{"id":1702,"date":"2022-02-23T03:20:46","date_gmt":"2022-02-23T03:20:46","guid":{"rendered":"http:\/\/thechotacode.com\/?p=1702"},"modified":"2022-03-08T03:08:20","modified_gmt":"2022-03-08T03:08:20","slug":"aut","status":"publish","type":"post","link":"https:\/\/thechotacode.com\/?p=1702","title":{"rendered":"Automate Bulk Routers Configuration"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t

<\/p>

This post basically explains about automating configuration of multiple routers which are in\u00a0 management.\u00a0<\/span><\/strong><\/p>

There are many ways to login to the routers to perform the auto-configuration, using libraries\u00a0 like netmiko, paramiko etc…However do check if the platform that you’re using for config automation has the libraries supported for performing such operations.<\/span><\/strong><\/p>

In my Unix server,\u00a0 I have the support of telnetlib and Paramiko libraries only, to do Telnet and SSH to the routers.
I have kept separate programs for telnet and SSH to internet routers and IPVPN routers respectively.
However, its possible to make a single program which would be able to perform both but haven’t felt the necessity yet.<\/span><\/strong><\/p>

+++++++++++++++++<\/span><\/span>
<\/span><\/span><\/strong>Program 1 :-\u00a0 I’m going to explain the program in thumbnail step by step.
<\/span><\/span><\/strong>+++++++++++++++++<\/span><\/span><\/p>

Step1:-\u00a0 These are libraries which serves like function and gives necessary output based on the input we provide in the function.<\/span><\/strong><\/span><\/p>

import telnetlib\u00a0 \u00a0 \u00a0 \u00a0 \u00a0<< — helps in performing various task to perform in routers like read, write, delay of commands etc.<\/span>
import getpass\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 << — helps in holding passwords and take care of its storage.<\/span><\/strong><\/span>
import sys<\/strong><\/span>
import time<\/strong><\/span><\/p>

Step2:- Used general input command to hold the username of router that you login and getpass library to hold the password.<\/span><\/strong><\/span><\/p>

user = raw_input(“Enter your telnet username:- “) <\/strong><\/span>
password = getpass.getpass()<\/strong><\/span><\/p>

Step3:-\u00a0 Sys read command will take all the routers IP and place in list. X array hold the IP’s in list.<\/span><\/strong><\/span><\/p>

x = []<\/strong><\/span>
IP = sys.stdin.read()<\/strong><\/span>
x.extend(IP.strip().split(‘\\n’))<\/strong><\/span><\/p>

Step4:-\u00a0 Sys read command will take all the config’s line by line and hold in list. Y array hold the config lines.<\/span><\/strong><\/span><\/p>

y = []<\/strong><\/span>
Config = sys.stdin.read()<\/strong><\/span>
y.extend(Config.strip().split(‘\\n’))<\/strong><\/span><\/p>

Step5:-\u00a0 There is a Nested ‘FOR’<\/span> logic, the 1st ‘FOR’<\/span> logic will telnet each IP in the list and 2nd ‘FOR’<\/span> will loop to take each line of config and put inside the router until all the lines in the list are done, also it won’t go to the next IP.<\/span><\/strong><\/span><\/p>

for data in x:<\/span><\/strong>
\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 for a in y:<\/span><\/strong><\/p>

Step6:-\u00a0 ‘data’<\/span> will take each IP and will print as telnet to that IP to show us in which router it is working.
While the prompt for username and prompt is reached, the values will be called to enter for each IP.<\/span><\/strong><\/span><\/p>

print “Telnet to IP Addrecss :- “+ data<\/span><\/strong>
try:<\/span><\/strong>
t = telnetlib.Telnet(data,23,20<\/span><\/strong>)\u00a0 \u00a0 <<— Its function calling IP in data with port number and timeout delay.<\/span><\/span><\/strong>
t.read_until(“Username:”)\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 <<— This read will wait for banner to complete and wait for username prompt.<\/span><\/span><\/strong>
t.write(user + “\\n”)\u00a0 \u00a0 \u00a0<\/span><\/strong>
if password:<\/span><\/strong>
\u00a0 \u00a0 \u00a0 t.read_until(“Password:”)<\/span><\/strong>
\u00a0 \u00a0 \u00a0 t.write(password + “\\n”)<\/span><\/strong><\/p>

Step7:-\u00a0 There could be multiple possibilities for not to login, for all such errors you will see this default message as problem to login.<\/span><\/strong><\/span><\/p>

except:<\/strong><\/span>
\u00a0 \u00a0 \u00a0 print “Some issue with login please check “<\/strong><\/span>
\u00a0 \u00a0 \u00a0 pass<\/strong><\/span><\/p>

Step8:-\u00a0 Below ‘FOR<\/span>‘ is nested inside the 1st ‘FOR’<\/span> for login to the IP.\u00a0 This will write through all the lines stored in ‘Y ‘array inside the router.<\/span><\/strong><\/span><\/p>

for a in y:<\/span><\/strong>
\u00a0 \u00a0 t.write(str(a) + ‘\\n’)<\/span><\/strong><\/p>

Step9:-\u00a0 After write<\/span> command its good practice to keep a 1 sec delay before exit from router, and read operation will give all the logs in the terminal.<\/span><\/strong><\/span><\/p>

time.sleep(1)<\/span><\/strong>
t.write(“exit\\n”)<\/span><\/strong>
print t.read_all()<\/span><\/strong><\/p>

Step10 OUTPUT:-\u00a0 If you see I have placed a inaccessible device IP 8.8.8.8, but still the program by-passes with message and progress till end.
Note:- You have to be careful with the config lines if in case of improper lines would cause issues to all device, hence its advisable to check the operations in 2 routers for testing and perform the same for all.
Note:- I have tested for around 200 devices in one go so far, in putting a common snmp config.
<\/span>
<\/span><\/strong><\/span>\"\"<\/p>

++++++++++++++++++++++
PROGRAM 2:- FOR SSH TO MULTIPLE DEVICES BY USING PARAMIKO LIBRARY<\/span>
++++++++++++++++++++++<\/strong><\/span><\/p>

Note:- Uptill step 4 the logic and command lines are same for fetching the input, username and password storage.<\/strong><\/span><\/p>

The ‘FOR’<\/span> Logic makes the difference in here, I will explain through in 3 steps.<\/span><\/strong><\/p>

Step1:-\u00a0 The 1st\u00a0‘FOR’<\/span> logic will take each IP and print will display to which router is logged in to perform configuration.<\/span>
SSH will form a encrypted line to login, so there is various command\/functions to hold the key storage or username.
Timeout of 20sec if not reachable for any reason.<\/span><\/strong><\/span><\/p>

for data in x:<\/span><\/strong>
print “SSH to IP Addrecss :- “+ data<\/span><\/strong>
try:<\/span><\/strong>
remote_conn_pre=paramiko.SSHClient()<\/span><\/strong>
remote_conn_pre.set_missing_host_key_policy(paramiko.AutoAddPolicy())<\/span><\/strong>
remote_conn_pre.connect(data, port=22, username=user, password=password, timeout – 20, look_for_keys=False, allow_agent=False)<\/span><\/strong><\/p>

Step2:-\u00a0 During the login process, if any of the IP is not reachable for any reason then will give this default error comment and progress further.<\/span><\/strong><\/span><\/p>

except:<\/strong><\/span>
print “Some issue with login please check “<\/strong><\/span>
continue<\/strong><\/span><\/p>

Step3:-\u00a0 The 2nd ‘FOR’<\/span>\u00a0Logic is used for putting the configs inside the router in a secure channel.
Interactive SSH session will establish by invoking shell function, ready to receive logs with terminal length 65535.
‘str a<\/span>‘ will send each line in the array followed by enter ‘\\n’ which is crucial in paramiko and printing the output. Kept some delay between each lines based on bandwidth it varies, followed by command ‘end’ when all lines are executed. Once all lines are done, it will come of this ‘FOR’<\/span> loop and move to the 1st ‘FOR’<\/span> to fetch 2nd IP and so on.<\/span><\/strong><\/span><\/p>

remote_conn = remote_conn_pre.invoke_shell() remote_conn
<\/span><\/strong>output =\u00a0 remote_conn.recv(65535)<\/span><\/strong>
print output\u00a0
<\/span><\/strong>
for a in y:
remote_conn.send(“\\n” + str(a) )
<\/span><\/strong>time.sleep(.5)
<\/span><\/strong>output = remote_conn.recv(65535)
<\/span><\/strong>print output
<\/span><\/strong>remote_conn.send(“end\\n”)
<\/span><\/strong>time.sleep(.5)
<\/span><\/strong>output = remote_conn.recv(65535)<\/span><\/strong><\/p>

PROGRAM:-
<\/strong><\/span><\/p>

\"\"<\/p>

PROGRAM OUTPUT:- Config handling in paramiko is so tough, I often make a lot of work around to save it.<\/span><\/span><\/strong><\/p>

selvara@nms4:\/home\/ip-python$ python SSH_BulkChange.py<\/span>
<\/span><\/strong><\/p>

++++++++++++++++++++++++++++++++++++++++++++++++++++++<\/span>
Enter your SSH username:- rselvaraj<\/span>
Password: <\/span>
Enter the IP’s below and press Ctrl+d <\/span>
192.168.73.100<\/span>
192.168.195.15<\/span>
8.8.8.8<\/span>
192.168.64.115<\/span>
^D<\/span>
Enter the Router Configs below and press Ctrl+d <\/span>
!<\/span>
config t<\/span>
no access-list 20<\/span>
access-list 20 permit 62.23.19.235<\/span>
!<\/span>
Snmp-server view custview mib-2.* included<\/span>
Snmp-server view custview ciscoEnvMonMIB included<\/span>
Snmp-server view custview ciscoMgmt.13 included<\/span>
Snmp-server enable traps envmon<\/span>
Snmp-server enable traps snmp<\/span>
!<\/span>
snmp-server community Ip@Cs!123 view custview RO 20<\/span>
snmp-server host 62.23.19.235 Ip@Cs!123 envmon snmp<\/span>
exit<\/span>
^D<\/span>
+++++++++++++++++++++++++++++++++++++++++++++++++++++++<\/span>
SSH to IP Addrecss :- 192.168.73.100<\/span>
SCO000600#<\/span>
SCO000600# terminal length 0<\/span>
SCO000600#<\/span>
SCO000600#!<\/span>
SCO000600#config t<\/span>
Enter configuration commands, one per line. End with CNTL\/Z.<\/span>
SCO000600(config)#no access-list 20<\/span>
SCO000600(config)#access-list 20 permit 62.23.19.235<\/span>
SCO000600(config)#!<\/span>
SCO000600(config)#Snmp-server view custview mib-2.* included<\/span>
SCO000600(config)#Snmp-server view custview ciscoEnvMonMIB included<\/span>
SCO000600(config)#Snmp-server view custview ciscoMgmt.13 included<\/span>
SCO000600(config)#Snmp-server enable traps envmon<\/span>
SCO000600(config)#Snmp-server enable traps snmp<\/span>
SCO000600(config)#!<\/span>
SCO000600(config)#snmp-server community Ip@Cs!123 view custview RO 20<\/span>
SCO000600(config)#snmp-server host 62.23.19.235 Ip@Cs!123 envmon snmp<\/span>
SCO000600(config)#exit<\/span>
+++++++++++++++++++++++++++++++++++++++++++++++++++++++<\/span>
SSH to IP Addrecss :- 192.168.195.15<\/span>
BER000965#<\/span>
BER000965# terminal length 0<\/span>
BER000965#<\/span>
BER000965#!<\/span>
BER000965#config t<\/span>
Enter configuration commands, one per line. End with CNTL\/Z.<\/span>
BER000965(config)#no access-list 20<\/span>
BER000965(config)#access-list 20 permit 62.23.19.235<\/span>
BER000965(config)#!<\/span>
BER000965(config)#Snmp-server view custview mib-2.* included<\/span>
BER000965(config)#Snmp-server view custview ciscoEnvMonMIB included<\/span>
%Bad OID<\/span>
BER000965(config)#Snmp-server view custview ciscoMgmt.13 included<\/span>
BER000965(config)#Snmp-server enable traps envmon<\/span>
^<\/span>
% Invalid input detected at ‘^’ marker.<\/span>
BER000965(config)#Snmp-server enable traps snmp<\/span>
BER000965(config)#!<\/span>
BER000965(config)#snmp-server community Ip@Cs!123 view custview RO 20<\/span>
BER000965(config)#snmp-server host 62.23.19.235 Ip@Cs!123 envmon snmp<\/span>
^<\/span>
% Invalid input detected at ‘^’ marker.<\/span>
BER000965(config)#exit<\/span>
+++++++++++++++++++++++++++++++++++++++++++++++++++++++<\/span>
SSH to IP Addrecss :- 8.8.8.8<\/span>
Some issue with login please check <\/span>
+++++++++++++++++++++++++++++++++++++++++++++++++++++++<\/span>
SSH to IP Addrecss :- 192.168.64.115<\/span>
TRN008836#<\/span>
TRN008836# terminal length 0<\/span>
TRN008836#<\/span>
TRN008836#!<\/span>
TRN008836#config t<\/span>
Enter configuration commands, one per line. End with CNTL\/Z.<\/span>
TRN008836(config)#no access-list 20<\/span>
TRN008836(config)#access-list 20 permit 62.23.19.235<\/span>
TRN008836(config)#!<\/span>
TRN008836(config)#Snmp-server view custview mib-2.* included<\/span>
TRN008836(config)#Snmp-server view custview ciscoEnvMonMIB included<\/span>
TRN008836(config)#Snmp-server view custview ciscoMgmt.13 included<\/span>
TRN008836(config)#Snmp-server enable traps envmon<\/span>
TRN008836(config)#Snmp-server enable traps snmp<\/span>
TRN008836(config)#!<\/span>
TRN008836(config)#snmp-server community Ip@Cs!123 view custview RO 20<\/span>
TRN008836(config)#snmp-server host 62.23.19.235 Ip@Cs!123 envmon snmp<\/span><\/p>

++++++++++++++++++++++<\/strong>
PROGRAM 3:-\u00a0 What if each router need different commands to update and fetch output.<\/span><\/strong>
++++++++++++++++++++++<\/strong>
<\/span><\/p>

Note:- In programs 1 and 2 the configs were common to all devices, however if you want separate\u00a0config for each IP then it will be very complex to store each config in separate arrays and call it. However you can use file handling method, like storing the files in notepad and calling it for each devices.<\/strong><\/span><\/p>

In this program I would share one specific example which is possible, for every device IP there can be one command pasted in relevance to that device, its like one to one pairing of commands executed one by one. however there is a challenge in using 2 commands in relevance of that device, which I may soon come up.<\/strong><\/span><\/p>

Example:- If you want to find the interface name of each IP which you got, hence its just a show command to be given on each router to fetch the output.<\/strong><\/span><\/p>


Program:- Its similar to program 2 however there is a array calling with incremental indexing Logic.<\/strong><\/span><\/p>

\"\"<\/strong><\/span><\/p>

Program Output:-\u00a0 As you see here the interface is all loopback0. And sequence of 1st IP with 1st Command pairing is executed.<\/span><\/span>
\"\" \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0\u00a0<\/strong><\/p>

You can develop one such program for telnet function, I shall try to make one program which can able to perform both telnet and SSH based on whichever is permitted in router.<\/span><\/strong><\/p>

Note:- You can develop more to such program and formulate the results in notepad, excel, word as\u00a0 you wish in the output. I would explain such file handling method in coming post.<\/span><\/strong><\/p>

Hope you had a good learning on how the automation of configuration is carried in router. Even you can perform the logic from base machine if its accessible to managed devices.<\/strong><\/span><\/p>

Thank you for the read this far, wish you good luck!!<\/strong><\/span><\/p>

\"1\"2\"3\"4\"5 (3<\/strong> votes, average: 5.00<\/strong> out of 5)
<\/span><\/span>Loading…<\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

This post basically explains about automating configuration of multiple routers which are in\u00a0 management.\u00a0 There are many ways to login to the routers to perform the auto-configuration, using libraries\u00a0 like netmiko, paramiko etc…However do check if the platform that you’re using for config automation has the libraries supported for performing such operations. In my Unix…<\/p>\n","protected":false},"author":2,"featured_media":1360,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[10],"tags":[],"class_list":["post-1702","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-codes","wpcat-10-id"],"_links":{"self":[{"href":"https:\/\/thechotacode.com\/index.php?rest_route=\/wp\/v2\/posts\/1702","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thechotacode.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thechotacode.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thechotacode.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/thechotacode.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1702"}],"version-history":[{"count":7,"href":"https:\/\/thechotacode.com\/index.php?rest_route=\/wp\/v2\/posts\/1702\/revisions"}],"predecessor-version":[{"id":2299,"href":"https:\/\/thechotacode.com\/index.php?rest_route=\/wp\/v2\/posts\/1702\/revisions\/2299"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thechotacode.com\/index.php?rest_route=\/wp\/v2\/media\/1360"}],"wp:attachment":[{"href":"https:\/\/thechotacode.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1702"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thechotacode.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1702"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thechotacode.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1702"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}