1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
|
==================
Compatible Devices
==================
The following devices are compatible with this plugin:
.. netmiko-device-commands::
:output-type: all-devices
This Mechanism Driver architecture allows easily to add more devices
of any type.
::
OpenStack Neutron v2.0 => ML2 plugin => Generic Mechanism Driver => Device plugin
These device plugins use `Netmiko <https://github.com/ktbyers/netmiko>`_
library, which in turn uses `Paramiko` library to access and configure
the switches via the SSH protocol.
Cisco Nexus (netmiko_cisco_nxos)
--------------------------------
Known working firmware versions: 10.3.7
Notes:
* Default state for switches is well suited for networking-generic-switch
as long as SSH is utilized *and* the underlying role provided to the
account permits configuration of switchports.
* Pre-configuration of upstream network trunk ports to the neutron networking
nodes is advisable, however the ``ngs_trunk_ports`` setting should be
suitable for most users as well.
* Use of an "enable" secret through the ``secret`` configuration option has
not been tested.
* Security groups not yet implemented
Dell Force10 OS9 (netmiko_dell_force10)
---------------------------------------
Known working firmware versions: 9.13.0.0
Notes:
* Dell Force10 Simulator for 9.13.0 lacks the ability to set a switchport
mode to trunk, which prevents automated or even semi-automated testing.
That being said, creating VLANs and tagging/untagging works as expected.
* Uplink switchports to the rest of the network fabric must be configured in
advance if the ``ngs_trunk_ports`` switch device level configuration
option is *not* utilized.
* Use of SSH is expected and must be configured on the remote switch.
* Set each port to "switchport" to enable L2 switchport mode.
* Use of an "enable" secret through the switch level configuration option
``secret`` was the tested path. Depending on precise switch configuration
and access control modeling, it may be possible to use without an enable
secret, but that has not been tested.
* Security groups not yet implemented
Known Issues:
* `bug 2100641 <https://bugs.launchpad.net/ironic/+bug/2100641>`_ is
alieviated by setting a port to "switchport" *before* attempting to utilize
networking-generic-switch.
Dell Force10 OS10 (netmiko_dell_os10)
-------------------------------------
Known working firmware version: 10.6.0.2.74
Notes:
* Uplink switchports may need to be configured as Trunk ports prior to the
use of networking-generic-switch through a "switchport mode trunk" command.
Further specific trunk configuration may be necessary, however NGS can
leverage the ``ngs_trunk_ports`` configuration option and does appropriately
tag switchports as permitted when creating/deleting attachments.
* Password authentication for networking-generic-switch needs to be setup in
advance, specifically "ip ssh server enable" and
"ip ssh server password-authentication" commands.
* This driver was tested *without* the use of an enable secret to
permit a higher level of configuration access within the Switch.
* Security groups not yet implemented
Sonic - Community Distribution (netmiko_sonic)
----------------------------------------------
Known working firmware version: master branch - March 2025
Notes:
* The driver expects to be able to SSH into the switch running
SONiC, execute sudo, and then execute configuration commands.
* Ports *must* be in Layer-2 mode. As such,
``sudo config interface ip remove $INTERFACE $IP_ADDRESS/$CIDR``
and ``sudo config switchport mode access $INTERFACE`` commands
may be required.
* Uplink switch ports should be configured in advance with the
``sudo config switchport mode trunk $INTERFACE`` command.
Testing for the configuraiton utilized this advanced state
configuration of the trunk uplink ports with the ``ngs_trunk_ports``
configuration option for Networking-Generic-Switch.
* Security groups not yet implemented
|
