I-CISCO Guqula i-Automation NSO Function Pack
Iinkcukacha
- Imveliso: Cisco Crosswork Guqula Automation NSO Function Pack
- Inguqulelo: 7.0.2
Ulwazi lweMveliso
I-Cisco Crosswork Change Automation NSO Function Pack yenzelwe ukuququzelela ukufakwa, uqwalaselo, kunye nolawulo lweCisco Crosswork Change Automation kwiCisco Network Services Orchestrator (NSO). Iquka iimpawu zokudala abasebenzisi abakhethekileyo bokufikelela, ukuqwalasela i-DLM kwi-Cisco Crosswork, kunye nemisebenzi yokusombulula ingxaki.
Intshayelelo
Olu xwebhu luchaza indlela yokukhuphela, ukufaka, kunye nokuqwalasela iCisco Crosswork Change Automation (CA) umsebenzi wepakethi kwiCisco Network Services Orchestrator (NSO). Ukongezelela, uxwebhu luchaza uqwalaselo olufunekayo kwiCrosswork Change Automation kwiCisco Crosswork.
Injongo
Esi sikhokelo sichaza:
- Ukufakela i-nca-7.0.3-nso-6.1.16.3.20250509.dbe70d0.tar.gz 6.1.16.3 kunye nolungelelwaniso oluhambelanayo lwepakethi yomsebenzi kwiCisco NSO.
- Ulungelelwaniso lweqela le-authgroup lokudala imephu yomsebenzisi eyodwa (umaphu) yoTshintsho oluzenzekelayo.
- Ulungelelwaniso lwe-DLM kunye noTshintsho oluzenzekelayo izicwangciso zesicelo ezifunekayo kwiCisco Crosswork 7.0.2
Iimfuno zangaphambili
Uluhlu olungezantsi lubonisa iinguqulelo ezincinci zeCisco NSO kunye neCisco Crosswork apho i-Crosswork Change Automation function pack v7.0 iyahambelana:
- Cisco NSO: v6.1.16.3 inkqubo yokufaka.
- Cisco Crosswork: v7.0.2
Ukufakela/uPhuculo kunye noLungiselelo
La macandelo angezantsi abonisa indlela yokufaka i-cw-device-auth function pack kwi-system install Cisco NSO 6.1.11.2 okanye ngaphezulu.
Ukufakela/ukuphucula iPakethi yoMsebenzi
- Khuphela i-cw-device-auth v7.0.0 ukusuka kwindawo yokugcina kwi-Cisco NSO yakho.
- Khuphela uvimba we-tar.gz okhutshelweyo wepakethi yomsebenzi kwindawo yakho yokugcina ipakethe.
Phawula: Ulawulo lwephakheji lunokwahluka ngokusekelwe kwizicwangciso ezikhethiweyo ngexesha lofakelo. Kwiinkqubo ezininzi ezifakwe kwi-Cisco NSO, i-directory yephakheji ifumaneka "/var/opt/ncs/packages" ngokungagqibekanga. Jonga i-ncs.conf kufakelo lwakho ukufumana uvimba weefayili wakho. - Qalisa iNCS CLI kwaye usebenzise le miyalelo ilandelayo:
- admin@nso1:~$ ncs_cli -C -u admin
- admin uqhagamshelwe ukusuka 2003:10:11:50 usebenzisa ssh kwi nso1
- admin@ncs# layisha kwakhona ipakethe
- Qinisekisa ukuba iphakheji ifakwe ngempumelelo xa ukulayishwa kwakhona kugqityiwe.
- admin@ncs# bonisa ipakethe ipakethe cw-device-auth
- ipakethe ipakethe cw-device-auth
- iphakheji-uguqulelo 7.0.0
- inkcazelo "Ipakethi yeentshukumo zogunyaziso lwesixhobo esinqamlezayo"
- ncs-min-uguqulelo [6.1]
- python-package vm-igama cw-isixhobo-auth
- ulawulo /var/opt/ncs/state/packages-in-use/1/cw-device-auth
- intshukumo yecandelo
- isicelo sepython-class-name cw_device_auth.action.App
- Isigaba sokuqala sesicelo sesigaba2
- imo yokusebenza phezulu
Ukudala uMsebenzisi oKhethekileyo wokuFikelela kwiCisco NSO
Cisco Crosswork Change Automation isebenzisa umsebenzisi okhethekileyo ukufikelela ukudibanisa Cisco NSO kuzo zonke utshintsho uqwalaselo. Oku kuthetha ukuba awukwazi ukusebenzisa umsebenzisi ofanayo njenge-DLM okanye iinkonzo zokuqokelela ukufikelela kwi-Cisco NSO. Eli candelo lixoxa ngezinto eziyimfuneko ekudalweni komsebenzisi.
Qaphela: La manyathelo angezantsi acingela ukuba iCisco NSO isebenza kwi-Ubuntu VM. Ukuba ufakelo lwakho lweCisco NSO lusebenza kwindlela yokusebenza eyahlukileyo, nceda uguqule amanyathelo ngokufanelekileyo.
- Yenza umsebenzisi omtsha we-sudo kwi-Ubuntu VM yakho. Eksample apha. Amanyathelo angezantsi abonisa indlela yokwenza umsebenzisi "cwuser" kwi-Ubuntu VM yakho. Eli gama litsha lokusebenzisa inokuba yiyo nantoni na oyikhethayo.
ingcambu@nso:/ikhaya/admin# adduser cwuser- Ukongeza umsebenzisi `cwuser'...
- Yongeza iqela elitsha `cwuser' (1004) ...
- Yongeza umsebenzisi omtsha `cwuser' (1002) neqela `cwuser' … Kuyilwa uluhlu lwasekhaya `/ikhaya/cwuser' …
- Ukukopa files ukusuka ku `/ etc/skel'...
- Ngenisa igama lokugqitha elitsha leUNIX:
- Phinda uchwetheze igama lokugqitha elitsha leUNIX:
- passwd: igama lokugqithisa lihlaziywe ngempumelelo
- Ukutshintsha ulwazi lomsebenzisi kwi-cwuser
- Ngenisa ixabiso elitsha, okanye cinezela ENTER kokungagqibekanga
- Igama eliphelele []:
- Inombolo yeGumbi []:
- Ifowuni Yasemsebenzini []:
- Ifowuni Yasekhaya []:
- Okunye []:
- Ngaba ulwazi luchanekile? [Y/n] y
- ingcambu @ nso:/ikhaya/admin# usermod -aG sudo cwuser
- ingcambu @ nso:/ikhaya/admin# usermod -a -G ncsadmin cwuser
- Yongeza i-cwuser kwiqela le-nacm
- Phawula:
Umgaqo we-nacm kufuneka uqwalaselwe nge cwuser nangona ungenaye umlawuli njengomsebenzisi kumncedisi. - *nacm amaqela iqela ncsadmin umsebenzisi-igama cwuser
- nacm amaqela iqela ncsadmin
- Igama lomsebenzisi [ admin cwuser yabucala ]
- * Iimvume ezihlala zikhona ziboniswa nje ngasezantsi.
- admin@ncs# bonisa ukubaleka-uqwalaselo nacm
- I-nacm ifundeka-ehlala ikho
- I-nacm ibhala-ehlala ikho
- i-nacm exec-ehlala ikho ukukhanyela
- I-nacm cmd-funda-ehlala ikho yala
- I-nacm cmd-exec-default yala
- Phawula:
- Qinisekisa ukuba umsebenzisi omtsha owenziweyo unokufikelela kwi-HTTP kunye ne-HTTPS kwiseva yeCisco NSO. Oku kunokwenziwa ngokusebenzisa i-RESTCONF API elula njengoko kuboniswe ngezantsi.
- curl -u : -indawo -cela iGET 'https:// :8888/restconf/data/tailf-ncs:packages/package=cw-device-auth' \
- –header 'Yamkela: isicelo/yang-data+json' \
- –iheader 'Udidi lomxholo: isicelo/yang-data+json' \
- -idatha ekrwada ”
- Ekufowuneni ucurl umyalelo ongentla, kufuneka ufumane impendulo njengoko kubonisiwe ngezantsi. Nayiphi na enye impendulo iya kubonisa ukuba useto olunye okanye ngaphezulu oludlulileyo alusebenzanga.
- {
- “tailf-ncs:package”: [
- {
- "igama": "cw-device-auth",
- "package-version": "7.0.0",
- "inkcazo": "Ipakethi yezenzo zogunyaziso lwesixhobo esinqamlezayo",
- “ncs-min-version”: [“6.1”],
- "Python-package": {
- "vm-name": "cw-device-auth"
- },
- “directory”: “/var/opt/ncs/state/packages-in-use/1/cw-device-auth”,
- "icandelo": [
- {
- "igama": "isenzo",
- "isicelo": {
- “python-class-name”: “cw_device_auth.action.App”,
- “start-phase”: “phase2”
- }
- }
- ],
- "imo yokusebenza": {
- "phezulu": [null]
- }
- }
- ]
- }
Ukongeza imephu yomsebenzisi (imephu) kwiqela le-Cisco NSO authgroup
I-Cisco NSO ivumela abasebenzisi ukuba bachaze ii-authgroups zokuchaza iziqinisekiso zofikelelo lwesixhobo esisemazantsi. Iqela le-authgroup lingaqulatha imephu engagqibekanga okanye imephu yomsebenzisi (umaphu). Ukongeza, i umap inokuchazwa kwiqela elinegunya lokugqithisa iziqinisekiso ezingagqibekanga ukusuka kwimaphu engagqibekanga okanye ezinye umaps.
I-Crosswork Change Automation "i-override credentials passthrough" icandelo lisebenzisa le umap. Ukusebenzisa i-Crosswork Change Automation, uqwalaselo lwe umap kufuneka lwenziwe kwiqela le-authgroup yezixhobo.
UmzekeloampLe, cinga ukuba unesixhobo "xrv9k-1" ebhaliswe Cisco NSO. Esi sixhobo sisebenzisa i-authgroup, "i-crosswork".
- cwuser @ ncs# bonisa isixhobo sokusebenzisa-uqwalaselo isixhobo xrv9k-1 authgroup izixhobo isixhobo xrv9k-1
- i-authgroup crosswork
- !
Kwaye uqwalaselo lweqela le-authgroup "i-crosswork" ilandelayo:
- cwuser@ncs# bonisa izixhobo ezisebenzayo-zoqwalaselo ii-authgroups zeqela izixhobo ezinqamlezileyo zamaqela authgroups umnqamlezo weqela
- umap admin
- ekude-igama cisco
- i-remote-password $9$LzskzrvZd7LeWwVNGZTdUBDdKN7IgVV/UkJebwM1eKg=
- !
- !
- Yongeza umap kumsebenzisi omtsha oyenzileyo (cwuser kule example). Oku kunokwenziwa ngolu hlobo lulandelayo:
- cwuser@ncs# uqwalaselo
- cwuser@ncs(config)# izixhobo authgroups iqela crosswork umap cwuser callback-node /cw-creds-fumana isenzo-igama fumana
- cwuser@ncs(config-umap-cwuser)# yenza umsebenzi owomileyo
- clina {
- indawo yendawo {
- izixhobo zedatha {
- amaqela ababhali{
- ukuhlangana kweqela {
- + umap cwuser {
- + callback-node /cw-creds-get;
- + intshukumo-igama fumana;
- + }
- }
- }
- }
- }
- }
- cwuser@ncs(config-umap-cwuser)# zibophelele
- Zibophelele ngokupheleleyo.
Emva koqwalaselo, iqela le-authgroup kufuneka lijongeke ngolu hlobo:
- cwuser@ncs# bonisa izixhobo ezisebenzayo-uqwalaselo lwamaqela authgroups umsebenzi weqela
- izixhobo authgroups iqela crosswork
- umap admin
- ekude-igama cisco
- i-remote-password $9$LzskzrvZd7LeWwVNGZTdUBDdKN7IgVV/UkJebwM1eKg=
- !
- umap cwuser
- callback-node /cw-creds-get
- isenzo-igama fumana
- !
- !
Qinisekisa ukuba
- umap yongezwa kwiqela elikhoyo lesixhobo(s) somdla.
- Umap usebenzisa igama lomsebenzisi elichanekileyo.
Ukuba olunye kolu lungelelwaniso lungasentla aluchanekanga, imiba yexesha lokuqalisa inokwenzeka.
Ukuqwalasela i-DLM kwiCisco Crosswork
Emva kokufaka kunye nokuqwalasela ipakethe yomsebenzi kwiCisco NSO, kufuneka umise uqwalaselo kwi-DLM kwiCisco Crosswork. Ezi zicwangciso zoqwalaselo ziya kuvumela uTshintsho oluzenzekelayo ukufikelela kwiCisco NSO ngokusebenzisa umsebenzisi osanda kwenziwa kwaye uqwalasele usebenzisa iziqinisekiso zokubhala ngaphezulu xa kufuneka.
Yenza i-ca_device_auth_nso Credential Profile
Yila iphrofayili entshafile kwiCisco NSO kumsebenzisi wofikelelo olukhethekileyo olwenzileyo kwicandelo Ukudala uMsebenzisi woFikelelo oluKhethekileyo kwi-NSO yesi sikhokelo. Yongeza iinkcazi ze-HTTP kunye ne-HTTPS kumsebenzisi kule profile. Lo mfanekiso ungezantsi ubonisa iinkcukacha zomsebenzisi kunye negama lokugqitha kumsebenzisi, "cwuser".
KUBALULEKILEYO
Kunye ne-ca_device_auth_nso credential profile, uya kuba nenye iphrofayili yokuqinisekisafile kwi DLM eya kuchaza igama lomsebenzisi/igama lokugqitha kwi Cisco NSO kuwo onke amanye amalungu eCisco Crosswork. Kwi-example ngezantsi, le pro siqinisekisofile ibizwa ngokuba "yi-nso-creds".
Kubalulekile: Qinisekisa ukuba igama lomsebenzisi lesiqhelo DLM credential profile yahlukile kwigama lomsebenzisi kwi-ca_device_auth_nso profile.
Yongeza iPropati yoMboneleli we-DLM
Nje ukuba udale i-pro credentialfile kwi-DLM, kufuneka ungeze ipropati kubo bonke ababoneleli be-Cisco NSO kwi-DLM eya kusetyenziswa kwi-Crosswork CA. Umfanekiso ongezantsi ubonisa ubume bepropati.
Ukulungisa ingxaki
Le theyibhile ilandelayo idwelisa iimpazamo eziqhelekileyo onokudibana nazo.
| Hayi. | Umtya osezantsi wemposiso | Ingxaki | Isigqibo |
| 1. | Umsebenzisi we-nso umap kufuneka abe yi-nso credential profile umsebenzisi | ca_device_auth_nso igama lomsebenzisi alihambelani nabaphi na abasebenzisi beumap. |
|
| 2. | engenanto auth iqela umap ukusuka nso | Akukho umap efunyenweyo kwiCisco NSO authgroup. | Yongeza umap. |
| 3. | ayiphumelelanga kukufumana kwakhona ingcambu yomthombo ye-RESTCONF. nceda uqinisekise i-NSO iyafikeleleka nge-RESTCONF | I-Crosswork CA ayiphumelelanga ukuqhagamshela kwi-Cisco NSO nge-RESTCONF. | Qinisekisa ukuba igama lomsebenzisi/igama lokugqitha njengoko kuchaziwe kwi cw_device_auth_nso cred profile inokuqhagamshela kwiCisco NSO nge-RESTCONF. |
Amaxwebhu amiselweyo ale mveliso azama ukusebenzisa ulwimi olungakhethi cala. Ngeenjongo zolu xwebhu setethi, ukungakhethi cala kuchazwa njengolwimi olungathethi ucalucalulo olusekwe kwiminyaka yobudala, ukukhubazeka, isini, uhlanga, ubuntu, utyekelo lwezesondo, imo yentlalo noqoqosho, kunye nokuhlangana kweendlela. Okushiyiweyo kusenokubakho kumaxwebhu ngenxa yolwimi olukhowudwe ngamandla kujongano lomsebenzisi wesoftware yemveliso, ulwimi olusetyenziswa ngokusekwe kumaxwebhu asemgangathweni, okanye ulwimi olusetyenziswa yimveliso yomntu wesithathu ekubhekiselwa kuyo. ICisco kunye nelogo yeCisco ziimpawu zorhwebo okanye ziimpawu zorhwebo ezibhalisiweyo zeCisco kunye/okanye namahlakani ayo e-US nakwamanye amazwe. Ukuya view uluhlu lweempawu zorhwebo zeCisco, yiya kule URL: https://www.cisco.com/c/en/us/about/legal/trademarks.html. Iimpawu zokuthengisa zomntu wesithathu ezikhankanyiweyo ziyipropathi yabanini bazo. Ukusetyenziswa kwegama elithi iqabane akuthethi ukuba ubudlelwane phakathi kweCisco kunye nayo nayiphi na enye inkampani. (1721R)
FAQ
Loluphi uhlobo lweCisco NSO oluhambelana nalo msebenzi wepakethi?
Ipakethi yomsebenzi iyahambelana neCisco NSO 6.1.11.2 okanye ngaphezulu.
Amaxwebhu / Izibonelelo
 |
I-CISCO Guqula i-Automation NSO Function Pack [pdf] Isikhokelo soFakelo Guqula iPakethi yokuSebenza yeNSO ezenzekelayo, iPakethi yokuSebenza yeNSO, iPakethi yokuSebenza yeNSO, iPakethi yokuSebenza |