Code ExchangeSearchRepository

OpenConfig coverage

published

A simple example to understand OpenConfig coverage of your IOS XR router config. It will retrieve the original config of a device, then pull the OpenConfig version of it. The target device config will be replaced by a minimum setup to allow remote access, and then the OpenConfig config will be applied on top of it. The result will be compared to the initial state to determine the coverage gap.

coverage

Requirements to run

Enviroment variables

Target device details:

  • USER (E.g. root)
  • PASSWORD (E.g. mypassword)
  • ADDRESS (E.g. [2001:420:2cff:1204::5501:3]:57344)

You can setup this as follows:

export USER=root
export PASSWORD=mypassword
export ADDRESS='[2001:420:2cff:1204::5501:3]:57344'

gRPC config

The target device needs to have gRPC enabled.

grpc
 port 57344
 address-family ipv6

Router's base config

This is the config that will provide minimun settings to allow a remote gRPC connection; IP addressing, username/password, and gRPC setup. See the example at base.cfg.

Router's TLS Certificate

In order to secure the connection, a certificate file will need to be retrieved from the device.

RP/0/RP0/CPU0:mrstn-5501-3.cisco.com# bash cat /misc/config/grpc/ems.pem
Tue Jul  3 14:43:05.712 UTC
-----BEGIN CERTIFICATE-----
MIIEEDCCAvigAwIBAgICFJgwDQYJKoZIhvcNAQENBQAwgbAxCzAJBgNVBAYTAlVT
MQswCQYDVQQIEwJDQTERMA8GA1UEBxMIU2FuIEpvc2UxFzAVBgNVBAkTDjM3MDAg
...
-----END CERTIFICATE-----
View code on GitHub

  • Owner

    nnleiva

  • Contributors

    +1Github contributor

  • Categories

  • Products

    IOS XR

  • Programming Languages

    Go

  • License

    BSD 3-Clause "New" or "Revised" License
Related code repos

    Code Exchange Community

    Get help, share code, and collaborate with other developers in the Code Exchange community.View Community
    Disclaimer:
    Cisco provides Code Exchange for convenience and informational purposes only, with no support of any kind. This page contains information and links from third-party websites that are governed by their own separate terms. Reference to a project or contributor on this page does not imply any affiliation with or endorsement by Cisco.