packet-tracer-skill 0.2.1 → 0.2.3

package/scripts/sample_catalog.py

@@ -24,20 +24,102 @@ CAPABILITY_KEYWORDS = {
     "dhcp_pool": ["dhcp", "reservation", "apipa"],
     "router_dhcp": ["dhcp", "reservation", "apipa"],
     "server_dhcp": ["dhcp", "reservation", "apipa"],
+    "dhcpv6_stateful": ["dhcpv6", "stateful_dhcpv6"],
+    "dhcpv6_stateless": ["stateless_dhcpv6"],
+    "ipv6_slaac": ["slaac"],
+    "ipv6_prefix_delegation": ["prefix_delegation"],
+    "ipv6_dns_aaaa": ["aaaa"],
+    "ipv6_tunneling": ["ipv6ip", "ipv6 tunneling"],
+    "isatap": ["isatap"],
     "dhcp_snooping": ["dhcp snooping", "option_82", "trusted_untrusted"],
     "ospf": ["ospf"],
+    "ospfv2": ["ospf", "ospfv2", "single-area ospf"],
+    "ospfv3": ["ospfv3", "ipv6_ospf"],
     "eigrp": ["eigrp"],
+    "eigrp_ipv4": ["eigrp", "ipv4 eigrp"],
+    "eigrp_ipv6": ["ipv6_eigrp"],
     "rip": ["rip"],
+    "ripv2": ["ripv2", "rip"],
+    "ripng": ["ripng", "ipv6 rip"],
+    "hsrp": ["hsrp"],
     "nat": ["nat"],
+    "nat_static": ["static nat"],
+    "nat_dynamic": ["dynamic nat"],
+    "pat": ["pat", "overload"],
+    "static_route": ["static route", "ip route"],
+    "default_route": ["default route"],
+    "dhcp_relay": ["dhcp relay", "helper-address"],
+    "ssh_ios": ["ssh"],
+    "ntp_ios": ["ntp"],
+    "syslog_ios": ["syslog"],
     "acl": ["acl", "access-list"],
+    "dai": ["dai", "dynamic arp inspection"],
+    "dot1x": ["dot1x", "802.1x", "port-based nac"],
+    "lldp": ["lldp"],
+    "rep": ["rep_"],
+    "snmp": ["snmp"],
+    "netflow": ["netflow"],
+    "span": ["rspan", "monitor session", "span session"],
+    "qos": ["qos"],
+    "port_security": ["port security", "port-security"],
+    "bgp": ["bgp"],
+    "stp": ["stp", "spanning tree", "spanning-tree"],
+    "rstp": ["rstp", "rapid-pvst"],
+    "etherchannel": ["etherchannel", "port-channel", "channel-group"],
+    "lacp": ["lacp"],
+    "pagp": ["pagp"],
+    "vtp": ["vtp"],
+    "dtp": ["dtp"],
     "vpn": ["vpn", "ipsec", "gre"],
     "ipsec": ["ipsec", "ike"],
     "gre": ["gre"],
     "ppp": ["ppp", "chap", "pap"],
+    "wan": ["wan", "cloud", "serial", "pppoe", "ppp"],
+    "security_edge": ["asa", "firewall", "security appliance"],
+    "asa_acl_nat": ["asa_acl_nat"],
+    "asa_service_policy": ["asa_service_policy", "service policy"],
+    "clientless_vpn": ["clientless_vpn"],
+    "cbac": ["cbac"],
+    "zfw": ["zfw", "zone based firewall"],
+    "sniffer": ["sniffer"],
     "multilayer_switching": ["multilayer", "layer 3", "3560", "svi"],
     "wireless": ["wireless", "wlan", "wlc", "wifi", "ssid", "wpa", "wep", "5g", "bluetooth", "cellular"],
     "wireless_ap": ["wireless", "wlan", "wlc", "wifi", "ssid", "wpa", "wep"],
     "wireless_client": ["wireless", "wifi", "tablet", "smartphone", "laptop"],
+    "wlc": ["wlc", "wireless lan controller"],
+    "wpa_enterprise": ["wpa_radius", "wpa2_enterprise"],
+    "wep": ["wep"],
+    "guest_wifi": ["guest"],
+    "beamforming": ["beamforming"],
+    "meraki": ["meraki"],
+    "cellular_5g": ["5g", "cellular", "cell tower"],
+    "bluetooth": ["bluetooth"],
+    "network_controller": ["network controller", "netcon"],
+    "python_programming": ["python"],
+    "javascript_programming": ["javascript"],
+    "blockly_programming": ["blockly"],
+    "tcp_udp_app": ["tcp_test_app", "udp_test_app"],
+    "vm_iox": ["iox", "uploading_and_running_vm"],
+    "voip": ["voip"],
+    "ip_phone": ["ip phone", "phone"],
+    "call_manager": ["call manager", "telephony", "voip"],
+    "linksys_voice": ["voip linksys"],
+    "mqtt": ["mqtt"],
+    "real_http": ["real-http", "real http"],
+    "real_websocket": ["real-websocket", "real websocket"],
+    "visual_scripting": ["visual-scripting", "visual scripting"],
+    "ptp": ["ptp"],
+    "profinet": ["profinet"],
+    "l2nat": ["l2nat"],
+    "cyberobserver": ["cyberobserver"],
+    "industrial_firewall": ["isa3000", "industrial cybersecurity"],
+    "coaxial": ["coaxial"],
+    "cable_dsl": ["cable modem", "dsl modem"],
+    "central_office": ["centraloffice", "central office"],
+    "cell_tower": ["cell tower"],
+    "power_distribution": ["power distribution"],
+    "hot_swappable": ["hotswappable", "hot swappable"],
+    "ios_license": ["ios_15", "license"],
     "ntp": ["ntp"],
     "dns": ["dns"],
     "server_dns": ["dns"],
@@ -54,6 +136,90 @@ CAPABILITY_KEYWORDS = {
     "printer": ["printer"],
 }
 
+REPORT_ONLY_CAPABILITIES = {
+    "ipv6_slaac",
+    "dhcpv6_stateful",
+    "dhcpv6_stateless",
+    "ipv6_prefix_delegation",
+    "ipv6_dns_aaaa",
+    "ipv6_tunneling",
+    "isatap",
+    "ospfv3",
+    "eigrp_ipv6",
+    "ripng",
+    "hsrp",
+    "dhcp_snooping",
+    "dai",
+    "dot1x",
+    "lldp",
+    "rep",
+    "snmp",
+    "netflow",
+    "span",
+    "qos",
+    "port_security",
+    "bgp",
+    "stp",
+    "rstp",
+    "etherchannel",
+    "lacp",
+    "pagp",
+    "vtp",
+    "dtp",
+    "ospfv2",
+    "eigrp_ipv4",
+    "ripv2",
+    "static_route",
+    "default_route",
+    "dhcp_relay",
+    "nat_static",
+    "nat_dynamic",
+    "pat",
+    "ssh_ios",
+    "ntp_ios",
+    "syslog_ios",
+    "asa_acl_nat",
+    "asa_service_policy",
+    "clientless_vpn",
+    "cbac",
+    "zfw",
+    "sniffer",
+    "wlc",
+    "wpa_enterprise",
+    "wep",
+    "guest_wifi",
+    "beamforming",
+    "meraki",
+    "cellular_5g",
+    "bluetooth",
+    "network_controller",
+    "python_programming",
+    "javascript_programming",
+    "blockly_programming",
+    "tcp_udp_app",
+    "vm_iox",
+    "voip",
+    "ip_phone",
+    "call_manager",
+    "linksys_voice",
+    "mqtt",
+    "real_http",
+    "real_websocket",
+    "visual_scripting",
+    "ptp",
+    "profinet",
+    "l2nat",
+    "cyberobserver",
+    "industrial_firewall",
+    "coaxial",
+    "cable_dsl",
+    "central_office",
+    "cell_tower",
+    "power_distribution",
+    "hot_swappable",
+    "ios_license",
+}
+
 TYPE_NORMALIZATION = {
     "pc": "PC",
     "pc-pt": "PC",
@@ -76,6 +242,9 @@ TYPE_NORMALIZATION = {
     "printer": "Printer",
     "smartphone": "Smartphone",
     "mcucomponent": "IoT",
+    "networkcontroller": "NetworkController",
+    "centralofficeserver": "CentralOfficeServer",
+    "celltower": "CellTower",
 }
 
 LICENSE_FILENAMES = [
@@ -215,6 +384,7 @@ def infer_capability_tags(item: dict[str, Any]) -> list[str]:
     rel = item.get("relative_path", "").lower().replace("\\", "/")
     rel_flat = rel.replace("/", " ")
     devices = item.get("devices", [])
+    raw_types = {str(device.get("type", "")).strip() for device in devices if str(device.get("type", "")).strip()}
     normalized_types = [normalize_device_type(device.get("type", "")) for device in devices]
     router_count = normalized_types.count("Router")
     switch_count = normalized_types.count("Switch")
@@ -232,6 +402,15 @@ def infer_capability_tags(item: dict[str, Any]) -> list[str]:
     if any(dtype in {"WirelessRouter", "LightWeightAccessPoint"} for dtype in normalized_types):
         tags.add("wireless")
         tags.add("wireless_ap")
+    if "HomeGateway" in raw_types or any(dtype == "IoT" for dtype in normalized_types):
+        tags.add("iot")
+    if any(dtype in {"ASA", "Security Appliance"} for dtype in normalized_types) or raw_types & {"ASA", "Security Appliance"}:
+        tags.add("security_edge")
+        tags.add("acl")
+    if any(dtype in {"Cloud", "Cable Modem", "Dsl Modem"} for dtype in normalized_types):
+        tags.add("wan")
+    if any(dtype == "MultiLayerSwitch" for dtype in normalized_types):
+        tags.add("multilayer_switching")
     if any(dtype in {"Tablet", "Laptop", "Smartphone"} for dtype in normalized_types):
         tags.add("wireless_client")
     if any(dtype == "Tablet" for dtype in normalized_types):
@@ -283,8 +462,12 @@ def infer_preferred_roles(item: dict[str, Any]) -> list[str]:
         roles.append("preferred_vlan")
     if "dhcp_pool" in tags:
         roles.append("preferred_dhcp")
-    if {"ospf", "eigrp", "rip"} & tags:
+    if {"ospf", "eigrp", "rip", "bgp", "ospfv2", "eigrp_ipv4", "ripv2", "static_route", "default_route"} & tags:
         roles.append("preferred_routing")
+    if {"dhcp_relay", "nat_static", "nat_dynamic", "pat", "ssh_ios", "ntp_ios", "syslog_ios"} & tags:
+        roles.append("preferred_ipv4_management")
+    if {"stp", "rstp", "etherchannel", "lacp", "pagp", "vtp", "dtp"} & tags:
+        roles.append("preferred_l2_resiliency")
     if {"nat", "acl", "vpn"} & tags:
         roles.append("preferred_security")
     if {"vpn", "ipsec", "gre", "ppp", "multilayer_switching"} & tags:
@@ -314,6 +497,23 @@ def infer_wireless_mode_tags(item: dict[str, Any]) -> list[str]:
     return sorted(tags)
 
 
+def infer_iot_roles(item: dict[str, Any]) -> list[str]:
+    roles = {str(role).strip() for role in item.get("iot_roles", []) if str(role).strip()}
+    raw_types = {str(device.get("type", "")).strip() for device in item.get("devices", []) if str(device.get("type", "")).strip()}
+    normalized_types = {normalize_device_type(device.get("type", "")) for device in item.get("devices", []) if device.get("type")}
+    families = set(item.get("device_families", []) or infer_device_families(item))
+    has_thing = bool(raw_types & {"MCUComponent", "Board", "Sensor", "Actuator"}) or "iot devices" in families
+    has_gateway = "HomeGateway" in raw_types or ("home/wireless routers" in families and has_thing)
+    has_server = "Server" in normalized_types or "servers" in families
+    if has_thing:
+        roles.add("thing")
+    if has_gateway:
+        roles.add("gateway")
+    if has_server:
+        roles.add("server")
+    return sorted(roles)
+
+
 def infer_device_families(item: dict[str, Any]) -> list[str]:
     family_map = {
         "Router": "routers",
@@ -325,6 +525,9 @@ def infer_device_families(item: dict[str, Any]) -> list[str]:
         "Tablet": "end devices",
         "Smartphone": "end devices",
         "Printer": "end devices",
+        "IpPhone": "end devices",
+        "HomeVoip": "end devices",
+        "AnalogPhone": "end devices",
         "LightWeightAccessPoint": "access points",
         "WirelessRouter": "home/wireless routers",
         "WirelessRouterNewGeneration": "home/wireless routers",
@@ -336,6 +539,9 @@ def infer_device_families(item: dict[str, Any]) -> list[str]:
         "Dsl Modem": "wan/cloud/dsl/cable devices",
         "Security Appliance": "security devices",
         "ASA": "security devices",
+        "NetworkController": "network controllers",
+        "CentralOfficeServer": "wan/cloud/dsl/cable devices",
+        "CellTower": "wan/cloud/dsl/cable devices",
         "IoT": "iot devices",
         "Sensor": "iot devices",
         "Actuator": "iot devices",
@@ -397,12 +603,28 @@ def infer_service_support(item: dict[str, Any]) -> list[str]:
 
 def infer_runtime_features(item: dict[str, Any]) -> list[str]:
     features: set[str] = set()
+    tags = set(item.get("capability_tags", []))
+    families = set(item.get("device_families", []) or infer_device_families(item))
     if item.get("wireless_mode_tags"):
         features.add("wireless_runtime")
     if item.get("service_support"):
         features.add("service_runtime")
-    if item.get("iot_roles"):
+    if infer_iot_roles(item):
         features.add("iot_runtime")
+    if families & {"wan/cloud/dsl/cable devices"} or tags & {"wan", "ppp"}:
+        features.add("wan_runtime")
+    if families & {"security devices"} or tags & {"security_edge", "acl", "nat"}:
+        features.add("security_runtime")
+    if tags & {"vpn", "ipsec", "gre"}:
+        features.add("tunnel_runtime")
+    if tags & {"ipv6_slaac", "dhcpv6_stateful", "dhcpv6_stateless", "ospfv3", "eigrp_ipv6", "ripng", "hsrp"}:
+        features.add("ipv6_runtime")
+    if tags & {"bgp", "stp", "rstp", "etherchannel", "lacp", "pagp", "vtp", "dtp"}:
+        features.add("l2_resiliency_runtime")
+    if tags & {"ospfv2", "eigrp_ipv4", "ripv2", "static_route", "default_route", "dhcp_relay", "nat_static", "nat_dynamic", "pat", "ssh_ios", "ntp_ios", "syslog_ios"}:
+        features.add("ipv4_routing_management_runtime")
+    if families & {"multilayer switches"} or tags & {"multilayer_switching"}:
+        features.add("multilayer_runtime")
     if item.get("workspace_validation"):
         features.add("workspace_validated")
     if any(str(link.get("from", "")) and str(link.get("to", "")) for link in item.get("links", [])):
@@ -416,7 +638,7 @@ def infer_archetype_tags(item: dict[str, Any]) -> list[str]:
     families = set(item.get("device_families", []))
     services = set(item.get("service_support", []))
     wireless_modes = set(item.get("wireless_mode_tags", []))
-    iot_roles = set(item.get("iot_roles", []))
+    iot_roles = set(infer_iot_roles(item))
 
     if topology & {"chain", "core_access", "department_lan", "router_on_a_stick"} or (
         families & {"routers", "switches", "multilayer switches"}
@@ -431,10 +653,33 @@ def infer_archetype_tags(item: dict[str, Any]) -> list[str]:
         tags.add("IoT/home gateway")
     if families & {"wan/cloud/dsl/cable devices", "security devices"} or set(item.get("capability_tags", [])) & {
         "vpn",
+        "ipsec",
+        "gre",
+        "ppp",
+        "wan",
+        "security_edge",
+        "multilayer_switching",
         "nat",
         "acl",
     }:
         tags.add("WAN/security edge")
+    capability_tags = set(item.get("capability_tags", []))
+    if capability_tags & {"ipv6_slaac", "dhcpv6_stateful", "dhcpv6_stateless", "ipv6_prefix_delegation", "ipv6_dns_aaaa", "ipv6_tunneling", "isatap", "ospfv3", "eigrp_ipv6", "ripng", "hsrp"}:
+        tags.add("IPv6/routing")
+    if capability_tags & {"dhcp_snooping", "dai", "dot1x", "lldp", "rep", "snmp", "netflow", "span", "qos", "port_security"}:
+        tags.add("L2 security/monitoring")
+    if capability_tags & {"bgp", "stp", "rstp", "etherchannel", "lacp", "pagp", "vtp", "dtp"}:
+        tags.add("L2 resiliency/routing")
+    if capability_tags & {"ospfv2", "eigrp_ipv4", "ripv2", "static_route", "default_route", "dhcp_relay", "nat_static", "nat_dynamic", "pat", "ssh_ios", "ntp_ios", "syslog_ios"}:
+        tags.add("IPv4 routing/management")
+    if capability_tags & {"wlc", "wpa_enterprise", "wep", "guest_wifi", "beamforming", "meraki", "cellular_5g", "bluetooth"}:
+        tags.add("advanced wireless")
+    if capability_tags & {"network_controller", "python_programming", "javascript_programming", "blockly_programming", "tcp_udp_app", "vm_iox"} or "network controllers" in families:
+        tags.add("automation/controller")
+    if capability_tags & {"voip", "ip_phone", "call_manager", "linksys_voice"}:
+        tags.add("voice/collaboration")
+    if capability_tags & {"mqtt", "real_http", "real_websocket", "visual_scripting", "ptp", "profinet", "l2nat", "cyberobserver", "industrial_firewall"}:
+        tags.add("industrial IoT")
     return sorted(tags)
 
 
@@ -467,6 +712,8 @@ def infer_apply_safety_level(item: dict[str, Any]) -> str:
 
 def infer_validated_edit_capabilities(item: dict[str, Any]) -> list[str]:
     capabilities: set[str] = {str(tag) for tag in item.get("capability_tags", []) if str(tag).strip()}
+    inferred_iot_roles = set(infer_iot_roles(item))
+    families = set(item.get("device_families", []) or infer_device_families(item))
     service_capability_map = {
         "dhcp": "server_dhcp",
         "dns": "server_dns",
@@ -487,12 +734,24 @@ def infer_validated_edit_capabilities(item: dict[str, Any]) -> list[str]:
         capabilities.add("wireless_mutation")
     if any(device_family == "end devices" for device_family in item.get("device_families", [])):
         capabilities.add("end_device_mutation")
-    if item.get("iot_roles"):
+    if inferred_iot_roles:
+        capabilities.add("iot")
         capabilities.add("iot_registration")
-        if "server" in {str(role) for role in item.get("iot_roles", [])}:
+        if {"server", "gateway"} & inferred_iot_roles:
             capabilities.add("iot_control")
+    if capabilities & {"vpn", "ipsec", "gre"}:
+        capabilities.update({"vpn", "ipsec", "gre"})
+    if capabilities & {"ppp", "wan"} or families & {"wan/cloud/dsl/cable devices"}:
+        capabilities.add("wan")
+        if "ppp" in capabilities:
+            capabilities.add("ppp")
+    if capabilities & {"acl", "nat", "security_edge"} or families & {"security devices"}:
+        capabilities.add("security_edge")
+    if "multilayer switches" in families or "multilayer_switching" in capabilities:
+        capabilities.add("multilayer_switching")
     if item.get("apply_safety_level") == "inventory-supported":
         return []
+    capabilities -= REPORT_ONLY_CAPABILITIES
     return sorted(capabilities)
 
 
@@ -731,7 +990,8 @@ def enrich_catalog_items(items: list[dict[str, Any]]) -> list[dict[str, Any]]:
         new_item.setdefault("model_families", infer_model_families(new_item))
         new_item.setdefault("port_media_types", infer_port_media_types(new_item))
         new_item.setdefault("service_support", infer_service_support(new_item))
-        new_item.setdefault("runtime_features", infer_runtime_features(new_item))
+        new_item.setdefault("iot_roles", infer_iot_roles(new_item))
+        new_item["runtime_features"] = sorted(set(new_item.get("runtime_features", [])) | set(infer_runtime_features(new_item)))
         new_item.setdefault("donor_graph_fingerprint", infer_donor_graph_fingerprint(new_item))
         new_item.setdefault("apply_safety_level", infer_apply_safety_level(new_item))
         new_item.setdefault("archetype_tags", infer_archetype_tags(new_item))