DAI-Netconf

DAI

Resources Summary

YANG Path	get/get-config	edit-config	rpc
/dai	Y	merge, replace, create, delete	—
/dai/interfaces/{name}	Y	merge, replace, create, delete	—

Examples

This chapter provides examples on how to use Netconf to manage DAI configurations on AsterNOS devices.

Get Current DAI Configurations

Request example to get all DAI configurations via get-config with subtree filter.

<filter type="subtree">
  <top>
    <dai/>
  </top>
</filter>

Response example

<data xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
  <top>
    <dai>
      <interfaces>
        <interface>
          <name>Ethernet1</name>
          <enable>true</enable>
        </interface>
        <interface>
          <name>Vlan100</name>
          <enable>true</enable>
          <trusted-interfaces>Ethernet1</trusted-interfaces>
          <trusted-interfaces>Ethernet2</trusted-interfaces>
        </interface>
      </interfaces>
    </dai>
  </top>
</data>

Set DAI Configuration of Interface

NOTE

‘enable’ and ‘trust-enable’ cannot be configured as true at the same time

Request example to set DAI configuration of interface to enabled via edit-config.

<config>
  <top>
    <dai>
      <interfaces>
        <interface>
          <name>Ethernet1</name>
          <enable>true</enable>
        </interface>
        <interface>
          <name>Vlan100</name>
          <enable>true</enable>
          <trusted-interfaces>Ethernet2</trusted-interfaces>
          <trusted-interfaces>Ethernet3</trusted-interfaces>
        </interface>
      </interfaces>
    </dai>
  </top>
</config>

Response example

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:bb24faf4-2dba-4801-bff1-1442572b985f">
  <ok/>
</rpc-reply>

Request example to set DAI configuration of interface to trust-enabled via edit-config.

<config>
  <top>
    <dai>
      <interfaces>
        <interface>
          <name>Ethernet1</name>
          <trust-enable>true</trust-enable>
        </interface>
      </interfaces>
    </dai>
  </top>
</config>

Response example

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:fcc408de-478d-41d7-b7c0-04aa28e5b649">
  <ok/>
</rpc-reply>

Delete DAI Configuration

Request example to delete DAI configuration of interface via edit-config.

<config>
  <top>
    <dai>
      <interfaces>
        <interface operation="delete">
          <name>Ethernet1</name>
        </interface>
      </interfaces>
    </dai>
  </top>
</config>

Response example

<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-id="urn:uuid:8e4348a5-1175-44f1-b104-3ea41dab237b">
  <ok/>
</rpc-reply>

Properties Descriptions

Container for DAI configurations

Tree Diagram

module: asternos-dai
  +--rw dai
     +--rw interfaces
        +--rw interface* [name]
           +--rw name                  union
           +--rw enable?               boolean
           +--rw trust-enable?         boolean
           +--rw trusted-interfaces*   cmn:ethernet-port-name

Table of Properties

Name	Required	Type/Range	Description
dai	M		Path-only node, has no configurable value. Container for DAI configurations.
interfaces	M		Path-only node, has no configurable value.
interface	M		Path-only node, has no configurable value. Configure DAI interfaces based on VLAN or PORT. Note: ‘enable’ and ‘trust-enable’ cannot be configured as true at the same time
name	O	Ethernet name	Name of the interface.
enable	O	”true" "false”	Enable or disable the configuration for interface (Ethernet or VLAN).
trust-enable	O	”true" "false”	Enable or disable the trust for ethernet interface. Only valid for ethernet interface, not VLAN interface. Suitable for configuration scenarios with multiple VLANs on the interface. When configured as true, trust any VLAN on the interface
trusted-interfaces	O	cmn:ethernet-port-name	List of trusted ethernet port or sub-ethernet interfaces for VLAN. Only valid for VLAN interface.

Interfaces

Tree Diagram

module: asternos-dai
  +--rw dai
     +--rw interfaces
        +--rw interface* [name]
           +--rw name                  union
           +--rw enable?               boolean
           +--rw trust-enable?         boolean
           +--rw trusted-interfaces*   cmn:ethernet-port-name

Table of Properties

Name	Required	Type/Range	Description
interfaces	M		Path-only node, has no configurable value.
interface	M		Path-only node, has no configurable value. Configure DAI interfaces based on VLAN or PORT. Note: ‘enable’ and ‘trust-enable’ cannot be configured as true at the same time
name	O	Ethernet name	Name of the interface.
enable	O	”true" "false”	Enable or disable the configuration for interface (Ethernet or VLAN).
trust-enable	O	”true" "false”	Enable or disable the trust for ethernet interface. Only valid for ethernet interface, not VLAN interface. Suitable for configuration scenarios with multiple VLANs on the interface. When configured as true, trust any VLAN on the interface
trusted-interfaces	O	cmn:ethernet-port-name	List of trusted ethernet port or sub-ethernet interfaces for VLAN. Only valid for VLAN interface.