arista/anta
1
0
Fork 0
Code Issues Activity

Adding upstream version 1.4.0.

Browse source 
Signed-off-by: Daniel Baumann <daniel@debian.org>
This commit is contained in:
Daniel Baumann 2025-05-15 09:34:27 +02:00
parent dc7df702ea
commit 7996c81031
Signed by: daniel
GPG key ID: FBB4F0E80A80222F
166 changed files with 13787 additions and 11959 deletions
Download patch file Download diff file Expand all files Collapse all files

262
examples/tests.yaml
View file

@ -131,8 +131,7 @@ anta.tests.connectivity:
df_bit: True
size: 100
reachable: true
- source: Management0
destination: 8.8.8.8
- destination: 8.8.8.8
vrf: MGMT
df_bit: True
size: 100
@ -162,6 +161,39 @@ anta.tests.cvx:
- VerifyMcsServerMounts:
# Verify if all MCS server mounts are in a MountComplete state.
connections_count: 100
anta.tests.evpn:
- VerifyEVPNType5Routes:
# Verifies EVPN Type-5 routes for given IP prefixes and VNIs.
prefixes:
# At least one active/valid path across all RDs
- address: 192.168.10.0/24
vni: 10
# Specific routes each has at least one active/valid path
- address: 192.168.20.0/24
vni: 20
routes:
- rd: "10.0.0.1:20"
domain: local
- rd: "10.0.0.2:20"
domain: remote
# At least one active/valid path matching the nexthop
- address: 192.168.30.0/24
vni: 30
routes:
- rd: "10.0.0.1:30"
domain: local
paths:
- nexthop: 10.1.1.1
# At least one active/valid path matching nexthop and specific RTs
- address: 192.168.40.0/24
vni: 40
routes:
- rd: "10.0.0.1:40"
domain: local
paths:
- nexthop: 10.1.1.1
route_targets:
- "40:40"
anta.tests.field_notices:
- VerifyFieldNotice44Resolution:
# Verifies that the device is using the correct Aboot version per FN0044.
@ -215,8 +247,14 @@ anta.tests.interfaces:
- Ethernet2
- VerifyIllegalLACP:
# Verifies there are no illegal LACP packets in all port channels.
ignored_interfaces:
- Port-Channel1
- Port-Channel2
- VerifyInterfaceDiscards:
# Verifies that the interfaces packet discard counters are equal to zero.
ignored_interfaces:
- Ethernet
- Port-Channel1
- VerifyInterfaceErrDisabled:
# Verifies there are no interfaces in the errdisabled state.
- VerifyInterfaceErrors:
@ -232,6 +270,9 @@ anta.tests.interfaces:
- VerifyInterfaceUtilization:
# Verifies that the utilization of interfaces is below a certain threshold.
threshold: 70.0
ignored_interfaces:
- Ethernet1
- Port-Channel1
- VerifyInterfacesSpeed:
# Verifies the speed, lanes, auto-negotiation status, and mode as full duplex for interfaces.
interfaces:
@ -261,19 +302,21 @@ anta.tests.interfaces:
mac_address: 00:1c:73:00:dc:01
- VerifyL2MTU:
# Verifies the global L2 MTU of all L2 interfaces.
mtu: 1500
mtu: 9214
ignored_interfaces:
- Management1
- Vxlan1
- Ethernet2/1
- Port-Channel # Ignore all Port-Channel interfaces
specific_mtu:
- Ethernet1/1: 1500
- VerifyL3MTU:
# Verifies the global L3 MTU of all L3 interfaces.
mtu: 1500
ignored_interfaces:
- Vxlan1
- Management # Ignore all Management interfaces
- Ethernet2.100
- Ethernet1/1
specific_mtu:
- Ethernet1: 2500
- Ethernet10: 9200
- VerifyLACPInterfacesStatus:
# Verifies the Link Aggregation Control Protocol (LACP) status of the interface.
interfaces:
@ -284,6 +327,10 @@ anta.tests.interfaces:
number: 3
- VerifyPortChannels:
# Verifies there are no inactive ports in all port channels.
ignored_interfaces:
- Port-Channel1
- Port-Channel2
- VerifySVI:
# Verifies the status of all SVIs.
- VerifyStormControlDrops:
@ -297,10 +344,10 @@ anta.tests.logging:
- VerifyLoggingEntries:
# Verifies that the expected log string is present in the last specified log messages.
logging_entries:
- regex_match: ".ACCOUNTING-5-EXEC: cvpadmin ssh."
- regex_match: ".*ACCOUNTING-5-EXEC: cvpadmin ssh.*"
last_number_messages: 30
severity_level: alerts
- regex_match: ".SPANTREE-6-INTERFACE_ADD:."
- regex_match: ".*SPANTREE-6-INTERFACE_ADD:.*"
last_number_messages: 10
severity_level: critical
- VerifyLoggingErrors:
@ -388,14 +435,22 @@ anta.tests.ptp:
# Verifies the PTP interfaces state.
anta.tests.routing.bgp:
- VerifyBGPAdvCommunities:
# Verifies that advertised communities are standard, extended and large for BGP IPv4 peer(s).
# Verifies the advertised communities of BGP peers.
bgp_peers:
- peer_address: 172.30.11.17
vrf: default
- peer_address: 172.30.11.21
vrf: MGMT
advertised_communities: ["standard", "extended"]
- peer_address: fd00:dc:1::1
vrf: default
# RFC5549
- interface: Ethernet1
vrf: default
advertised_communities: ["standard", "extended"]
- VerifyBGPExchangedRoutes:
# Verifies the advertised and received routes of BGP IPv4 peer(s).
check_active: True
bgp_peers:
- peer_address: 172.30.255.5
vrf: default
@ -409,17 +464,35 @@ anta.tests.routing.bgp:
- 192.0.255.1/32
- 192.0.254.5/32
- VerifyBGPNlriAcceptance:
# Verifies that all received NLRI are accepted for all AFI/SAFI configured for BGP IPv4 peer(s).
# Verifies that all received NLRI are accepted for all AFI/SAFI configured for BGP peers.
bgp_peers:
- peer_address: 10.100.0.128
vrf: default
capabilities:
- ipv4Unicast
- peer_address: 2001:db8:1::2
vrf: default
capabilities:
- ipv6Unicast
- peer_address: fe80::2%Et1
vrf: default
capabilities:
- ipv6Unicast
# RFC 5549
- peer_address: fe80::2%Et1
vrf: default
capabilities:
- ipv6Unicast
- VerifyBGPPeerASNCap:
# Verifies the four octet ASN capability of BGP IPv4 peer(s).
# Verifies the four octet ASN capability of BGP peers.
bgp_peers:
- peer_address: 172.30.11.1
vrf: default
- peer_address: fd00:dc:1::1
vrf: default
# RFC5549
- interface: Ethernet1
vrf: MGMT
- VerifyBGPPeerCount:
# Verifies the count of BGP peers for given address families.
address_families:
@ -438,28 +511,51 @@ anta.tests.routing.bgp:
vrf: "DEV"
num_peers: 3
- VerifyBGPPeerDropStats:
# Verifies BGP NLRI drop statistics for the provided BGP IPv4 peer(s).
# Verifies BGP NLRI drop statistics of BGP peers.
bgp_peers:
- peer_address: 172.30.11.1
vrf: default
drop_stats:
- inDropAsloop
- prefixEvpnDroppedUnsupportedRouteType
- peer_address: fd00:dc:1::1
vrf: default
drop_stats:
- inDropAsloop
- prefixEvpnDroppedUnsupportedRouteType
# RFC5549
- interface: Ethernet1
vrf: MGMT
drop_stats:
- inDropAsloop
- prefixEvpnDroppedUnsupportedRouteType
- VerifyBGPPeerGroup:
# Verifies BGP peer group of BGP IPv4 peer(s).
# Verifies BGP peer group of BGP peers.
bgp_peers:
- peer_address: 172.30.11.1
vrf: default
peer_group: IPv4-UNDERLAY-PEERS
- peer_address: fd00:dc:1::1
vrf: default
peer_group: IPv4-UNDERLAY-PEERS
# RFC5549
- interface: Ethernet1
vrf: MGMT
peer_group: IPv4-UNDERLAY-PEERS
- VerifyBGPPeerMD5Auth:
# Verifies the MD5 authentication and state of IPv4 BGP peer(s) in a specified VRF.
# Verifies the MD5 authentication and state of BGP peers.
bgp_peers:
- peer_address: 172.30.11.1
vrf: default
- peer_address: 172.30.11.5
vrf: default
- peer_address: fd00:dc:1::1
vrf: default
# RFC5549
- interface: Ethernet1
vrf: default
- VerifyBGPPeerMPCaps:
# Verifies the multiprotocol capabilities of BGP IPv4 peer(s).
# Verifies the multiprotocol capabilities of BGP peers.
bgp_peers:
- peer_address: 172.30.11.1
vrf: default
@ -467,20 +563,47 @@ anta.tests.routing.bgp:
capabilities:
- ipv4 labeled-Unicast
- ipv4MplsVpn
- peer_address: fd00:dc:1::1
vrf: default
strict: False
capabilities:
- ipv4 labeled-Unicast
- ipv4MplsVpn
# RFC5549
- interface: Ethernet1
vrf: default
strict: False
capabilities:
- ipv4 labeled-Unicast
- ipv4MplsVpn
- VerifyBGPPeerRouteLimit:
# Verifies maximum routes and warning limit for BGP IPv4 peer(s).
# Verifies maximum routes and warning limit for BGP peers.
bgp_peers:
- peer_address: 172.30.11.1
vrf: default
maximum_routes: 12000
warning_limit: 10000
- peer_address: fd00:dc:1::1
vrf: default
maximum_routes: 12000
warning_limit: 10000
# RFC5549
- interface: Ethernet1
vrf: MGMT
maximum_routes: 12000
warning_limit: 10000
- VerifyBGPPeerRouteRefreshCap:
# Verifies the route refresh capabilities of IPv4 BGP peer(s) in a specified VRF.
# Verifies the route refresh capabilities of BGP peers.
bgp_peers:
- peer_address: 172.30.11.1
vrf: default
- peer_address: fd00:dc:1::1
vrf: default
# RFC5549
- interface: Ethernet1
vrf: MGMT
- VerifyBGPPeerSession:
# Verifies the session state of BGP IPv4 peer(s).
# Verifies the session state of BGP peers.
minimum_established_time: 10000
check_tcp_queues: false
bgp_peers:
@ -492,21 +615,29 @@ anta.tests.routing.bgp:
vrf: DEV
- peer_address: 10.1.255.4
vrf: DEV
- peer_address: fd00:dc:1::1
vrf: default
# RFC5549
- interface: Ethernet1
vrf: default
- interface: Vlan3499
vrf: PROD
- VerifyBGPPeerSessionRibd:
# Verifies the session state of BGP IPv4 peer(s).
# Verifies the session state of BGP peers.
minimum_established_time: 10000
check_tcp_queues: false
bgp_peers:
- peer_address: 10.1.0.1
vrf: default
- peer_address: 10.1.0.2
vrf: default
- peer_address: 10.1.255.2
vrf: DEV
- peer_address: 10.1.255.4
vrf: DEV
- peer_address: fd00:dc:1::1
vrf: default
# RFC5549
- interface: Ethernet1
vrf: MGMT
- VerifyBGPPeerTtlMultiHops:
# Verifies BGP TTL and max-ttl-hops count for BGP IPv4 peer(s).
# Verifies BGP TTL and max-ttl-hops count for BGP peers.
bgp_peers:
- peer_address: 172.30.11.1
vrf: default
@ -516,13 +647,31 @@ anta.tests.routing.bgp:
vrf: test
ttl: 30
max_ttl_hops: 30
- peer_address: fd00:dc:1::1
vrf: default
ttl: 30
max_ttl_hops: 30
# RFC5549
- interface: Ethernet1
vrf: MGMT
ttl: 30
max_ttl_hops: 30
- VerifyBGPPeerUpdateErrors:
# Verifies BGP update error counters for the provided BGP IPv4 peer(s).
# Verifies BGP update error counters of BGP peers.
bgp_peers:
- peer_address: 172.30.11.1
vrf: default
update_errors:
- inUpdErrWithdraw
- peer_address: fd00:dc:1::1
vrf: default
update_errors:
- inUpdErrWithdraw
# RFC5549
- interface: Ethernet1
vrf: MGMT
update_errors:
- inUpdErrWithdraw
- VerifyBGPPeersHealth:
# Verifies the health of BGP peers for given address families.
minimum_established_time: 10000
@ -536,7 +685,7 @@ anta.tests.routing.bgp:
vrf: "DEV"
check_tcp_queues: false
- VerifyBGPPeersHealthRibd:
# Verifies the health of all the BGP IPv4 peer(s).
# Verifies the health of all the BGP peers.
check_tcp_queues: True
- VerifyBGPRedistribution:
# Verifies BGP redistribution.
@ -590,7 +739,7 @@ anta.tests.routing.bgp:
- 10.1.255.2
- 10.1.255.4
- VerifyBGPTimers:
# Verifies the timers of BGP IPv4 peer(s).
# Verifies the timers of BGP peers.
bgp_peers:
- peer_address: 172.30.11.1
vrf: default
@ -600,13 +749,31 @@ anta.tests.routing.bgp:
vrf: default
hold_time: 180
keep_alive_time: 60
- peer_address: fd00:dc:1::1
vrf: default
hold_time: 180
keep_alive_time: 60
# RFC5549
- interface: Ethernet1
vrf: MGMT
hold_time: 180
keep_alive_time: 60
- VerifyBgpRouteMaps:
# Verifies BGP inbound and outbound route-maps of BGP IPv4 peer(s).
# Verifies BGP inbound and outbound route-maps of BGP peers.
bgp_peers:
- peer_address: 172.30.11.1
vrf: default
inbound_route_map: RM-MLAG-PEER-IN
outbound_route_map: RM-MLAG-PEER-OUT
- peer_address: fd00:dc:1::1
vrf: default
inbound_route_map: RM-MLAG-PEER-IN
outbound_route_map: RM-MLAG-PEER-OUT
# RFC5549
- interface: Ethernet1
vrf: MGMT
inbound_route_map: RM-MLAG-PEER-IN
outbound_route_map: RM-MLAG-PEER-OUT
- VerifyEVPNType2Route:
# Verifies the EVPN Type-2 routes for a given IPv4 or MAC address and VNI.
vxlan_endpoints:
@ -639,6 +806,10 @@ anta.tests.routing.generic:
- VerifyRoutingProtocolModel:
# Verifies the configured routing protocol model.
model: multi-agent
- VerifyRoutingStatus:
# Verifies the routing status for IPv4/IPv6 unicast, multicast, and IPv6 interfaces (RFC5549).
ipv4_unicast: True
ipv6_unicast: True
- VerifyRoutingTableEntry:
# Verifies that the provided routes are present in the routing table of a specified VRF.
vrf: default
@ -650,6 +821,21 @@ anta.tests.routing.generic:
minimum: 2
maximum: 20
anta.tests.routing.isis:
- VerifyISISGracefulRestart:
# Verifies the IS-IS graceful restart feature.
instances:
- name: '1'
vrf: default
graceful_restart: True
graceful_restart_helper: False
- name: '2'
vrf: default
- name: '11'
vrf: test
graceful_restart: True
- name: '12'
vrf: test
graceful_restart_helper: False
- VerifyISISInterfaceMode:
# Verifies IS-IS interfaces are running in the correct mode.
interfaces:
@ -997,6 +1183,10 @@ anta.tests.system:
preferred_stratum_range: [1,3]
- VerifyReloadCause:
# Verifies the last reload cause of the device.
allowed_causes:
- USER
- FPGA
- ZTP
- VerifyUptime:
# Verifies the device uptime.
minimum: 86400
@ -1012,9 +1202,16 @@ anta.tests.vlan:
policy: ascending
start_vlan_id: 1006
end_vlan_id: 4094
- VerifyVlanStatus:
# Verifies the administrative status of specified VLANs.
vlans:
- vlan_id: 10
status: suspended
- vlan_id: 4094
status: active
anta.tests.vxlan:
- VerifyVxlan1ConnSettings:
# Verifies the interface vxlan1 source interface and UDP port.
# Verifies Vxlan1 source interface and UDP port.
source_interface: Loopback1
udp_port: 4789
- VerifyVxlan1Interface:
@ -1022,12 +1219,13 @@ anta.tests.vxlan:
- VerifyVxlanConfigSanity:
# Verifies there are no VXLAN config-sanity inconsistencies.
- VerifyVxlanVniBinding:
# Verifies the VNI-VLAN bindings of the Vxlan1 interface.
# Verifies the VNI-VLAN, VNI-VRF bindings of the Vxlan1 interface.
bindings:
10010: 10
10020: 20
500: PROD
- VerifyVxlanVtep:
# Verifies the VTEP peers of the Vxlan1 interface.
# Verifies Vxlan1 VTEP peers.
vteps:
- 10.1.1.5
- 10.1.1.6