catalystwan 0.41.2__py3-none-any.whl → 0.41.2.dev0__py3-none-any.whl

catalystwan/tests/templates/definitions/vpn_vsmart_interface_complex.json

@@ -0,0 +1,208 @@
+{
+    "templateName": "vpn_vsmart_interface_complex",
+    "templateDescription": "vpn_vsmart_interface_complex",
+    "templateType": "vpn-vsmart-interface",
+    "deviceType": [
+        "vsmart"
+    ],
+    "factoryDefault": false,
+    "templateMinVersion": "15.0.0",
+    "templateDefinition": {
+        "if-name": {
+            "vipObjectType": "object",
+            "vipType": "constant",
+            "vipValue": "GigabitEthernet0/0/0"
+        },
+        "description": {
+            "vipObjectType": "object",
+            "vipType": "constant",
+            "vipValue": "WAN interface"
+        },
+        "ip": {
+            "address": {
+                "vipObjectType": "object",
+                "vipType": "constant",
+                "vipValue": "10.10.10.1"
+            },
+            "dhcp-client": {
+                "vipObjectType": "object",
+                "vipType": "constant",
+                "vipValue": "false"
+            },
+            "dhcp-distance": {
+                "vipObjectType": "object",
+                "vipType": "constant",
+                "vipValue": 1
+            }
+        },
+        "ipv6": {
+            "address": {
+                "vipObjectType": "object",
+                "vipType": "constant",
+                "vipValue": "2001:db8::1/64"
+            },
+            "dhcp-client": {
+                "vipObjectType": "object",
+                "vipType": "constant",
+                "vipValue": "true"
+            },
+            "dhcp-distance": {
+                "vipObjectType": "object",
+                "vipType": "constant",
+                "vipValue": 1
+            },
+            "dhcp-rapid-commit": {
+                "vipObjectType": "object",
+                "vipType": "constant",
+                "vipValue": "true"
+            }
+        },
+        "tunnel-interface": {
+            "group": {
+                "vipObjectType": "list",
+                "vipType": "constant",
+                "vipValue": [
+                    0,
+                    1
+                ]
+            },
+            "color": {
+                "value": {
+                    "vipObjectType": "object",
+                    "vipType": "constant",
+                    "vipValue": "blue"
+                }
+            },
+            "carrier": {
+                "vipObjectType": "object",
+                "vipType": "constant",
+                "vipValue": "carrier1"
+            },
+            "nat-refresh-interval": {
+                "vipObjectType": "object",
+                "vipType": "constant",
+                "vipValue": 30
+            },
+            "hello-interval": {
+                "vipObjectType": "object",
+                "vipType": "constant",
+                "vipValue": 10
+            },
+            "hello-tolerance": {
+                "vipObjectType": "object",
+                "vipType": "constant",
+                "vipValue": 30
+            },
+            "allow-service": {
+                "all": {
+                    "vipObjectType": "object",
+                    "vipType": "constant",
+                    "vipValue": "true"
+                },
+                "dhcp": {
+                    "vipObjectType": "object",
+                    "vipType": "constant",
+                    "vipValue": "false"
+                },
+                "dns": {
+                    "vipObjectType": "object",
+                    "vipType": "constant",
+                    "vipValue": "true"
+                },
+                "icmp": {
+                    "vipObjectType": "object",
+                    "vipType": "constant",
+                    "vipValue": "true"
+                },
+                "sshd": {
+                    "vipObjectType": "object",
+                    "vipType": "constant",
+                    "vipValue": "true"
+                },
+                "netconf": {
+                    "vipObjectType": "object",
+                    "vipType": "constant",
+                    "vipValue": "false"
+                },
+                "ntp": {
+                    "vipObjectType": "object",
+                    "vipType": "constant",
+                    "vipValue": "true"
+                },
+                "stun": {
+                    "vipObjectType": "object",
+                    "vipType": "constant",
+                    "vipValue": "false"
+                }
+            }
+        },
+        "clear-dont-fragment": {
+            "vipObjectType": "object",
+            "vipType": "constant",
+            "vipValue": "true"
+        },
+        "autonegotiate": {
+            "vipObjectType": "object",
+            "vipType": "constant",
+            "vipValue": "true"
+        },
+        "pmtu": {
+            "vipObjectType": "object",
+            "vipType": "constant",
+            "vipValue": "false"
+        },
+        "mtu": {
+            "vipObjectType": "object",
+            "vipType": "constant",
+            "vipValue": 1500
+        },
+        "tcp-mss-adjust": {
+            "vipObjectType": "object",
+            "vipType": "constant",
+            "vipValue": 1452
+        },
+        "mac-address": {
+            "vipObjectType": "object",
+            "vipType": "constant",
+            "vipValue": "00:1A:2B:3C:4D:5F"
+        },
+        "speed": {
+            "vipObjectType": "object",
+            "vipType": "constant",
+            "vipValue": "1000"
+        },
+        "duplex": {
+            "vipObjectType": "object",
+            "vipType": "constant",
+            "vipValue": "full"
+        },
+        "shutdown": {
+            "vipObjectType": "object",
+            "vipType": "constant",
+            "vipValue": "false"
+        },
+        "arp": {
+            "ip": {
+                "vipObjectType": "tree",
+                "vipType": "constant",
+                "vipValue": [
+                    {
+                        "addr": {
+                            "vipObjectType": "object",
+                            "vipType": "constant",
+                            "vipValue": "192.168.1.1"
+                        },
+                        "mac": {
+                            "vipObjectType": "object",
+                            "vipType": "constant",
+                            "vipValue": "00:1A:2B:3C:4D:5E"
+                        }
+                    }
+                ],
+                "vipPrimaryKey": [
+                    "addr"
+                ]
+            }
+        }
+    }
+}

catalystwan/tests/templates/models/__init__.py

@@ -1,20 +1,53 @@
 # Copyright 2024 Cisco Systems, Inc. and its affiliates
 
 #  type: ignore
-from catalystwan.tests.templates.models.cisco_aaa import cisco_aaa, complex_aaa_model
-from catalystwan.tests.templates.models.cisco_banner import banner_model
-from catalystwan.tests.templates.models.cisco_bfd import bfd_model
-from catalystwan.tests.templates.models.cisco_vpn import basic_cisco_vpn, complex_vpn_model
-from catalystwan.tests.templates.models.omp_vsmart import default_omp, omp_2, omp_3
+from catalystwan.tests.templates.models.aaa import aaa_basic, aaa_complex_template
+from catalystwan.tests.templates.models.cisco_aaa import cisco_aaa, cisco_aaa_complex
+from catalystwan.tests.templates.models.cisco_banner import cisco_banner
+from catalystwan.tests.templates.models.cisco_bfd import cisco_bfd
+from catalystwan.tests.templates.models.cisco_logging import cisco_logging_complex
+from catalystwan.tests.templates.models.cisco_ntp import cisco_ntp_complex
+from catalystwan.tests.templates.models.cisco_omp import cisco_omp_complex
+from catalystwan.tests.templates.models.cisco_ospf import cisco_ospf_complex
+from catalystwan.tests.templates.models.cisco_secure_internet_gateway import cisco_sig
+from catalystwan.tests.templates.models.cisco_snmp import cisco_snmp_complex
+from catalystwan.tests.templates.models.cisco_system import cisco_system_complex
+from catalystwan.tests.templates.models.cisco_vpn import cisco_vpn_basic, cisco_vpn_complex
+from catalystwan.tests.templates.models.cisco_vpn_interface import cisco_vpn_interface_complex
+from catalystwan.tests.templates.models.omp_vsmart import omp_vsmart_1, omp_vsmart_2, omp_vsmart_3, omp_vsmart_complex
+from catalystwan.tests.templates.models.security_vsmart import security_vsmart_complex
+from catalystwan.tests.templates.models.system_vsmart import system_vsmart_complex
+from catalystwan.tests.templates.models.vpn_vsmart import vpn_vsmart_basic, vpn_vsmart_complex
+from catalystwan.tests.templates.models.vpn_vsmart_interface import (
+    vpn_vsmart_interface_basic,
+    vpn_vsmart_interface_complex,
+)
 
 __all__ = [
-    "default_omp",
-    "omp_2",
-    "omp_3",
+    "aaa_basic",
+    "aaa_complex_template",
     "cisco_aaa",
-    "complex_aaa_model",
-    "basic_cisco_vpn",
-    "complex_vpn_model",
-    "banner_model",
-    "bfd_model",
+    "cisco_aaa_complex",
+    "cisco_banner",
+    "cisco_bfd",
+    "cisco_logging_complex",
+    "cisco_ntp_complex",
+    "cisco_omp_complex",
+    "cisco_snmp_complex",
+    "cisco_ospf_complex",
+    "cisco_sig",
+    "cisco_system_complex",
+    "cisco_vpn_interface_complex",
+    "cisco_vpn_basic",
+    "cisco_vpn_complex",
+    "omp_vsmart_1",
+    "omp_vsmart_2",
+    "omp_vsmart_3",
+    "omp_vsmart_complex",
+    "security_vsmart_complex",
+    "system_vsmart_complex",
+    "vpn_vsmart_basic",
+    "vpn_vsmart_complex",
+    "vpn_vsmart_interface_basic",
+    "vpn_vsmart_interface_complex",
 ]

catalystwan/tests/templates/models/aaa.py

@@ -0,0 +1,106 @@
+# Copyright 2024 Cisco Systems, Inc. and its affiliates
+from catalystwan.api.templates.models.aaa_model import (
+    AAAModel,
+    RadiusServer,
+    TacacsServer,
+    TaskPermissions,
+    User,
+    UserGroup,
+)
+
+aaa_basic = AAAModel(
+    template_name="aaa_basic",
+    template_description="zyx",
+    device_models=["vsmart"],
+)
+
+aaa_complex_template = AAAModel(
+    template_name="aaa_complex",
+    template_description="zyx",
+    device_models=["vsmart"],
+    accounting=True,
+    admin_auth_order=True,
+    audit_disable=True,
+    auth_fallback=True,
+    auth_order=["local", "radius"],
+    cisco_tac_ro_user=False,
+    cisco_tac_rw_user=False,
+    netconf_disable=True,
+    radius_retransmit=4,
+    radius_server=[
+        RadiusServer(
+            address="1.1.1.1",
+            acct_port=1000,
+            auth_port=2000,
+            tag="complex1",
+            vpn="0",
+            source_interface="eth1",
+            priority=1,
+            key="example-key",  # pragma: allowlist secret
+            secret_key="example-secret",  # pragma: allowlist secret
+        ),
+    ],
+    radius_server_list=["nonexisiting", "second"],
+    radius_timeout=6,
+    tacacs_authentication="ascii",
+    tacacs_server=[
+        TacacsServer(
+            address="2.2.2.2",
+            auth_port=20,
+            vpn="0",
+            source_interface="eth12",
+            priority=5,
+            secret_key="secret-example",  # pragma: allowlist secret
+        ),
+    ],
+    tacacs_timeout=10,
+    # task=[
+    #     Task(
+    #       name="exampletask1",
+    #       config_accept_action=[Command("cac"), Command("com2")],
+    #       config_default_action="accept",
+    #       config_deny_action=[Command("cda")],
+    #       oper_exec_accept_action=[Command("oxaa")],
+    #       oper_exec_default_action="accept",
+    #       oper_exec_deny_action=[Command("oeda")],
+    #       password="examplepass",  # pragma: allowlist secret
+    #       privilege="1"
+    #     ),
+    #     Task(
+    #       name="exampletask2",
+    #       password="examplepass",  # pragma: allowlist secret
+    #       privilege="1",
+    #       config_default_action="accept",
+    #       oper_exec_default_action="accept"
+    #       ),
+    # ],
+    user=[
+        User(
+            name="example-user",
+            password="example-pass",  # pragma: allowlist secret
+            secret="user-secret",  # pragma: allowlist secret
+            description="user-desc",
+            group=["netadmin"],
+        ),
+    ],
+    usergroup=[
+        UserGroup(name="netadmin"),  #
+        UserGroup(
+            name="basic",
+            task=[
+                TaskPermissions(mode="system", permission=["read"]),
+                TaskPermissions(mode="interface", permission=["read"]),
+            ],
+        ),
+        UserGroup(
+            name="operator",
+            task=[
+                TaskPermissions(mode="system", permission=["read"]),
+                TaskPermissions(mode="interface", permission=["read"]),
+                TaskPermissions(mode="policy", permission=["read"]),
+                TaskPermissions(mode="routing", permission=["read"]),
+                TaskPermissions(mode="security", permission=["read"]),
+            ],
+        ),
+    ],
+)

catalystwan/tests/templates/models/cisco_aaa.py

@@ -2,26 +2,30 @@
 
 # type: ignore
 from catalystwan.api.templates.models.cisco_aaa_model import (
+    AccountingRule,
+    AuthorizationRules,
     CiscoAAAModel,
-    DomainStripping,
+    PubkeyChain,
+    RadiusClient,
     RadiusGroup,
     RadiusServer,
+    RadiusVPN,
     TacacsGroup,
     TacacsServer,
     User,
 )
-from catalystwan.utils.device_model import DeviceModel
 
 users = [
     User(name="admin", password="str", secret="zyx", privilege="15"),  # pragma: allowlist secret
-    User(name="user", password="rnd", secret="dnr", privilege="14"),  # pragma: allowlist secret
+    User(name="user", password="rnd", secret="dnr", privilege="1"),  # pragma: allowlist secret
 ]
 
+
 # CiscoAAAModel(domain-stripping="?")
 cisco_aaa = CiscoAAAModel(
-    template_name="iuo",
+    template_name="cisco_aaa",
     template_description="zyx",
-    device_models=[DeviceModel.VEDGE_C8000V],
+    device_models=["vedge-C8000V"],
     user=users,
     authentication_group=True,
     accounting_group=False,
@@ -30,62 +34,91 @@ cisco_aaa = CiscoAAAModel(
             group_name="xyz", vpn=1, source_interface="GIG11", server=[RadiusServer(address="1.1.1.1", key="21")]
         )
     ],
-    domain_stripping=DomainStripping.NO,  # type: ignore
+    domain_stripping="no",
 )
 
-cisco_aaa_device_specific = CiscoAAAModel(
-    template_name="cisco_aaa_device_specific",
-    template_description="caaadp",
-    device_models=[DeviceModel.VEDGE_C8000V],
-    user=users,
-    authentication_group=True,
-    accounting_group=False,
-    radius=[
-        RadiusGroup(  # type: ignore
-            group_name="xyz", vpn=1, source_interface="GIG11", server=[RadiusServer(address="1.1.1.1", key="21")]
-        )
-    ],
-    domain_stripping=DomainStripping.NO,
-)
+EXAMPLE_KEY_STRING = "AAAAB3NzaC1yc2EAAAADAQABAAABAQC3myRj5L6ZFLdRnOEZdUd+4Qq0XPLW9RfO6qD7DJ2t4ZzLh6Oz+IUJg8d8bJDfxO9zGKs5uUQ9f2H5yTGX5G8Z5kKp8QDp1MkDVqwGJ4UM7JqH8s8kD7xcl8SyPc5TjzK4s4W+8LPNOPXmIKtHh1Qlvkp5N7w3M/Rm5ZVX5/3+Hk8Ib5syigQQd/5u5xJj9k3i2x3m3LZ7v5e7YlCpRdCQGf6ZCwvbVQHdJp5nlU0HxJbqjOTL4IcDj09G3Dq2C5JnohKJb7E7HVCUl7F5vYpC/4iNjges65GgdzaFJsT9qA8CgxyF+7J3PpLk5qPAQDT5OjArJj4x9Bw3j3lZdH example@example.com"  # noqa: E501
+
+users = [
+    User(name="admin", password="str", secret="zyx", privilege="15"),  # pragma: allowlist secret
+    User(
+        name="user",
+        password="rnd",  # pragma: allowlist secret
+        secret="dnr",  # pragma: allowlist secret
+        privilege="1",
+        pubkey_chain=[PubkeyChain(key_type="ssh-rsa", key_string=EXAMPLE_KEY_STRING)],
+    ),
+]
 
-complex_aaa_model = CiscoAAAModel(
-    template_name="complex_aaa",
-    template_description="na",
+cisco_aaa_complex = CiscoAAAModel(
+    template_name="cisco_aaa_complex",
+    template_description="cisco_aaa_complex",
+    device_models=["vedge-C8000V"],
     user=[
-        User(name="test1", password="*****", secret="secret", privilege="1"),  # pragma: allowlist secret
-        User(name="test2", password="*****", secret="secret", privilege="15"),  # pragma: allowlist secret
+        User(
+            name="example_user",
+            password="secure_password",  # pragma: allowlist secret
+            secret="secure_secret",  # pragma: allowlist secret
+            privilege="15",
+        ),
     ],
-    authentication_group=True,
-    accounting_group=False,
-    radius=[
-        RadiusGroup(
-            group_name="group1",
-            vpn=10,
-            source_interface="Gig1",
+    tacacs=[
+        TacacsGroup(
             server=[
-                RadiusServer(address="1.1.1.1", key="test_key", secret_key="secret_key")  # pragma: allowlist secret
+                TacacsServer(
+                    address="2.2.2.2",
+                    key="tacacs_key",
+                    port=49,
+                    timeout=5,
+                    secret_key="secret_tacacs_key,",
+                )
             ],
-        ),
+            group_name="tacacs-5",
+            vpn=5,
+            source_interface="GigabitEthernet0/0",
+        )
+    ],
+    radius=[
         RadiusGroup(
-            group_name="group2",
-            vpn=11,
-            source_interface="Gig2",
             server=[
                 RadiusServer(
-                    address="1.1.2.1",
-                    key="test_key2",
-                    secret_key="secret_key2",  # pragma: allowlist secret
+                    address="1.1.1.1",
+                    auth_port=1000,
+                    timeout=10,
+                    retransmit=5,
+                    key="radius_key",  # pragma: allowlist secret
+                    secret_key="secret_radius_key",  # pragma: allowlist secret
                 )
             ],
-        ),
+            group_name="radius-4",
+            vpn=4,
+            source_interface="FortyGigabitEthernet0/",
+        )
     ],
-    domain_stripping=DomainStripping.RIGHT_TO_LEFT,
-    tacacs=[
-        TacacsGroup(
-            group_name="group1",
-            vpn=0,
-            source_interface="Gig0",
-            server=[TacacsServer(address="1.1.1.1", key="key", secret_key="secret_key")],  # pragma: allowlist secret
+    radius_client=[
+        RadiusClient(ip="10.1.1.1", vpn=[RadiusVPN(name="radiuscoa_vpn_name", server_key="secure_radius_server_key")])
+    ],
+    domain_stripping="right-to-left",
+    authentication_type="any",
+    port=1163,
+    server_key_password="secure_server_key_password",  # pragma: allowlist secret
+    cts_authorization_list="example_element",
+    radius_trustsec_group="radius-4",
+    authentication_group=True,
+    accounting_group=True,
+    accounting_rules=[
+        AccountingRule(
+            rule_id="1111",
+            method="commands",
+            level="1",
+            start_stop=False,
+            group="radius-4,tacacs-5",
         )
     ],
+    authorization_console=True,
+    authorization_config_commands=True,
+    authorization_rules=[
+        AuthorizationRules(rule_id="12", method="commands", level="15", group="radius-4,tacacs-5", authenticated=True)
+    ],
+    server_auth_order="local,radius-4,tacacs-5",
 )

catalystwan/tests/templates/models/cisco_banner.py

@@ -2,6 +2,6 @@
 
 from catalystwan.api.templates.models.cisco_banner_model import CiscoBannerModel
 
-banner_model = CiscoBannerModel(  # type: ignore
-    template_name="banner_1", template_description="na", login_banner="login banner", motd_banner="motd_bnanner"
+cisco_banner = CiscoBannerModel(  # type: ignore
+    template_name="cisco_banner", template_description="na", login_banner="login banner", motd_banner="motd_bnanner"
 )

catalystwan/tests/templates/models/cisco_bfd.py

@@ -1,17 +1,15 @@
 # Copyright 2023 Cisco Systems, Inc. and its affiliates
 
-from catalystwan.api.templates.models.cisco_bfd_model import CiscoBFDModel, Color, ColorType
+from catalystwan.api.templates.models.cisco_bfd_model import CiscoBFDModel, Color
 
-bfd_model = CiscoBFDModel(  # type: ignore
+cisco_bfd = CiscoBFDModel(  # type: ignore
     template_name="cisco_bfd",
     template_description="na",
     multiplier=100,
     poll_interval=50,
     default_dscp=50,
     color=[
-        Color(  # type: ignore
-            color=ColorType.BIZ_INTERNET, hello_interval=50, multipler=100, pmtu_discovery=False, dscp=100
-        ),
-        Color(color=ColorType.SILVER, hello_interval=150, multipler=10, dscp=20),  # type: ignore
+        Color(color="biz-internet", hello_interval=50, multipler=100, pmtu_discovery=False, dscp=100),  # type: ignore
+        Color(color="silver", hello_interval=150, multipler=10, dscp=20),  # type: ignore
     ],
 )

catalystwan/tests/templates/models/cisco_logging.py

@@ -0,0 +1,65 @@
+# Copyright 2023 Cisco Systems, Inc. and its affiliates
+
+from catalystwan.api.templates.models.cisco_logging_model import CiscoLoggingModel, Ipv6Server, Server, TlsProfile
+
+cisco_logging_complex = CiscoLoggingModel(
+    template_name="cisco_logging_complex",
+    template_description="cisco_logging_complex",
+    enable=True,
+    size=20,
+    rotate=5,
+    tls_profile=[
+        TlsProfile(
+            profile="default_tls_profile",
+            version="TLSv1.2",
+            auth_type="Server",
+            ciphersuite_list=["ECDHE-ECDSA-AES256-GCM-SHA384", "ECDHE-RSA-AES256-GCM-SHA384"],
+        ),
+        TlsProfile(
+            profile="secure_tls_profile",
+            version="TLSv1.2",
+            auth_type="Mutual",
+            ciphersuite_list=["ECDHE-ECDSA-CHACHA20-POLY1305", "ECDHE-RSA-CHACHA20-POLY1305"],
+        ),
+    ],
+    server=[
+        Server(
+            name="1.1.1.1",
+            vpn=10,
+            source_interface="GigabitEthernet0/0",
+            priority="debugging",
+            enable_tls=True,
+            custom_profile=True,
+            profile="default_tls_profile",
+        ),
+        Server(
+            name="log_server_2",
+            vpn=20,
+            source_interface="GigabitEthernet0/1",
+            priority="error",
+            enable_tls=False,
+            custom_profile=False,
+            profile=None,
+        ),
+    ],
+    ipv6_server=[
+        Ipv6Server(
+            name="ipv6_log_server_1",
+            vpn=10,
+            source_interface="GigabitEthernet0/2",
+            priority="critical",
+            enable_tls=True,
+            custom_profile=True,
+            profile="secure_tls_profile",
+        ),
+        Ipv6Server(
+            name="ipv6_log_server_2",
+            vpn=30,
+            source_interface="GigabitEthernet0/3",
+            priority="emergency",
+            enable_tls=False,
+            custom_profile=False,
+            profile=None,
+        ),
+    ],
+)

catalystwan/tests/templates/models/cisco_ntp.py

@@ -0,0 +1,17 @@
+# Copyright 2023 Cisco Systems, Inc. and its affiliates
+
+from catalystwan.api.templates.models.cisco_ntp_model import Authentication, CiscoNTPModel, Server
+
+cisco_ntp_complex = CiscoNTPModel(
+    template_name="cisco_ntp_complex",
+    template_description="cisco_ntp_complex",
+    server=[
+        Server(name="0.pool.ntp.org", key=1, vpn=10, version=4, source_interface="GigabitEthernet0/0", prefer=True),
+        Server(name="1.pool.ntp.org", key=2, vpn=20, version=4, source_interface="GigabitEthernet0/1", prefer=False),
+    ],
+    authentication=[Authentication(number=1, md5="md5key1"), Authentication(number=2, md5="md5key2")],
+    trusted=[1, 2],
+    enable=True,
+    stratum=2,
+    source="Loopback0",
+)