IPSG

This chapter provides examples on how to use Netconf to manage IPSG configurations on AsterNOS devices.

Get Current IPSG Configurations

Request example to get all IPSG configurations via get-config with subtree filter.

<filter type="subtree">
  <top>
    <ipsg/>
  </top>
</filter>

Response example

<data xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
  <top>
    <ipsg xmlns="http://asterfusion.com/ns/yang/asternos-ipsg">
      <interfaces>
        <interface>
          <name>Ethernet1</name>
          <ip-type>v6</ip-type>
          <enable>true</enable>
        </interface>
        <interface>
          <name>Vlan100</name>
          <ip-type>v6</ip-type>
          <enable>true</enable>
          <trusted-interfaces>Ethernet2</trusted-interfaces>
          <trusted-interfaces>Ethernet3</trusted-interfaces>
        </interface>
        <interface>
          <name>Ethernet1</name>
          <ip-type>v4</ip-type>
          <enable>true</enable>
        </interface>
        <interface>
          <name>Vlan100</name>
          <ip-type>v4</ip-type>
          <enable>true</enable>
          <trusted-interfaces>Ethernet3</trusted-interfaces>
          <trusted-interfaces>Ethernet2</trusted-interfaces>
        </interface>
      </interfaces>
    </ipsg>
  </top>
</data>

Set IPSG Configuration of Interface

Caution

NOTE: ‘enable’ and ‘trust-enable’ cannot be configured as true at the same time

IPSG configuration of interface must specify IP type.

Request example to set IPSG configuration of interface to enabled via edit-config.

<config>
  <top>
    <ipsg>
      <interfaces>
        <interface>
          <name>Ethernet1</name>
          <ip-type>v4</ip-type>
          <enable>true</enable>
        </interface>
        <interface>
          <name>Vlan100</name>
          <ip-type>v4</ip-type>
          <enable>true</enable>
          <trusted-interfaces>Ethernet2</trusted-interfaces>
          <trusted-interfaces>Ethernet3</trusted-interfaces>
        </interface>
        <interface>
          <name>Ethernet1</name>
          <ip-type>v6</ip-type>
          <enable>true</enable>
        </interface>
        <interface>
          <name>Vlan100</name>
          <ip-type>v6</ip-type>
          <enable>true</enable>
          <trusted-interfaces>Ethernet2</trusted-interfaces>
          <trusted-interfaces>Ethernet3</trusted-interfaces>
        </interface>
      </interfaces>
    </ipsg>
  </top>
</config>

Response example

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:b40b1881-532f-44e9-9db5-27ad280454b2">
  <ok/>
</rpc-reply>

Request example to set IPSG configuration of interface to trust-enabled via edit-config.

<config>
  <top>
    <ipsg>
      <interfaces>
        <interface>
          <name>Ethernet1</name>
          <ip-type>v6</ip-type>
          <trust-enable>true</trust-enable>
        </interface>
        <interface>
          <name>Ethernet1</name>
          <ip-type>v4</ip-type>
          <trust-enable>true</trust-enable>
        </interface>
      </interfaces>
    </ipsg>
  </top>
</config>

Response example

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:98421788-dd19-4dfa-a6cd-651a5a14fe6c">
  <ok/>
</rpc-reply>

Delete IPSG Configuration

Request example to delete IPSG configuration of interface via edit-config.

<config>
  <top>
    <ipsg>
      <interfaces>
        <interface operation="delete">
          <name>Ethernet1</name>
          <ip-type>v4</ip-type>
        </interface>
        <interface operation="delete">
          <name>Ethernet1</name>
          <ip-type>v6</ip-type>
        </interface>
      </interfaces>
    </ipsg>
  </top>
</config>

Response example

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:d76fc07a-6f40-442c-8748-543754dac541">
  <ok/>
</rpc-reply>