendor, Command
+cisco_ios_show_ip_interface_brief.textfsm, cisco_ios, show ip interface brief$
+cisco_cdp_neighbors_detail.textfsm, cisco_ios, show cdp neighbors detail$
+cisco_cdp_neighbors_detail.textfsm, cisco_nxos, show cdp neighbors detail$
+h3c_lldp_name_first.textfsm, h3c, display lldp neighbor-information list$
+h3c_lldp_name_first.textfsm, h3c_wireless, display lldp neighbor-information list$
+hillstone_lldp_neighbors.textfsm, hillstone, show lldp neighbor-information$
+palo_alto_lldp_neighbors.textfsm, palo_alto, show lldp neighbors all$

data/resources/textfsm/palo_alto_interface_descriptions.textfsm

@@ -0,0 +1,6 @@
+Value Required INTERFACE (\S+)
+Value DESCRIPTION (.*)
+
+Start
+  ^set network interface ethernet ${INTERFACE} comment ${DESCRIPTION}$$ -> Record
+  ^set network interface ethernet ${INTERFACE}\s+.*$$ -> Record

data/resources/textfsm/palo_alto_lldp_neighbors.textfsm

@@ -0,0 +1,11 @@
+Value Required LOCAL_INTERFACE (\S+)
+Value NEIGHBOR_NAME (\S+)
+Value CHASSIS_ID (\S+)
+Value Required NEIGHBOR_INTERFACE (\S+)
+
+Start
+  ^\s*Local information:\s*$$ -> Record
+  ^\s*Local interface:\s*${LOCAL_INTERFACE}\s*$$
+  ^\s*Chassis ID:\s*${CHASSIS_ID}\s*$$
+  ^\s*Port ID:\s*${NEIGHBOR_INTERFACE}\s*$$
+  ^\s*System name:\s*${NEIGHBOR_NAME}\s*$$

data/resources/textfsm/radware_port_names.textfsm

@@ -0,0 +1,13 @@
+Value Required INTERFACE (\d+)
+Value DESCRIPTION (.*)
+
+Start
+  ^/(?:c|cfg)/port ${INTERFACE}/name "${DESCRIPTION}"\s*$$ -> Record
+  ^/(?:c|cfg)/port ${INTERFACE}\s*$$ -> Port
+
+Port
+  ^\s+name "${DESCRIPTION}"\s*$$
+  ^\s+name ${DESCRIPTION}$$
+  ^/.* -> Continue.Record
+  ^/(?:c|cfg)/port ${INTERFACE}/name "${DESCRIPTION}"\s*$$ -> Record Start
+  ^/(?:c|cfg)/port ${INTERFACE}\s*$$