Use NETCONF To Get Data On IOS XE Router

Download PNETLab Platform
PNETLAB Store
PNETLab.com
Use NETCONF to GET Data on IOS XE Router
Lab Topology:
I. Requirement
Use a NETCONF Session to Gather Information for IOS XE router in Network
II. Prerequisite
1
PNETLAB Store
PNETLab.com
When you guys load the lab to your PNETlab, it will get all things of this lab except
Ubuntu_server docker. Therefore, you should install by yourself an Ubuntu_server docker and
connect to R2. Now I will show you how to do.
Step 1. Go to Device item of PNETlab site to get Ubuntu_server docker
Step 2. Read the guide to know how to do, or follow my method below.
Step 2.1 After you get Device, then go back to running lab on PNETlab box. Click “Add an
Object” , then Add new Node, then you choose the docker.io. After choosing that box, please
input information follow this picture
2
PNETLAB Store
PNETLab.com
Step 2.2 Then you go to Start up configure section. Insert one command line: dhclient eth1
Then save it, enable it. Follow the picture blow.
3
PNETLAB Store
PNETLab.com
Step 2.3 Now you have Ubunto_server docker, it is time to connect it to Cloud_NAT
All things related to Ubuntu_server docker are okay. Just click to that device and telnet . Then
just enjoy your Ubuntu in PNETlab now.
4
PNETLAB Store
PNETLab.com
Step 2.4. IOS XE on “devices” ,

With quite same method above , you get CSR 1000v from “devices” first, then follow the
“guide” of install CSR 1000v. After that, you add node in your PNETlab to choose CSR 1000v
device, with one more option is :
Step 2.5 Configure initial cfg and ssh info, account for IOS XE
enable
configure terminal
hostname IOS_XE
no ip domain lookup
line vty 0 15
5
PNETLAB Store
PNETLab.com
exec-t 0 0
logg sync
login local
transport input ssh
ip domain name example.pnetlab.com
crypto key generate rsa modulus 2048
username cisco priv 15 password cisco
III. Labbing showtime

Step 1: Check if NETCONF is running on IOS_XE.
a. NETCONF may already be running if another student enabled it, or if a later IOS version
enables it by default. From the PuTTY terminal, use the show platform software yang-
management process command to see if the NETCONF SSH daemon (ncsshd) is running.
IOS_XE# show platform software yang-management process
confd : Not Running
nesd : Not Running
syncfd : Not Running
ncsshd : Not Running
dmiauthd : Not Running
nginx : Running
ndbmand : Not Running
pubd : Not Running
b. If NETCONF is not running, as shown in the output above, enter the global configuration
command netconf-yang.
IOS_XE # config t
IOS_XE (config)# netconf-yang
c. Now verify that NETCONF is running again.
6
PNETLAB Store
PNETLab.com
IOS_XE # show platform software yang-management process

confd : Running
nesd : Running
syncfd : Running
ncsshd : Running
dmiauthd : Running
nginx : Running
ndbmand : Running
pubd : Running
Step 2: Access the NETCONF process through an SSH terminal.

You can establish an SSH session with IOS_XE using PuTTY. However, the copying and pasting
functionality in the PuTTY terminal window inside the Ubuntu can be problematic. Therefore,
use a command line window to start the SSH session with IOS_XE.
a. Enter the following command in a terminal window. Then enter “cisco” as the password.
If you type the command incorrectly, use the up-arrow key to recall the command that you
enter, then find and edit your mistake.
root@Ubuntu_server: ssh -oHostKeyAlgorithms=+ssh-dss cisco@10.0.137.86 -p 830 -s netconf
b. IOS_XE will respond with a hello message that includes all of its capabilities. The end of
the message is identified with ]]>]]>.
<?xml version="1.0" encoding="UTF-8"?>
<hello xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
<capabilities>
<capability>urn:ietf:params:netconf:base:1.0</capability>
….
<capability>urn:ietf:params:xml:ns:yang:ietf-netconf-with-defaults?module=ietf-netconf-with-
defaults&revision=2011-06 -01</capability>
<capability>
7
PNETLAB Store
PNETLab.com
urn:ietf:params:netconf:capability:notification:1.1
</capability>
</capabilities>
<session-id>18</session-id></hello>]]>]]>
Step 3: Start a NETCONF session by sending a hello message from the client.
To start a NETCONF session, the client needs to send its own hello message. The hello message
should include the NETCONF base capabilities version the client wants to use.
a. Copy and paste the following XML code into the SSH session. Notice that the end of the
client hello message is identified with a ]]>]]>.
<hello xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
<capabilities>
</capabilities>
</hello>
]]>]]>
b. On IOS_XE, use the show netconf-yang sessions command to verify that a NETCONF
session has been started.
IOS_XE#show netconf-yang sessions

R: Global-lock on running datastore
C: Global-lock on candidate datastore
S: Global-lock on startup datastore
Number of sessions : 1
session-id transport username source-host global-lock
8
PNETLAB Store
PNETLab.com
-------------------------------------------------------------------------------
20 netconf-ssh cisco 10.0.137.21 None
Step 4: Send RPC messages to an IOS XE device.

During an SSH session, a NETCONF client can use Remote Procedure Call (RPC) messages to
send NETCONF operations to the IOS XE device. The table lists some of the more common
NETCONF operations.
Operation Description
<get> Retrieve running configuration and device state information
<get-config> Retrieve all or part of specified configuration data store
<edit-config> Loads all or part of a configuration to the specified configuration data store
<copy-config> Replace an entire configuration data store with another
<delete-config> Delete a configuration data store
<commit> Copy candidate data store to running data store
<lock> / <unlock> Lock or unlock the entire configuration data store system
<close-session> Graceful termination of NETCONF session
<kill-session> Forced termination of NETCONF session
a. Copy and paste the following RPC get message XML code into the terminal SSH session
to retrieve information about the interfaces on IOS_XE.
<rpc message-id="103" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
<get>
<filter>
<interfaces xmlns="urn:ietf:params:xml:ns:yang:ietf-interfaces"/>
</filter>
</get>
</rpc>
]]>]]>
9
PNETLAB Store
PNETLab.com
//you can see the ietf-interfaces to get interfaces from IOS XE

b. Recall that XML does not require indention or white space. Therefore, IOS_XE will return
a long string of XML data. You can easy to know what gi G1 with ip 10.0.137.86
<?xml version="1.0" encoding="UTF-8"?>
<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" message-
id="103"><data><interfaces xmlns="urn:ietf:params:xml:ns:yang:ietf-
interfaces"><interface><name>GigabitEthernet1</name><type
xmlns:ianaift="urn:ietf:params:xml:ns:yang:iana-if-
type">ianaift:ethernetCsmacd</type><enabled>true</enabled><ipv4
xmlns="urn:ietf:params:xml:ns:yang:ietf-
ip"><address><ip>10.0.137.86</ip><netmask>255.255.255.0</netmask></address></ipv4><ip
v6 xmlns="urn:ietf:params:xml:ns:yang:ietf-
ip"></ipv6></interface><interface><name>GigabitEthernet2</name><type
type">ianaift:ethernetCsmacd</type><enabled>false</enabled><ipv4
xmlns="urn:ietf:params:xml:ns:yang:ietf-ip"></ipv4><ipv6
ip"></ipv6></interface><interface><name>Loopback1</name><description>loopback
1</description><type xmlns:ianaift="urn:ietf:params:xml:ns:yang:iana-if-
type">ianaift:softwareLoopback</type><enabled>true</enabled><ipv4
ip"><address><ip>10.1.1.1</ip><netmask>255.255.255.0</netmask></address></ipv4><ipv6
ip"></ipv6></interface><interface><name>Loopback2</name><description>loopback
2</description><type xmlns:ianaift="urn:ietf:params:xml:ns:yang:iana-if-
type">ianaift:softwareLoopback</type><enabled>true</enabled><ipv4
xmlns="urn:ietf:params:xml:ns:yang:ietf-ip"></ipv6></interface></interfaces></data></rpc-
reply>]]>]]>
10
PNETLAB Store
PNETLab.com
c. Copy the XML that was returned, but do not include the final “]]>]]>” characters. These
characters are not part of the XML that is returned by the router.
d. Search the internet for “prettify XML”, you can use this tool :
https://www.samltool.com/prettyprint.php
Find a suitable site and use its tool to transform your XML into a more readable format, such as
the following:
Step 5: Close the NETCONF session.

To close the NETCONF session, the client needs to send the following RPC message:
<rpc message-id="9999999" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
<close-session />
</rpc>
You will be returned to the terminal prompt. Return to the router prompt and show the open
netconf sessions. You will see that the session has been closed.
ENJOY YOUR LAB
11

Use NETCONF To Get Data On IOS XE Router

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Use NETCONF To Get Data On IOS XE Router

Uploaded by

Copyright:

Available Formats

Download PNETLab Platform

Use NETCONF to GET Data on IOS XE Router

Use a NETCONF Session to Gather Information for IOS XE router in Network

Step 2.4. IOS XE on “devices” ,

III. Labbing showtime

IOS_XE # show platform software yang-management process

Step 2: Access the NETCONF process through an SSH terminal.

IOS_XE#show netconf-yang sessions

session-id transport username source-host global-lock

Step 4: Send RPC messages to an IOS XE device.

//you can see the ietf-interfaces to get interfaces from IOS XE

Step 5: Close the NETCONF session.

ENJOY YOUR LAB

You might also like