220 lines
37 KiB
Plaintext
220 lines
37 KiB
Plaintext
|
§
|
|||
|
|
í/_j{ ã ó~ — d Z ddlmZ ddlZddlZddlZddlZddlmZmZ ddl m
|
|||
|
|
Z
|
|||
|
|
m Z ddl m
|
|||
|
|
Z
|
|||
|
|
ddl mZ dd lmZ dd
|
|||
|
|
lmZ dd lmZ ej d ¦ « ZdPd„ZdQd„ZdRd„ZdSd„ZdZdTd „Z dUd!„Z dVd$„Z dWd+„Z dXd.„Z dYd0„Z!dZd6„Z"d[d7„Z#dSd8„Z$dSd9„Z%dSd:„Z&dSd;„Z'dSd<„Z(dSd=„Z)d\d>„Z*d]dC„Z+d^dF„Z,d_dH„Z-d`dK„Z.dadM„Z/dbdO„Z0dS )ca� STAGE 1: collecting Neutron VPNaaS configuration into an audit JSON file,
|
|||
|
|
plus the --from-audit path that reconstructs the same in-memory state from a
|
|||
|
|
previously written audit file instead of re-querying OpenStack.
|
|||
|
|
|
|||
|
|
This module owns the audit JSON schema definition (to_audit_dict /
|
|||
|
|
load_from_audit_json), so it's defined exactly once and shared by both the
|
|||
|
|
write path (STEP 10) and the read path (--from-audit).
|
|||
|
|
é )Ú annotationsN)ÚdatetimeÚtimezoneé )Ú
|
|||
|
|
keystone_authÚneutron_client)ÚMigrationState)Ú
|
|||
|
|
NeutronClient)Ú
|
|||
|
|
redact_psk)Ú SprutClient)Úprint_kv_tablez^[0-9a-fA-F-]{36}$ÚreturnÚstrc ó. — t j | d¬¦ « S )Né ©Úindent)ÚjsonÚdumps)Úobjs ú,/root/vkcloud/vpnaas/ipsec_migrator/audit.pyÚ_dumpr s € Ý Œ:�c !Ð $Ñ $Ô $Ð$ó ÚNonec ó$ — t d¦ « d S )NzV**************************************************************************************)Úprint© r r Ú_ruler s € Ý ˆ(�O„O€O€O€Or Ú input_csvú&tuple[dict[str, str], dict[str, dict]]c óò — t d| › �¦ « i }i } t | d¬¦ « }nL# t $ r?}t d| › d|› �t j ¬¦ « t j d¦ « Y d }~nd }~ww xY w|5 |D ]ì}| d¦ « d ¦ « }d
|
|||
|
|
„ | d ¦ « D ¦ « }|r|d nd
|
|||
|
|
}t |¦ « dk r|d nd
|
|||
|
|
} t |¦ « dk r|d nd
|
|||
|
|
}
|
|||
|
|
t |¦ « dk r|d nd
|
|||
|
|
} |sŒ¯| ||< | s6i } |
|
|||
|
|
r|
|
|||
|
|
| d< | r| | d< | r| ||< t d|› d�t j ¬¦ « Œí d d d ¦ « n # 1 swxY w Y t d¦ « t ¦ « t d„ |
|
|||
|
|
¦ « D ¦ « dd¦ « t ¦ « t d¦ « t ¦ « ||fS )Nz&Executing STEP 1: Reading config file úutf-8©Úencodingz"Error: could not open input file 'z': ©Úfiler ú
|
|||
|
|
ú
|
|||
|
|
c ó6 — g | ]}| ¦ « ‘ŒS r )Ústrip)Ú.0Úfs r ú
|
|||
|
|
<listcomp>z"read_input_csv.<locals>.<listcomp>8 s € Ð9Ð9Ð9 A�a—g’g‘i”iÐ9Ð9Ð9r ú,r Ú r é Úavailability_zoneÚflavorúNeutron router 'uI ' has no advanced router — a DC Router will be created for it in Sprut.zReading values from config:c ó — i | ]
|
|||
|
|
\ }}||pd “Œ S )z<to be created>r )r+ ÚkÚvs r ú
|
|||
|
|
<dictcomp>z"read_input_csv.<locals>.<dictcomp>R s$ € ÐAÐAÐA©¨¨AˆˆQÐ
|
|||
|
|
#Ð#ÐAÐAÐAr zNeutron routerzAdvanced Routerz STEP 1 complete (config read)) r ÚopenÚOSErrorÚsysÚstderrÚexitÚrstripÚsplitÚlenr
|
|||
|
|
Úitemsr )
|
|||
|
|
r ÚmappingÚcreation_hintsÚhandleÚexcÚraw_lineÚlineÚfieldsÚneutron_routerÚadvanced_routerr1 r2 Úhints
|
|||
|
|
r Úread_input_csvrK * s² € Ý Ð
|
|||
|
|
>°9Ð
|
|||
|
|
>Ð
|
|||
|
|
>Ñ?Ô?Ð?à €GØ&(€NðÝ�i¨'Ð2Ñ2Ô2ˆˆøÝ ð ð ð Ý
|
|||
|
|
ÐF°9ÐFÐFÀÐFÐFÍSÌZÐXÑXÔXÐXÝ Œ�‰ Œ ˆ ˆ ˆ ˆ ˆ ˆ øøøøðøøøð
|
|||
|
|
ð ð Ø ð ð ˆHØ—?’? 4Ñ(Ô(×/Ò/°Ñ5Ô5ˆDØ9Ð9¨¯ª°C© ¬ Ð9Ñ9Ô9ˆFØ*0Ð 8˜V AœY˜Y°bˆNÝ+.¨v©;¬;¸ª?¨?˜f Qœi˜iÀˆOÝ-0°©[¬[¸1ª_¨_ q¤ À"Ð Ý"% f¡+¤+°¢/ /�V˜A”Y�Y°rˆFà!ð
|
|||
|
|
ØØ&5ˆG�NÑ #Ø"ð
|
|||
|
|
Ø�Ø$ð BØ0A�DÐ,Ñ-Øð ,Ø%+�D˜‘NØð :Ø59�N >Ñ2ÝðC ~ð Cð Cð Cå œðñ ô ð øð' ðð ð ñ ô ð ð ð ð ð ð øøøð ð ð ð õ4
|
|||
|
|
Ð
|
|||
|
|
'Ñ(Ô(Ð(Ý �G„G€GÝØAÐA°· ² ± ´ ÐAÑAÔAÐCSÐUfñô ð õ
|
|||
|
|
�G„G€Gå Ð
|
|||
|
|
)Ñ*Ô*Ð*Ý �G„G€GØ �NÐ "Ð"s' ˜* ª
|
|||
|
|
A3´5A.Á.A3Á8C0E5Å5E9Å<E9Ústater Úncr
|
|||
|
|
c ó` — t d¦ « t j |¦ « }d„ |D ¦ « | _ t | j ¦ « }| j D ]@}||vr't d|› d�¦ « t
|
|||
|
|
j d¦ « t d|› d�¦ « ŒAt d¦ « t ¦ « d S ) Nz*Executing STEP 2: Checking Neutron routersc ó — i | ] }|d |“Œ S ©Úidr ©r+ Úentrys r r7 z/check_neutron_routers_exist.<locals>.<dictcomp>b s € Ð!JÐ!JÐ!J¸ %¨¤+¨uÐ!JÐ!JÐ!Jr zError: Neutron router ID z not found in OpenStack tenant.r zNeutron router ID z exists in OpenStack tenant.z)STEP 2 complete (Neutron routers checked)) r r Ú router_listÚneutron_router_by_idÚsetÚneutron_to_adv_routerr: r< r )rL rM ÚlistingÚ existing_idsÚneutron_router_ids r Úcheck_neutron_routers_existr[ ^ sË € Ý Ð
|
|||
|
|
6Ñ7Ô7Ð7å Ô(¨Ñ,Ô,€GØ!JÐ!JÀ'Ð!JÑ!JÔ!J€EÔ Ý�uÔ1Ñ2Ô2€Là "Ô 8ð Tð TÐØ LÐ 0Ð 0õ
|
|||
|
|
Ð`Ð.?Ð`Ð`Ð`Ñ aÔ aÐ aÝ ŒH�Q‰KŒKˆKÝ
|
|||
|
|
ÐRÐ#4ÐRÐRÐRÑSÔSÐSÐSå Ð
|
|||
|
|
5Ñ6Ô6Ð6Ý �G„G€G€G€Gr )ÚbasicÚstandardÚadvancedrZ Ú
|
|||
|
|
field_namec ó² — t j ¦ « s8t d| › d|› d�t j ¬¦ « t j d¦ « d S d S )NúError: router 'z!' needs a DC Router created but 'z…' isn't set in the CSV and stdin is not interactive. Add it as a CSV column (3rd=availability_zone, 4th=flavor) or run interactively.r% r )r: ÚstdinÚisattyr r; r< )rZ r_ s r Ú_require_interactiverd t s} € Ý Œ9× Ò Ñ Ô ð Ý
|
|||
|
|
ð
|
|||
|
|
HÐ /ð
|
|||
|
|
Hð
|
|||
|
|
HÐR\ð
|
|||
|
|
Hð
|
|||
|
|
Hð
|
|||
|
|
Hõ ”ð
|
|||
|
|
ñ
|
|||
|
|
ô
|
|||
|
|
ð
|
|||
|
|
õ Œ�‰ Œ ˆ ˆ ˆ ðð r Úhintsúdict[str, dict]útuple[str, str]c óÞ — | | i ¦ « }| d¦ « pd}|s9t | d¦ « |s't d| › d�¦ « ¦ « }|¯'| d¦ « pd}|t vrbt | d¦ « |t vrIt d| › dd t ¦ « › d�¦ « ¦ « }|t v°I||fS ) Nr1 r/ zRouter 'z ': enter availability_zone: r2 z': enter flavor (ú/z): )Úgetrd Úinputr* Ú _DC_FLAVORSÚjoin)rZ re rJ r1 r2 s r Ú_resolve_az_flavorrn s € Ø �9Š9Ð&¨Ñ +Ô +€Dà ŸšÐ!4Ñ5Ô5Ð;¸ÐØ ð jÝ Ð .Ð0CÑDÔDÐDØ#ð jÝ %Ð&`Ð1BÐ&`Ð&`Ð&`Ñ aÔ a× gÒ gÑ iÔ iÐ ð $ð jð �XŠX�hÑ
|
|||
|
|
Ô
|
|||
|
|
Ð
|
|||
|
|
% 2€FØ
|
|||
|
|
•[Ð Ð Ý Ð .°Ñ9Ô9Ð9Ø�KÐ'Ð'ÝÐdÐ&7ÐdÐdÈ#Ï(Ê(ÕS^ÑJ_ÔJ_ÐdÐdÐdÑeÔe×kÒkÑmÔmˆFð �KÐ'Ð'ð ˜fÐ $Ð$r Ú sprut_clientr c ó — | d¦ « dg ¦ « }d„ |D ¦ « }|s/t dt j ¬¦ « t j d¦ « t |¦ « dk rHt dt |¦ « › d|d d
|
|||
|
|
¦ « › d �t j ¬¦ « |d d
|
|||
|
|
S ) aã Locates Sprut's public network (name "internet"/"Internet"), for
|
|||
|
|
attaching a DC Router's public interface. Looked up once per run,
|
|||
|
|
lazily, only when at least one router actually needs creation.
|
|||
|
|
|
|||
|
|
Deliberately does not resolve or send a subnet_id: Sprut rejects
|
|||
|
|
dc_interface creation with subnet_id set for an external network
|
|||
|
|
("Specifying subnet_id or ip_address for external network is
|
|||
|
|
restricted", confirmed against the real API) -- it auto-assigns one.
|
|||
|
|
z/networks?limit=10000Únetworksc ól — g | ]1}| d ¦ « pd ¦ « dk ¯/|‘Œ2S )Únamer/ Úinternet)rj Úlower)r+ Úns r r- z*_find_internet_network.<locals>.<listcomp>œ s= € ÐRÐRÐR�Q q§u¢u¨V¡}¤}Ð':¸×&AÒ&AÑ&CÔ&CÀzÒ&QÐ&QˆqÐ&QÐ&QÐ&Qr zQError: no Sprut network named 'Internet' found (needed for the public interface).r% r z Warning: z? Sprut networks named 'Internet' found -- using the first one (r rQ z).)rj r r: r; r< r? )ro rq Úmatchess r Ú_find_internet_networkrx ‘ sß € ð × Ò Ð 7Ñ8Ô8×<Ò<¸ZÈÑLÔL€HØRÐR˜(ÐRÑRÔR€GØ ð Ý
|
|||
|
|
ÐaÕhkÔhrÐsÑsÔsÐsÝ Œ�‰ Œ ˆ Ý
|
|||
|
|
ˆ7�|„|�aÒÐÝ
|
|||
|
|
ð
|
|||
|
|
=�˜G™ œ ð
|
|||
|
|
=ð
|
|||
|
|
=Ø$+¨A¤J§N¢N°4Ñ$8Ô$8ð
|
|||
|
|
=ð
|
|||
|
|
=ð
|
|||
|
|
=å”ð
|
|||
|
|
ñ
|
|||
|
|
ô
|
|||
|
|
ð
|
|||
|
|
ð
|
|||
|
|
�1Œ:�dÔ Ðr rs Ú descriptionr1 r2 Úexisting_dc_routers_by_nameúdict[str, str]c óF — | |¦ « }|rt d|› d|› d�¦ « |S t d|› d|› d|› d�¦ « d||d ||d
|
|||
|
|
œi}| d |¦ « } | d¦ « pi d ¦ « }|j r|sd
|
|||
|
|
| › �}|S )Nz DC Router 'z ' already exists in Sprut (id ú ) -- reusingzCreating DC Router 'z' in Sprut (az=z , flavor=z, enable_snat=true)Ú dc_routerT)r1 r2 Ú enable_snatrs ry ú/direct_connect/dc_routersrQ zDRY-RUN-)rj r ÚpostÚdry_run)
|
|||
|
|
rZ rs ry r1 r2 ro rz Úsprut_idÚ request_bodyÚresponses
|
|||
|
|
r Ú_find_or_create_dc_routerr† © sö € ð +×.Ò.¨tÑ4Ô4€HØð Ý
|
|||
|
|
ÐV˜DÐVÐVÀÐVÐVÐVÑWÔWÐW؈å Ð
|
|||
|
|
m Ð
|
|||
|
|
mÐ
|
|||
|
|
mÐ6GÐ
|
|||
|
|
mÐ
|
|||
|
|
mÐRXÐ
|
|||
|
|
mÐ
|
|||
|
|
mÐ
|
|||
|
|
mÑnÔnÐnàØ!2Ø Ø ØØ&ð
|
|||
|
|
ð
|
|||
|
|
ð€Lð × Ò Ð!=¸|ÑLÔL€HØ— ’ ˜[Ñ)Ô)Ð/¨R×4Ò4°TÑ:Ô:€HØÔð 2 Hð 2Ø1Ð /Ð1Ð1ˆØ €Or Ú dc_router_idÚ
|
|||
|
|
network_idc óÌ ‡ ‡— | d¦ « dg ¦ « }t ˆ ˆfd„|D ¦ « d ¦ « }|r1t d‰ › d| d¦ « › d�¦ « |d S t d‰ › �¦ « d ‰ ‰|d
|
|||
|
|
œi}| d|¦ « }| d ¦ « pi d¦ « }|j r|sd ‰ › �}|S ) Nz /direct_connect/dc_interfacesÚ
|
|||
|
|
dc_interfacesc 3 ó€ •K — | ]8}| d ¦ « ‰k ¯| d¦ « ‰k ¯4|V — Œ9dS )r‡ rˆ N©rj )r+ Úir‡ rˆ s €€r ú <genexpr>z/_find_or_create_dc_interface.<locals>.<genexpr>Í sQ øè è € ÐlÐlˆq §¢ nÑ 5Ô 5¸ Ò EÐ EÈ!Ï%Ê%ÐP\ÑJ]ÔJ]ÐakÒJkÐJkˆÐJkÐJkÐJkÐJkÐlÐlr z/Public interface already attached to DC Router z (id rQ r} z=Attaching public interface (network 'Internet') to DC Router Ú dc_interface)r‡ rˆ rs zDRY-RUN-iface-)rj Únextr r� r‚ ) r‡ rˆ rs ro ÚexistingÚmatchr„ r… rƒ s `` r Ú _find_or_create_dc_interfacer“ È s3 øø€ ð × Ò Ð ?Ñ@Ô@×DÒDÀ_ÐVXÑYÔY€HÝ ØlÐlÐlÐlÐl�HÐlÑlÔlØ ñ
|
|||
|
|
ô
|
|||
|
|
€Eð
|
|||
|
|
ð Ý
|
|||
|
|
ÐpÀ ÐpÐpÐSX×S\ÒS\Ð]aÑSbÔSbÐpÐpÐpÑqÔqÐqØ�TŒ{Ðå Ð
|
|||
|
|
XÈ,Ð
|
|||
|
|
XÐ
|
|||
|
|
XÑYÔYÐYð Ø (Ø$Øð
|
|||
|
|
ð
|
|||
|
|
ð€Lð × Ò Ð!@À,ÑOÔO€HØ— ’ ˜^Ñ,Ô,Ð2°×7Ò7¸Ñ=Ô=€HØÔð 3 Hð 3Ø2 LÐ2Ð2ˆØ €Or Úinternet_network_idc ód — t | ||||||¦ « }t |||› d�|¦ « |||< |S )zÉCreates (or reuses, by name) a DC Router and attaches its public
|
|||
|
|
interface. Shared by the fresh-collect path (STEP 3) and the
|
|||
|
|
--from-audit path, which both need identical create-or-reuse logic.z-public)r† r“ ) rZ rs ry r1 r2 ro rz r” rƒ s r Ú_ensure_dc_routerr– å sU € õ )ؘ4 Ð.?ÀÈ ÐWrñô €Hõ ! Ð+>À4Ð@PÐ@PÐ@PÐR^Ñ_Ô_Ð_Ø(0Ð Ñ%Ø €Or ÚtokenÚsprut_base_urlr‚ ÚboolÚ
|
|||
|
|
audit_onlyc ó0 — t d¦ « t |||¦ « }| d¦ « dg ¦ « }d„ |D ¦ « }d„ |D ¦ « }d } | j ¦ « D ]û\ }
|
|||
|
|
} | r?| |vr't d| › d�¦ « t j d¦ « t d | › d
|
|||
|
|
�¦ « ŒF| j |
|
|||
|
|
i ¦ « } | d ¦ « p|
|
|||
|
|
}
|
|||
|
|
| d ¦ « pd
|
|||
|
|
}t |
|
|||
|
|
| j ¦ « \ }}|r#|
|
|||
|
|
|||dœ| j
|
|||
|
|
|
|
|||
|
|
< t d|
|
|||
|
|
› d�¦ « ŒÌ| €t |¦ « } t |
|
|||
|
|
|
|
|||
|
|
|||||| ¦ « | j |
|
|||
|
|
< Œüt d¦ « t ¦ « |S )Nz+Executing STEP 3: Checking Advanced routersr€ Ú
|
|||
|
|
dc_routersc ó — h | ]
|
|||
|
|
}|d ’Œ S rP r rR s r ú <setcomp>z/check_advanced_routers_exist.<locals>.<setcomp>
|
|||
|
|
ó € Ð8Ð8Ð8 E�E˜$”KÐ8Ð8Ð8r c óV — i | ]&}| d ¦ « ¯|d |d “Œ'S ©rs rQ rŒ rR s r r7 z0check_advanced_routers_exist.<locals>.<dictcomp> ó4 € Ð`Ð`Ð`°uÈeÏiÊiÐX^ÑN_ÔN_Ð`˜˜fœ
|
|||
|
|
u¨T¤{Ð`Ð`Ð`r úError: Advanced router ID z not found in SDN.r úAdvanced router ID ú exists in SDN.rs ry r/ )rs ry r1 r2 r3 zo': no advanced router -- recorded as pending DC Router creation in the audit (no Sprut writes in --audit-only).z*STEP 3 complete (Advanced routers checked))r r rj rW r@ r: r< rU rn Úrouter_creation_hintsÚ pending_dc_router_by_neutron_idrx r– r )rL r— r˜ r‚ rš ro rœ rY Úexisting_by_namer” rZ Úadvanced_router_idrH rs ry r1 r2 s r Ú check_advanced_routers_existrª s € õ
|
|||
|
|
Ð
|
|||
|
|
7Ñ8Ô8Ð8å ˜~¨u°gÑ>Ô>€Là ×!Ò!Ð">Ñ?Ô?×CÒCÀLÐRTÑUÔU€JØ8Ð8¨ZÐ8Ñ8Ô8€LØ`Ð`À
|
|||
|
|
Ð`Ñ`Ô`Ðà&*Ðà16Ô1L×1RÒ1RÑ1TÔ1Tð &
|
|||
|
|
ð &
|
|||
|
|
Ñ-ÐÐ-Ø ð Ø!¨ Ð5Ð5ÝÐYÐ3EÐYÐYÐYÑZÔZÐZÝ”˜‘ ” � Ý ÐKÐ(:ÐKÐKÐKÑ LÔ LÐ LØ à Ô3×7Ò7Ð8IÈ2ÑNÔNˆØ ×!Ò! &Ñ)Ô)Ð>Ð->ˆØ$×(Ò(¨ Ñ7Ô7Ð=¸2ˆ Ý$6Ð7HÈ%ÔJeÑ$fÔ$fÑ!И6à ð à Ø *Ø%6Ø ð Hð HˆEÔ 1Ð2CÑ Dõ
|
|||
|
|
ðUÐ#4ð Uð Uð Uñ
|
|||
|
|
ô
|
|||
|
|
ð
|
|||
|
|
ð
|
|||
|
|
à Ð &Ý"8¸ Ñ"FÔ"FÐ å9JØ Ø Ø Ø Ø Ø Ø Ø ñ :
|
|||
|
|
ô :
|
|||
|
|
ˆÔ#Ð$5Ñ6Ð6õ
|
|||
|
|
Ð
|
|||
|
|
6Ñ7Ô7Ð7Ý �G„G€GØ Ðr c óÊ — t d¦ « | d¦ « dg ¦ « }d„ |D ¦ « }d„ |D ¦ « }d}| j ¦ « D ]ö\ }}|rK||vr3t d|› d�t j ¬ ¦ « t j d
|
|||
|
|
¦ « t d |› d �¦ « ŒR| j |¦ « }|s3t d
|
|||
|
|
|› d�t j ¬ ¦ « t j d
|
|||
|
|
¦ « |€t |¦ « }t ||d | dd¦ « |d |d |||¦ « | j |< Œ÷dS )aS Re-verifies advanced routers recorded in a --from-audit file still
|
|||
|
|
exist in Sprut, since the audit may have been generated earlier. Also
|
|||
|
|
creates any DC Router left pending by a prior --audit-only run, using
|
|||
|
|
the name/description/az/flavor cached in that audit's
|
|||
|
|
"pending_dc_router" block -- Neutron is never re-queried here.zBIssuing OpenStack token and re-checking advanced routers in SDN...r€ rœ c ó — h | ]
|
|||
|
|
}|d ’Œ S rP r rR s r rž z6recheck_advanced_routers_from_audit.<locals>.<setcomp>E rŸ r c óV — i | ]&}| d ¦ « ¯|d |d “Œ'S r¡ rŒ rR s r r7 z7recheck_advanced_routers_from_audit.<locals>.<dictcomp>F r¢ r Nr£ z$ (from audit file) not found in SDN.r% r r¤ r¥ ra zq' has no advanced_router_id and no pending_dc_router info in the audit file -- file is incompatible or corrupted.rs ry r/ r1 r2 )
|
|||
|
|
r rj rW r@ r: r; r< r§ rx r– ) rL ro rœ rY r¨ r” rZ r© Úpendings r Ú#recheck_advanced_routers_from_auditr¯ < sÈ € õ
|
|||
|
|
Ð
|
|||
|
|
NÑOÔOÐOà ×!Ò!Ð">Ñ?Ô?×CÒCÀLÐRTÑUÔU€JØ8Ð8¨ZÐ8Ñ8Ô8€LØ`Ð`À
|
|||
|
|
Ð`Ñ`Ô`Ðà&*Ðà16Ô1L×1RÒ1RÑ1TÔ1Tð
|
|||
|
|
ð
|
|||
|
|
Ñ-ÐÐ-Ø ð Ø!¨ Ð5Ð5ÝØiÐ1CÐiÐiÐiÝ œðñ ô ð õ ”˜‘ ” � Ý ÐKÐ(:ÐKÐKÐKÑ LÔ LÐ LØ àÔ7×;Ò;Ð<MÑNÔNˆØð Ý ðaÐ"3ð að að aå”Zð
|
|||
|
|
ñ
|
|||
|
|
ô
|
|||
|
|
ð
|
|||
|
|
õ
|
|||
|
|
|
|||
|
|
ŒH�Q‰KŒKˆKà Ð &Ý"8¸ Ñ"FÔ"FÐ å9JØ Ø �FŒOØ �KŠK˜
|
|||
|
|
rÑ *Ô *Ø Ð'Ô (Ø �HÔ Ø Ø Ø ñ :
|
|||
|
|
ô :
|
|||
|
|
ˆÔ#Ð$5Ñ6Ð6ð/
|
|||
|
|
ð
|
|||
|
|
r c ó† — t d¦ « t j |¦ « D ]}|| j |d < Œt d¦ « | j ¦ « D ]D\ }}t d|› �¦ « t dt |¦ « › �¦ « t ¦ « ŒEt d¦ « t
|
|||
|
|
¦ « d S )Nz6Executing STEP 4: Collecting info about IPsec policiesrQ zStored IPsec policies:ú Policy ID: ú Details: z1STEP 4 complete: Info about IPsec policies stored)r r Úipsec_policy_listÚneutron_ipsec_policy_by_idr@ r r ©rL rM ÚdetailsÚ policy_ids r Úcollect_ipsec_policiesr¸ r sÎ € Ý Ð
|
|||
|
|
BÑCÔCÐCå!Ô3°BÑ7Ô7ð Bð BˆØ:AˆÔ(¨°¬ Ñ7Ð7å Ð
|
|||
|
|
"Ñ#Ô#Ð#Ø #Ô >× DÒ DÑ FÔ Fð ð ш �7Ý
|
|||
|
|
Ð'˜IÐ'Ð'Ñ(Ô(Ð(Ý
|
|||
|
|
Ð*�% ™.œ.Ð*Ð*Ñ+Ô+Ð+Ý
|
|||
|
|
‰Œˆˆå Ð
|
|||
|
|
=Ñ>Ô>Ð>Ý �G„G€G€G€Gr c ó† — t d¦ « t j |¦ « D ]}|| j |d < Œt d¦ « | j ¦ « D ]D\ }}t d|› �¦ « t dt |¦ « › �¦ « t ¦ « ŒEt d¦ « t
|
|||
|
|
¦ « d S )Nz4Executing STEP 5: Collecting info about IKE policiesrQ zStored IKE policies:r± r² z/STEP 5 complete: Info about IKE policies stored)r r Úike_policy_listÚneutron_ike_policy_by_idr@ r r rµ s r Úcollect_ike_policiesr¼ ‚ sÎ € Ý Ð
|
|||
|
|
@ÑAÔAÐAå!Ô1°"Ñ5Ô5ð @ð @ˆØ8?ˆÔ& w¨t¤}Ñ5Ð5å Ð
|
|||
|
|
Ñ!Ô!Ð!Ø #Ô <× BÒ BÑ DÔ Dð ð ш �7Ý
|
|||
|
|
Ð'˜IÐ'Ð'Ñ(Ô(Ð(Ý
|
|||
|
|
Ð*�% ™.œ.Ð*Ð*Ñ+Ô+Ð+Ý
|
|||
|
|
‰Œˆˆå Ð
|
|||
|
|
;Ñ<Ô<Ð<Ý �G„G€G€G€Gr c ó4 — t d¦ « t j |¦ « D ]i}|d }|| j |< | d¦ « dk r<t d|› d�¦ « | d¦ « pg D ]}t |¦ « ŒŒjt d¦ « | j ¦ « D ]D\ }}t d |› �¦ « t d
|
|||
|
|
t
|
|||
|
|
|¦ « › �¦ « t ¦ « ŒEt d ¦ « t ¦ « d S ) Nz7Executing STEP 6: Collecting info about Endpoint GroupsrQ ÚsdnÚsprutzEndpoint Group z6 has sdn 'sprut' with the following network addresses:Ú endpointszStored Endpoint Groups:zEndpoint Group ID: r² z2STEP 6 complete: Info about Endpoint Groups stored)r r Úendpoint_group_listÚ neutron_endpoint_group_by_idrj r@ r r )rL rM r¶ Úeg_idÚaddresss r Úcollect_endpoint_groupsrÅ ’ s, € Ý Ð
|
|||
|
|
CÑDÔDÐDå!Ô5°bÑ9Ô9ð ð ˆØ˜”
|
|||
|
|
ˆØ4;ˆÔ*¨5Ñ1à �;Š;�uÑ Ô Ò (Ð (Ý Ða EÐaÐaÐaÑ bÔ bÐ bØ"Ÿ;š; {Ñ3Ô3Ð9°rð
|
|||
|
|
ð
|
|||
|
|
�Ý�g‘”��øå Ð
|
|||
|
|
#Ñ$Ô$Ð$Ø Ô<×BÒBÑDÔDð 𠉈ˆwÝ
|
|||
|
|
Ð+ EÐ+Ð+Ñ,Ô,Ð,Ý
|
|||
|
|
Ð*�% ™.œ.Ð*Ð*Ñ+Ô+Ð+Ý
|
|||
|
|
‰Œˆˆå Ð
|
|||
|
|
>Ñ?Ô?Ð?Ý �G„G€G€G€Gr c ó˜ — t d¦ « t j |¦ « D ]R}| d¦ « pd}| d¦ « rŒ/| d¦ « | j |d < ŒSt d¦ « t
|
|||
|
|
| j dd d
|
|||
|
|
d ¬ ¦ « t ¦ « t d
|
|||
|
|
¦ « t ¦ « d S )Nz?Executing STEP 7: Creating a map of Subnet ID to Subnet Addressrs r/ z
|
|||
|
|
ext-subnetÚcidrrQ z+Stored Subnet ID to Subnet Address mapping:z Subnet IDzSubnet Addressé$ é )Úwidth1Úwidth2z8STEP 7 complete: Subnet ID to Subnet Address map created)r r Ú subnet_listrj Ú
|
|||
|
|
startswithÚsubnet_id_to_subnet_addressr
|
|||
|
|
r )rL rM rS rs s r Úcollect_subnetsrÏ « sÍ € Ý Ð
|
|||
|
|
KÑLÔLÐLå Ô+¨BÑ/Ô/ð Kð KˆØ�yŠy˜Ñ Ô Ð& BˆØ �?Š?˜<Ñ (Ô (ð Ø Ø9>¿ºÀ6Ñ9JÔ9JˆÔ)¨%°¬+Ñ6Ð6å Ð
|
|||
|
|
7Ñ8Ô8Ð8Ý�5Ô4°kÐCSÐ\^ÐgiÐjÑjÔjÐjÝ �G„G€Gå Ð
|
|||
|
|
DÑEÔEÐEÝ �G„G€G€G€Gr c ó6 — t d¦ « t j |¦ « }|D ]H}|d }|d }| j ||¦ « | j ||¦ « ŒIt d¦ « t
|
|||
|
|
| j ¦ « D ]}|| j vr| j |= Œt | j dd¦ « t d¦ « |D ]}|d | j |d < Œt | j dd¦ « t d¦ « t ¦ « d S ) Nz4Executing STEP 8: Collecting info about vpn servicesÚ router_idrQ z(Remove router_ids that are not in configz Router IDzVPN service IDzbuild backwards dictionaryz7STEP 8 complete (Router ID to VPN Service ID map built)) r r Úvpn_service_listÚrouter_id_to_vpn_service_idÚ
|
|||
|
|
setdefaultÚneutron_vpn_service_by_idÚlistrW r
|
|||
|
|
Úvpn_service_id_to_router_idr )rL rM rX rS rÑ Úvpn_ids r Úcollect_vpn_servicesrÙ Â s> € Ý Ð
|
|||
|
|
@ÑAÔAÐAÝ Ô-¨bÑ1Ô1€Gàð Bð BˆØ˜+Ô&ˆ Ø�t”ˆØ
|
|||
|
|
Ô)×4Ò4°YÀÑGÔGÐGØ
|
|||
|
|
Ô'×2Ò2°6¸5ÑAÔAÐAÐAå Ð
|