Feat(eos_designs): Underlay OSPF authentication (#4169)

aristanetworks · Jul 26, 2024 · 46a1528 · 46a1528
1 parent 39516f9
commit 46a1528
Show file tree

Hide file tree

Showing 44 changed files with 740 additions and 1 deletion.
diff --git a/...ctions/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG-OSPF-L3LEAF1A.cfg b/...ctions/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG-OSPF-L3LEAF1A.cfg
@@ -56,7 +56,10 @@ interface Ethernet1
    no switchport
    ip address 10.10.101.7/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha512 7 qO39Oo+xVTO7l/La1StOQcW1t7hpfAAH
+   ip ospf message-digest-key 2 sha512 7 pWGuZ4QaDATcfTOKCkm1p2Rq2A4O9j5j
 !
 interface Ethernet5
    description MLAG_PEER_MLAG-OSPF-L3LEAF1B_Ethernet5

diff --git a/...ctions/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG-OSPF-L3LEAF1B.cfg b/...ctions/arista/avd/molecule/eos_designs_unit_tests/intended/configs/MLAG-OSPF-L3LEAF1B.cfg
@@ -56,7 +56,10 @@ interface Ethernet1
    no switchport
    ip address 10.10.101.9/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha512 7 qO39Oo+xVTO7l/La1StOQcW1t7hpfAAH
+   ip ospf message-digest-key 2 sha512 7 pWGuZ4QaDATcfTOKCkm1p2Rq2A4O9j5j
 !
 interface Ethernet5
    description MLAG_PEER_MLAG-OSPF-L3LEAF1A_Ethernet5

diff --git a/...ta/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG-OSPF-L3LEAF1A.yml b/...ta/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG-OSPF-L3LEAF1A.yml
@@ -170,6 +170,14 @@ ethernet_interfaces:
   ip_address: 10.10.101.7/31
   ospf_network_point_to_point: true
   ospf_area: 0.0.0.0
+  ospf_authentication: message-digest
+  ospf_message_digest_keys:
+  - id: 1
+    hash_algorithm: sha512
+    key: qO39Oo+xVTO7l/La1StOQcW1t7hpfAAH
+  - id: 2
+    hash_algorithm: sha512
+    key: pWGuZ4QaDATcfTOKCkm1p2Rq2A4O9j5j
 mlag_configuration:
   domain_id: MLAG_OSPF_L3LEAF1
   local_interface: Vlan4094

diff --git a/...ta/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG-OSPF-L3LEAF1B.yml b/...ta/avd/molecule/eos_designs_unit_tests/intended/structured_configs/MLAG-OSPF-L3LEAF1B.yml
@@ -170,6 +170,14 @@ ethernet_interfaces:
   ip_address: 10.10.101.9/31
   ospf_network_point_to_point: true
   ospf_area: 0.0.0.0
+  ospf_authentication: message-digest
+  ospf_message_digest_keys:
+  - id: 1
+    hash_algorithm: sha512
+    key: qO39Oo+xVTO7l/La1StOQcW1t7hpfAAH
+  - id: 2
+    hash_algorithm: sha512
+    key: pWGuZ4QaDATcfTOKCkm1p2Rq2A4O9j5j
 mlag_configuration:
   domain_id: MLAG_OSPF_L3LEAF1
   local_interface: Vlan4094

diff --git a/...tions/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/MLAG_OSPF_TESTS.yml b/...tions/arista/avd/molecule/eos_designs_unit_tests/inventory/group_vars/MLAG_OSPF_TESTS.yml
@@ -1,5 +1,12 @@
 ---
 underlay_routing_protocol: ospf
+underlay_ospf_authentication:
+  enabled: true
+  message_digest_keys:
+    - id: 1
+      key: arista123arista
+    - id: 2
+      key: please_vault_me
 
 type: l3leaf
 

diff --git a/.../avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-BL1A.md b/.../avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-BL1A.md
@@ -298,7 +298,9 @@ interface Ethernet1
    no switchport
    ip address 172.31.255.41/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet2
    description P2P_LINK_TO_DC1-SPINE2_Ethernet6
@@ -307,7 +309,9 @@ interface Ethernet2
    no switchport
    ip address 172.31.255.43/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet3
    description P2P_LINK_TO_DC1-SPINE3_Ethernet6
@@ -316,7 +320,9 @@ interface Ethernet3
    no switchport
    ip address 172.31.255.45/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet4
    description P2P_LINK_TO_DC1-SPINE4_Ethernet6
@@ -325,7 +331,9 @@ interface Ethernet4
    no switchport
    ip address 172.31.255.47/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet5
    description MLAG_PEER_DC1-BL1B_Ethernet5

diff --git a/.../avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-BL1B.md b/.../avd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-BL1B.md
@@ -298,7 +298,9 @@ interface Ethernet1
    no switchport
    ip address 172.31.255.49/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet2
    description P2P_LINK_TO_DC1-SPINE2_Ethernet7
@@ -307,7 +309,9 @@ interface Ethernet2
    no switchport
    ip address 172.31.255.51/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet3
    description P2P_LINK_TO_DC1-SPINE3_Ethernet7
@@ -316,7 +320,9 @@ interface Ethernet3
    no switchport
    ip address 172.31.255.53/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet4
    description P2P_LINK_TO_DC1-SPINE4_Ethernet7
@@ -325,7 +331,9 @@ interface Ethernet4
    no switchport
    ip address 172.31.255.55/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet5
    description MLAG_PEER_DC1-BL1A_Ethernet5

diff --git a/...vd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-LEAF1A.md b/...vd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-LEAF1A.md
@@ -238,7 +238,9 @@ interface Ethernet1
    no switchport
    ip address 172.31.255.1/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet2
    description P2P_LINK_TO_DC1-SPINE2_Ethernet1
@@ -247,7 +249,9 @@ interface Ethernet2
    no switchport
    ip address 172.31.255.3/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet3
    description P2P_LINK_TO_DC1-SPINE3_Ethernet1
@@ -256,7 +260,9 @@ interface Ethernet3
    no switchport
    ip address 172.31.255.5/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet4
    description P2P_LINK_TO_DC1-SPINE4_Ethernet1
@@ -265,7 +271,9 @@ interface Ethernet4
    no switchport
    ip address 172.31.255.7/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 ```
 
 ### Loopback Interfaces

diff --git a/...vd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-LEAF2A.md b/...vd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-LEAF2A.md
@@ -310,7 +310,9 @@ interface Ethernet1
    no switchport
    ip address 172.31.255.9/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet2
    description P2P_LINK_TO_DC1-SPINE2_Ethernet2
@@ -319,7 +321,9 @@ interface Ethernet2
    no switchport
    ip address 172.31.255.11/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet3
    description P2P_LINK_TO_DC1-SPINE3_Ethernet2
@@ -328,7 +332,9 @@ interface Ethernet3
    no switchport
    ip address 172.31.255.13/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet4
    description P2P_LINK_TO_DC1-SPINE4_Ethernet2
@@ -337,7 +343,9 @@ interface Ethernet4
    no switchport
    ip address 172.31.255.15/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet5
    description MLAG_PEER_DC1-LEAF2B_Ethernet5

diff --git a/...vd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-LEAF2B.md b/...vd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-LEAF2B.md
@@ -310,7 +310,9 @@ interface Ethernet1
    no switchport
    ip address 172.31.255.17/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet2
    description P2P_LINK_TO_DC1-SPINE2_Ethernet3
@@ -319,7 +321,9 @@ interface Ethernet2
    no switchport
    ip address 172.31.255.19/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet3
    description P2P_LINK_TO_DC1-SPINE3_Ethernet3
@@ -328,7 +332,9 @@ interface Ethernet3
    no switchport
    ip address 172.31.255.21/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet4
    description P2P_LINK_TO_DC1-SPINE4_Ethernet3
@@ -337,7 +343,9 @@ interface Ethernet4
    no switchport
    ip address 172.31.255.23/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet5
    description MLAG_PEER_DC1-LEAF2A_Ethernet5

diff --git a/...vd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SPINE1.md b/...vd/molecule/evpn_underlay_ospf_overlay_ebgp/documentation/devices/DC1-SPINE1.md
@@ -230,7 +230,9 @@ interface Ethernet1
    no switchport
    ip address 172.31.255.0/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet2
    description P2P_LINK_TO_DC1-LEAF2A_Ethernet1
@@ -239,7 +241,9 @@ interface Ethernet2
    no switchport
    ip address 172.31.255.8/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet3
    description P2P_LINK_TO_DC1-LEAF2B_Ethernet1
@@ -248,7 +252,9 @@ interface Ethernet3
    no switchport
    ip address 172.31.255.16/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet4
    description P2P_LINK_TO_DC1-SVC3A_Ethernet1
@@ -257,7 +263,9 @@ interface Ethernet4
    no switchport
    ip address 172.31.255.24/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet5
    description P2P_LINK_TO_DC1-SVC3B_Ethernet1
@@ -266,7 +274,9 @@ interface Ethernet5
    no switchport
    ip address 172.31.255.32/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet6
    description P2P_LINK_TO_DC1-BL1A_Ethernet1
@@ -275,7 +285,9 @@ interface Ethernet6
    no switchport
    ip address 172.31.255.40/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 !
 interface Ethernet7
    description P2P_LINK_TO_DC1-BL1B_Ethernet1
@@ -284,7 +296,9 @@ interface Ethernet7
    no switchport
    ip address 172.31.255.48/31
    ip ospf network point-to-point
+   ip ospf authentication message-digest
    ip ospf area 0.0.0.0
+   ip ospf message-digest-key 1 sha256 7 <removed>
 ```
 
 ### Loopback Interfaces