Siemens recommends strongly that you regularly check for product updates. For the secure operation of Siemens products and solutions, it is necessary to take suitable preventive action (e.g. cell protection concept) and integrate each component into a holistic, state-of-the-art industrial security concept. Third-party products that may be in use should also be considered.
RUGGEDCOM NETCONF Reference Guide Table of Contents Table of Contents Preface ......................How This Guide Is Organized ....................... ix Alerts ..............................x Related Documents ..........................x Accessing Documentation ........................x Training .............................. xi Customer Support ..........................xi Chapter 1 Introduction .....................
Page 4
RUGGEDCOM NETCONF Table of Contents Reference Guide 3.5 Killing a Session .......................... 26 Chapter 4 Getting Data ....................4.1 Using the Command ......................29 4.2 Using the Command ....................30 4.3 Using XPaths with and ................... 31 4.4 Getting Information for a Specific Object ..................33 4.4.1 Specifying Objects with Hierarchical XML Elements .............
Page 6
RUGGEDCOM NETCONF Table of Contents Reference Guide Chapter 7 Examples ......................7.1 Getting the System Name ......................80 7.2 Getting the ROX Release ......................80 7.3 Getting the Chassis Status ......................81 7.4 Setting the System Clock ......................81 7.5 Acknowledging Alarms ........................ 81 7.6 Clearing All Alarms ........................
Page 7
RUGGEDCOM NETCONF Reference Guide Table of Contents 7.39 Retreiving All Data From Running Database Including Default Values ........... 116 7.40 Retreiving All Data From Running Database Including Default Tags and Values ......116 7.41 Changing a User's Password ..................... 117 7.42 Displaying the Status of the IPsec Service ................. 118 7.43 Selecting a Certificate for an IPSec Tunnel ................
Page 8
RUGGEDCOM NETCONF Table of Contents Reference Guide viii...
RUGGEDCOM NETCONF Reference Guide Preface Preface This guide describes how to use RUGGEDCOM NETCONF – the Network Configuration Protocol – to manipulate configuration data on RUGGEDCOM devices running RUGGEDCOM NETCONF v. CONTENTS • “How This Guide Is Organized” • “Alerts”...
Most documents are available on Siemens' Industry Online Support portal [https://support.industry.siemens.com] or mobile application. For all others, contact a Siemens Sales representative or Siemens Customer Support. Accessing Documentation The latest user documentation for RUGGEDCOM NETCONF v is available online at www.siemens.com/ruggedcom.
Mobile App Install the Industry Online Support app by Siemens AG on any Android, Apple iOS or Windows mobile device and be able to: • Access Siemens' extensive library of support documentation, including FAQs and manuals • Submit SRs or check on the status of an existing SR •...
RUGGEDCOM NETCONF Chapter 1 Reference Guide Introduction Introduction Welcome to the RUGGEDCOM NETCONF Reference Guide. This document aims to describe the Network Configuration Protocol (NETCONF) and how it can be used to control the configuration of a device running RUGGEDCOM ROX II. All versions of RUGGEDCOM ROX II supports NETCONF sessions.
Chapter 1 RUGGEDCOM NETCONF Introduction Reference Guide Figure 1: NETCONF Concepts and Implementation • The Transport Protocol layer provides connectivity between the device and the NETCONF client. RUGGEDCOM ROX II supports the use of Secure Shell (SSH) for the connection. • The Remote Procedure Call layer represents NETCONF requests and responses. Requests from the client to the device are wrapped within ...
RUGGEDCOM NETCONF Chapter 1 Reference Guide Introduction Section 1.2 What Can NETCONF Do? NETCONF provides an easy-to-use application programming interface (API) for RUGGEDCOM NETCONF. It provides the ability to view and manipulate configuration data, monitor device status, and perform device management commands.
Chapter 1 RUGGEDCOM NETCONF Introduction Reference Guide • Section 1.5.1, “Sample Session: Getting Data” describes a simple session where you connect to a device, get data from the device, and close the session • Section 1.5.2, “Sample Session: Performing an Action” describes a simple session where you connect to a device, perform an action on the device, and close the session •...
RUGGEDCOM NETCONF Chapter 1 Reference Guide Introduction Basic Steps Connect to the device and exchange messages. Issue or commands to retrieve data from the device. You determine the data to retrieve by stating the RUGGEDCOM namespace from which you want to retrieve the data, and then stating the path through the data model to the information you want to return.
Chapter 1 RUGGEDCOM NETCONF Introduction Reference Guide • All commands must be enclosed within tags. The message-id attribute is not required but is recommended. The message-id attribute is returned in the device response, allowing you to match responses with requests. •...
Page 19
RUGGEDCOM NETCONF Chapter 1 Reference Guide Introduction Figure 3: Performing an Action Basic Steps Connect to the device and exchange messages. Issue an command with the action to perform. The request must contain the element referring to the action namespace. You determine the action to perform by stating the RUGGEDCOM namespace where the command is found, and then stating the path through the data model to the command.
Page 20
Chapter 1 RUGGEDCOM NETCONF Introduction Reference Guide Respond to the device with the client's statement. The client's statement can describe the client's capabilities, or it can respond with just the base NETCONF capability. This example shows the minimal ...
RUGGEDCOM NETCONF Chapter 1 Reference Guide Introduction ]]>]] Section 1.5.3 Sample Session: Editing Data To edit data on the device, do the following: Say datadatadatadatadatadatadatadatadatadata...
Page 22
Chapter 1 RUGGEDCOM NETCONF Introduction Reference Guide Issue an command to edit the configuration. You determine which data to edit by stating the RUGGEDCOM namespace where the data to be changed is found, and then stating the path through the data model to the items to change.
Page 23
RUGGEDCOM NETCONF Chapter 1 Reference Guide Introduction • The command discards any uncommitted changes that may be present in the configuration. It is recommended that you perform this step to ensure that the changes you make are made to a known state of the configuration. The device responds with the following:
Page 24
Chapter 1 RUGGEDCOM NETCONF Introduction Reference Guide Substation Ethernet: Switch 01]]>]]> • The element indicates that this request is to edit the configuration. • The element specifies the configuration to be edited. In this example, the configuration is to be edited.
Page 25
RUGGEDCOM NETCONF Chapter 1 Reference Guide Introduction ]]>]]> The changes made to the configuration are committed and promoted to the configuration. Issue an request to unlock the candidate configuration: ...
RUGGEDCOM NETCONF Chapter 2 Reference Guide NETCONF Capabilities and Namespaces NETCONF Capabilities and Namespaces This section describes the NETCONF capabilities supported by RUGGEDCOM ROX II. NETCONF capabilities describe the functions and namespaces supported by a NETCONF peer. When you connect to the NETCONF service on a device, the device advertises its capabilities in a ...
Page 28
Chapter 2 RUGGEDCOM NETCONF NETCONF Capabilities and Namespaces Reference Guide Capabilities Description urn:ietf:params:netconf:capability:writable- Supports writing to the running configuration: you can update running:1.0 configuration data in the running configuration. For more information on this capability, see Internet Engineering Task Force RFC 6241 [http://tools.ietf.org/html/rfc6241].
RUGGEDCOM NETCONF Chapter 2 Reference Guide NETCONF Capabilities and Namespaces Section 2.2 Vendor-Defined Capabilities The following capabilities are provided by the vendor of the development tools used to create the RUGGEDCOM NETCONF software. These vendor-defined capabilities complement and extend the standard IETF capabilities. Capabilities Description This vendor-defined capability extends the standard IETF with-...
Chapter 2 RUGGEDCOM NETCONF NETCONF Capabilities and Namespaces Reference Guide Section 2.4 Vendor-Defined Namespaces The following namespaces support vendor-defined NETCONF capabilities: Namespace Description Supports and extends the IETF with-defaults capability. http://tail-f.com/ns/netconf/with-defaults/1.0 Supports the vendor-defined actions capability. http://tail-f.com/ns/netconf/actions/1.0 Supports the vendor-defined commit capability. http://tail-f.com/ns/netconf/commit/1.0...
Page 31
RUGGEDCOM NETCONF Chapter 2 Reference Guide NETCONF Capabilities and Namespaces • http://ruggedcom.com/ns/rmf_if?module=rmf_if&revision=2012-11-28 The interface namespace contains interface configuration data. The interface namespace is the equivalent of the interface menu level in the RUGGEDCOM ROX II web user interface, and the interface command in the RUGGEDCOM ROX II command line interface.
Chapter 2 RUGGEDCOM NETCONF NETCONF Capabilities and Namespaces Reference Guide • http://ruggedcom.com/ns/rmf_mpls?module=rmf_mpls&revision=2012-11-28 The mpls namespace contains mpls configuration data. The mpls namespace is the equivalent of the mpls menu level in the RUGGEDCOM ROX II web user interface, and the mpls command in the RUGGEDCOM ROX II command line interface.
Page 33
RUGGEDCOM NETCONF Chapter 2 Reference Guide NETCONF Capabilities and Namespaces http://ruggedcom.com/ns/rmf_iftunnel?module=rmf_iftunnel&revision=2012-03-07 http://ruggedcom.com/ns/rmf_ip?module=rmf_ip&revision=2012-03-07http://ruggedcom.com/ns/rmf_qos?module=rmf_qos&revision=2012-03-07http://ruggedcom.com/ns/rmf_routing?module=rmf_routing&revision=2012-03-07 http://ruggedcom.com/ns/rmf_security?module=rmf_security&revision=2012-03-07 http://ruggedcom.com/ns/rmf_services?module=rmf_services&revision=2012-03-07 http://tail-f.com/yang/common-monitoring?module=tailf-common- monitoring&revision=2011-09-22http://tail-f.com/yang/confd-monitoring?module=tailf-confd- monitoring&revision=2011-09-22http://tail-f.com/yang/netconf-monitoring?module=tailf-netconf- monitoring&revision=2011-09-22urn:ietf:params:xml:ns:yang:ietf-inet-types?module=ietf-inet- types&revision=2010-09-24urn:ietf:params:xml:ns:yang:ietf-netconf-monitoring?module=ietf-netconf- monitoring&revision=2010-10-04urn:ietf:params:xml:ns:yang:ietf-yang-types?module=ietf-yang- types&revision=2010-09-241020 ]]>]]> Viewing the Capabilities on a Device...
Page 34
Chapter 2 RUGGEDCOM NETCONF NETCONF Capabilities and Namespaces Reference Guide Viewing the Capabilities on a Device...
RUGGEDCOM NETCONF Chapter 3 Reference Guide NETCONF Sessions NETCONF Sessions This section describes how to do the following: • connect to the NETCONF service on a device via Secure Shell (SSH). You must do this each time you connect to the device to start a NETCONF session.
Chapter 3 RUGGEDCOM NETCONF NETCONF Sessions Reference Guide • {user} A user name on the device assigned the administrative user role. • {ipAddress} The IP address or hostname of the device. • -p 830 Specifies port 830. The default NETCONF port is port 830. •...
RUGGEDCOM NETCONF Chapter 3 Reference Guide NETCONF Sessions Section 3.3.1 RUGGEDCOM ROX II NETCONF Message The following is the hello message returned when you connect to the NETCONF service on a device running the RUGGEDCOM ROX II operating system: ...
Chapter 3 RUGGEDCOM NETCONF NETCONF Sessions Reference Guide urn:ietf:params:netconf:base:1.0 ]]>]]> The device does not reply to the response unless there is an error. After issuing the response, you can begin sending NETCONF requests. Section 3.4 Closing the Session Closing a session requests the graceful termination of a NETCONF session.
Page 39
RUGGEDCOM NETCONF Chapter 3 Reference Guide NETCONF Sessions To kill a session, you need to know its . To determine the of another session, attempt to a configuration. If the configuration is already locked by another session, the for the session is reported in the ...
RUGGEDCOM NETCONF Chapter 4 Reference Guide Getting Data Getting Data This section describes how to use NETCONF to retrieve configuration data from RUGGEDCOM ROX II. NETCONF features two get commands to retrieve data from the device: • retrieves device state data and information from the running configuration. For more information, refer Section 4.1, “Using the ...
Chapter 4 RUGGEDCOM NETCONF Getting Data Reference Guide • specify the element's type attribute as subtree • construct the path to the desired element within the element • specify the namespace for the root element in the path You can use an XPath in the ...
RUGGEDCOM NETCONF Chapter 4 Reference Guide Getting Data • construct the path to the desired element within the element • specify the namespace for the root element in the path You can also use an XPath in the element, instead of the hierarchical XML element structure. For information on how to use an XPath, refer to Section 4.3, “Using XPaths with ...
Page 44
Chapter 4 RUGGEDCOM NETCONF Getting Data Reference Guide The following example shows how to return the state of the Developer Log Enabled setting using an XPath. In this example, the Developer Log is enabled, so the value for the Enabled setting is returned as true.
RUGGEDCOM NETCONF Chapter 4 Reference Guide Getting Data Section 4.4 Getting Information for a Specific Object To retrieve information for a specific object, such as a user, an interface, or other identified object, specify the identification for the item item in the XML element hierarchy or XPath. CONTENTS •...
Chapter 4 RUGGEDCOM NETCONF Getting Data Reference Guide ]]>]]> Section 4.4.2 Specifying Objects with XPaths When using XPath, use the following syntax in the select statement: select="{element}/.../{element}[{element}='{data}']/{element}"/> • {element} is an element in the data model. • ... represents multiple elements in the data model to the target element. •...
RUGGEDCOM NETCONF Chapter 4 Reference Guide Getting Data
]]>]]> The device returns the following: ]]>]]> Note that the element is not returned. To return the default values for elements, add a with-defaults attribute to the ...
Chapter 4 RUGGEDCOM NETCONF Getting Data Reference Guide • RUGGEDCOM ROX II CLI Paths to parameters in the RUGGEDCOM ROX II CLI are a direct representation of the underlying data model. • YANG/YIN Files YANG and YIN files detail the RUGGEDCOM ROX II data model in formats that can be parsed and transformed as needed.
RUGGEDCOM NETCONF Chapter 4 Reference Guide Getting Data Review the list and locate the entries for items you want to retrieve. For example, shown here are the entries for the rmf_admin namespace: rmf_admin2012-03-07yinhttp://ruggedcom.com/ns/rmf_adminNETCONF...
Chapter 4 RUGGEDCOM NETCONF Getting Data Reference Guide 2012-03-07yin ]]>]]> The device returns the text from the specified YIN or YANG file. Section 4.6.3 Using pyang pyang is an open-source utility used to validate and transform YANG and YIN files. pyang is particularly useful for transforming YANG and YIN files into text-based output that clearly illustrated the hierarchy of the elements in the RUGGEDCOM ROX II data model files.
RUGGEDCOM NETCONF Chapter 4 Reference Guide Getting Data +--rw key? leafref • rw indicates a read-write node. • ro indicates a read-only node. • [square braces] indicate an identifier or name for a data object. • text following the node name indicates the data type for the node, such as boolean, string, and so on. CONTENTS •...
Page 52
Chapter 4 RUGGEDCOM NETCONF Getting Data Reference Guide Again, refer to the text-based tree diagram to locate the services/ntp/server(name)/peer field in the tree: +--rw services +--rw time +--rw ntp +--rw enabled? boolean +--rw server [name] +--rw name inet:host +--rw enabled? empty +--rw peer? empty...
RUGGEDCOM NETCONF Chapter 5 Reference Guide Changing Configuration Data Changing Configuration Data This section describes how to change configuration data and perform actions on your device through NETCONF. You can edit configuration data in two ways: • You can edit the running configuration directly. In this approach, any changes you make to the running configuration take effect immediately.
Chapter 5 RUGGEDCOM NETCONF Changing Configuration Data Reference Guide {path} ]]>]]> • {path} The XML elements describing the path to and the data for the element to be edited. For example, to create a static VLAN:
RUGGEDCOM NETCONF Chapter 5 Reference Guide Changing Configuration Data This section describes how to lock the datastores, edit and delete data, validate the configuration, commit the changes, and lock the datastores. For instructions on how to initiate a NETCONF session, refer to Section 3.2, “Connecting to the NETCONF Service”.
Chapter 5 RUGGEDCOM NETCONF Changing Configuration Data Reference Guide
]]>]]> The device responds with the following: ]]>]]> The candidate configuration is now locked. Section 5.2.2 Copying Data You can use the copy-config command to do the following: •...
Page 57
RUGGEDCOM NETCONF Chapter 5 Reference Guide Changing Configuration Data ]]>]]> The file is saved to the /var/lib/config directory on the device. To overwrite a configuration with a configuration file, do the following: Upload an XML configuration file to the device. For instructions on how to upload a configuration file, refer to the RUGGEDCOM NETCONF v Web Interface User Guide or RUGGEDCOM NETCONF v CLI User Guide for the device.
Chapter 5 RUGGEDCOM NETCONF Changing Configuration Data Reference Guide file:///standard_config.xml ]]>]]> Commit the changes: ]]>]]> Unlock the candidate configuration: ]]>]]> Unlock the running configuration:
Page 59
RUGGEDCOM NETCONF Chapter 5 Reference Guide Changing Configuration Data ]]>]]> Issue an request with the replace operation: <{root element} xmlns="{namespace URL}" xmlns:nc="urn:ietf:params:xml:ns:netconf:base:1.0"> {configuration data with nc:operation="replace" attribute} ...
Chapter 5 RUGGEDCOM NETCONF Changing Configuration Data Reference Guide
]]>]]> Unlock the target configuration: ]]>]]> Section 5.2.4 Deleting Data To delete a specific configuration setting, do the following: Connect to and log in to the device. Lock the running configuration:
]]>]]> • {root element} The top level element in the data model under which the data is located. Note that you need to declare the xmlns:nc="urn:ietf:params:xml:ns:netconf:base:1.0" namespace at this point. •...
Chapter 5 RUGGEDCOM NETCONF Changing Configuration Data Reference Guide Section 5.2.5 Validating Changes You can validate the syntax of a specified configuration with the validate comment. Validation confirms the syntax of the specified configuration. After making extensive changes to the candidate configuration, it is recommended that your validate the candidate configuration before committing it.
RUGGEDCOM NETCONF Chapter 5 Reference Guide Changing Configuration Data • The element indicates where in the configuration the syntax error is found. • The element provides a message, when one is available, describing the error. • The element indicates the element related to the error. For more information on NETCONF errors, see Internet Engineering Task Force RFC 6241 Appendix A.
RUGGEDCOM NETCONF Chapter 6 Reference Guide RUGGEDCOM ROX II Actions RUGGEDCOM ROX II Actions This section describes how to activate RUGGEDCOM ROX II actions on the device with an message through NETCONF. Actions perform functions directly on the device, such as shutting down the device, rebooting, clearing port statistics, and more.
Chapter 6 RUGGEDCOM NETCONF RUGGEDCOM ROX II Actions Reference Guide ]]>]]> Section 6.1.3 decline-upgrade This action declines a RUGGEDCOM ROX II software upgrade. After an upgrade occurs and while the system is awaiting a reboot to the upgraded partition, use the action to cancel the attempt to run the upgraded partition.
RUGGEDCOM NETCONF Chapter 6 Reference Guide RUGGEDCOM ROX II Actions Section 6.1.5 roxflash This action flashes a RUGGEDCOM ROX II image to the alternate partition. On rebooting, the device boots from the flashed partition. Configurations are not transferred. This action takes a single parameter: {url}.
Chapter 6 RUGGEDCOM NETCONF RUGGEDCOM ROX II Actions Reference Guide
]]>]]> Section 6.1.8 shutdown This action shuts down the device. After using this action, the device shuts down and provides a time-out period during which you can remove power from the device. The default time-out period is 300 seconds (five minutes). At the end of the time-out period, the device reboots and restarts.
RUGGEDCOM NETCONF Chapter 6 Reference Guide RUGGEDCOM ROX II Actions ]]>]]> • {time} The date and time in the format YYYY-MM-DD HH:MM:SS. Section 6.1.11 restore-factory-defaults This action restores the device to its factory default settings. This action does not take any parameters.
Chapter 6 RUGGEDCOM NETCONF RUGGEDCOM ROX II Actions Reference Guide
]]>]]> • {fileType} The type of file to copy to the device. Must be one of the following: config, featurekey, elancertificate, ipseccertificate, cacertificate, or crlfiles. • {url} The URL and filename of the RUGGEDCOM NETCONF file to copy. The file transfer supports SCP, SFTP, FTPS, and HTTP.
RUGGEDCOM NETCONF Chapter 6 Reference Guide RUGGEDCOM ROX II Actions {format}{fileName}]]>]]> • {format} The format for the configuration file: cli. • {fileName} The name for the configuration file. Section 6.1.16 full-configuration-load This action loads a configuration from the specified file found in the /var/lib/config directory on the device.
RUGGEDCOM NETCONF Chapter 6 Reference Guide RUGGEDCOM ROX II Actions ]]>]]> • {interfaceName} The name of the modem interface. • {atCommand} The AT command to send to the modem. The command must begin with the prefix AT. Section 6.2.3 reset (Cellular Modem) This action resets the cellular modem.
Chapter 6 RUGGEDCOM NETCONF RUGGEDCOM ROX II Actions Reference Guide ]]>]]> • {module} The module number for the cellular modem. • {port} The port number for the cellular modem. • {atCommand} The AT command to send to the modem. The command must begin with the prefix AT. Section 6.2.5 reset (Serial Port) This action resets the specified serial port.
RUGGEDCOM NETCONF Chapter 6 Reference Guide RUGGEDCOM ROX II Actions ]]>]]> • {module} The module number for the serial port. • {port} The port number for the serial port. Section 6.2.7 restart-serserver This action restarts the serial server. This action does not take any parameters.
Chapter 6 RUGGEDCOM NETCONF RUGGEDCOM ROX II Actions Reference Guide Section 6.2.9 clear-port-stats (Switch Port) This action clears the port statistics for the specified switch port. Specify the switch module and port in the and elements. This action does not take any parameters.
RUGGEDCOM NETCONF Chapter 6 Reference Guide RUGGEDCOM ROX II Actions Section 6.2.11 clear-cable-stats-port (Switch Port) This action clears the cable test diagnostic statistics on the specified switch port. Specify the switch module and port in the and elements. This action does not take any parameters.
RUGGEDCOM NETCONF Chapter 6 Reference Guide RUGGEDCOM ROX II Actions • {crlFileName} The amount of time, in minutes, to wait before starting the link failover test. Section 6.3.4 cancel-test (Link Failover) This action stops the link failover test on the specified interface. Specify the name of the interface in the element.
Chapter 6 RUGGEDCOM NETCONF RUGGEDCOM ROX II Actions Reference Guide • Section 6.5.8, “remove-crl (IPSEC)” Section 6.5.1 display-public-key (IPSEC) This action displays the public RSA key. This action does not take any parameters. ...
Chapter 6 RUGGEDCOM NETCONF RUGGEDCOM ROX II Actions Reference Guide • {remotePort} The remote host network port for the ssh protocol, • {caCertFilePath} The absolute path and file name for the ca-certificate file on the remote host. • {remoteUserName} A user name on the remote host. •...
RUGGEDCOM NETCONF Chapter 6 Reference Guide RUGGEDCOM ROX II Actions Section 6.5.6 remove-ca-certificate (IPSEC) This action removes the specified ca-certificate from the IPSec configuration. Specify the certificate name in the element. This action does not take any parameters. ...
Chapter 6 RUGGEDCOM NETCONF RUGGEDCOM ROX II Actions Reference Guide Section 6.5.8 remove-crl (IPSEC) This action removes the specified crl file from the IPSec configuration. Specify the crl file name in the element. This action does not take any parameters.
RUGGEDCOM NETCONF Chapter 7 Reference Guide Examples Examples This section provides examples of how to set and retrieve data on a device. Each example shows how to set or retrieve a specific element or set of elements. Each example also demonstrates a general NETCONF concept, such as how to retrieve data from the running configuration, or how to use special attributes to delete or replace data.
Page 90
Chapter 7 RUGGEDCOM NETCONF Examples Reference Guide NETCONF Example Example demonstrates these techniques: Section 7.22, “Retrieving Static Multicast Status on a Layer 3 Device” Querying for running configuration data. Section 7.23, “Replacing an IP Address” Recommended editing procedure. Replacing data with the nc:operation="replace" attribute. Section 7.24, “Configuring a Port to Dynamically Obtain an IP Recommended editing procedure.
Page 91
RUGGEDCOM NETCONF Chapter 7 Reference Guide Examples NETCONF Example Example demonstrates these techniques: Section 7.50, “Removing a CRL File” Removing a CRL file from the device. CONTENTS • Section 7.1, “Getting the System Name” • Section 7.2, “Getting the ROX Release” • Section 7.3, “Getting the Chassis Status” •...
Chapter 7 RUGGEDCOM NETCONF Examples Reference Guide • Section 7.35, “Enabling the DHCP Server Service” • Section 7.36, “Disabling an Ethernet Port” • Section 7.37, “Enabling an Ethernet Port” • Section 7.38, “Checking an IP Address on a Specific Port using the Interfaces Namespace” •...
]]>]]> Section 7.3 Getting the Chassis Status In this example, a single queries retrieves the chassis status information from the device. This example shows how to issue a query for state information directly from the device.
Chapter 7 RUGGEDCOM NETCONF Examples Reference Guide This example shows how to use a NETCONF action on a running device. ]]>]]> Section 7.6 Clearing All Alarms In this example, a single clears all alarms on the device with the clear-all-alarms action. This example shows how to use a NETCONF action on a running device.
RUGGEDCOM NETCONF Chapter 7 Reference Guide Examples ]]>]]> Section 7.9 Changing the System Name by Locking and Committing In this example, multiple requests change the system name in the candidate configuration and then commit the changes.
RUGGEDCOM NETCONF Chapter 7 Reference Guide Examples Section 7.11 Creating a Static VLAN In this example, multiple requests create a static VLAN in the candidate configuration and then commit the changes. The following shows the recommended procedure for making configuration changes on a device: Lock the running configuration:
]]>]]> Unlock the target configuration: ]]>]]> Section 7.12 Assigning a PVID on a Port In this example, multiple requests assign a PVID to a port in the candidate configuration and then commit the changes.
]]>]]> Section 7.15 Deleting an IP Address In this example, multiple requests delete an IP address in the candidate configuration and then commit the changes. This example shows the recommended procedure for making configuration changes on a device. The following procedure shows how container elements need to be deleted for some elements.
Chapter 7 RUGGEDCOM NETCONF Examples Reference Guide Section 7.18 Retrieving all IP Addresses from the Running Configuration In this example, a single request retrieves all IP addresses from the running configuration on a device. The following is the typical procedure for querying data from the running configuration. •...
RUGGEDCOM NETCONF Chapter 7 Reference Guide Examples Section 7.20 Configuring Static Multicast Routing on a Layer 3 Device In this example, multiple requests enable static multicast routing in the candidate configuration and then commit the changes. The following is the recommended procedure for making configuration changes on a device. Lock the running configuration:
]]>]]> Section 7.23 Replacing an IP Address In this example, multiple requests replace an IP address in the candidate configuration and then commit the changes. The following is the recommended procedure for making configuration changes on a device. This example also shows how to use the nc:operation="replace"...
]]>]]> Section 7.26 Enabling the OSPF Passive-Default Option In this example, multiple requests configure the OSPF passive-default option in the candidate configuration and then commit the changes. The following is the recommended procedure for making configuration changes on a device. Lock the running configuration:
]]>]]> Unlock the candidate configuration: ]]>]]> Unlock the running configuration: ]]>]]> Section 7.27 Configure an OSPF Non-Passive Port In this example, multiple ...
Chapter 7 RUGGEDCOM NETCONF Examples Reference Guide ]]>]]> Section 7.29 Enabling the OSPF redistribute-connected Option In this example, multiple requests enable the OSPF redistribute-connected option in the candidate configuration and then commit the changes. The following is the recommended procedure for making configuration changes on a device. Lock the running configuration:
RUGGEDCOM NETCONF Chapter 7 Reference Guide Examples Unlock the candidate configuration: ]]>]]> Unlock the running configuration: ]]>]]> Section 7.30 Enabling OSPF on a Layer 3 Device In this example, multiple ...
RUGGEDCOM NETCONF Chapter 7 Reference Guide Examples Section 7.32 Retrieving All Data from the Routing Namespace In this example, a single request retrieves all configuration data from the Routing namespace. The following is the typical procedure for querying data from the running configuration. •...
Chapter 7 RUGGEDCOM NETCONF Examples Reference Guide Section 7.35 Enabling the DHCP Server Service In this example, multiple requests enable the DHCP server service in the candidate configuration and then commit the changes. The following is the recommended procedure for making configuration changes on a device. Lock the running configuration:
]]>]]> Unlock the running configuration: ]]>]]> Section 7.36 Disabling an Ethernet Port In this example, multiple requests disable an Ethernet port in the candidate configuration and then commit the changes.
Chapter 7 RUGGEDCOM NETCONF Examples Reference Guide fe-4-1]]>]]> Section 7.39 Retreiving All Data From Running Database Including Default Values In this example, a single request retrieves information (including default values) from a specified configuration on a running database.
]]>]]> IMPORTANT! The password must be provided in hash format. Use a utility such as mkpasswd (available on most Linux distributions) to generate a hashed password. For a Windows-based utility, contact Siemens Customer Service. Lock the running configuration: ...
Chapter 7 RUGGEDCOM NETCONF Examples Reference Guide • {ip type} The public ip address type of the IPSec tunnel. Must be one of the following: address, any, default-route hostname, or none. • {ip value} The value is based on the selected {ip type} value. For example, if address is chosen as the ip type, an ip address is defined here.
RUGGEDCOM NETCONF Chapter 7 Reference Guide Examples • {name} The name of the CA certificate. • {ca name} The name of the Certificate Authority. • {private key name} The name of the private key that corresponds to the CA certificate. Section 7.45 Configuring a Signed CA Certificate This action replaces an existing signed CA certificate on the device with the contents of a new CA certificate.
RUGGEDCOM NETCONF Chapter 7 Reference Guide Examples ]]>]]> • {name} The name of the .crl file. Section 7.48 Removing a Certificate This action removes the specified certificate from the device. Specify the certificate name in the element. This action does not take any parameters.
Chapter 7 RUGGEDCOM NETCONF Examples Reference Guide xmlns="http://ruggedcom.com/ns/rmf_security"> {name} -----BEGIN CERTIFICATE----- MIID5zCCAs+gAwIBAgIJAK85lF/lcPaKMA0GCSqGSIb3DQEBCwUAMIGJMQswCQYD... SrCK8Rwp9S89hiwD5FNlQcIvYnjacNg8G9l8CNiLF71BK4lEroPk3ZVTpw== -----END CERTIFICATE----- ]]>]]> • {name} The name of the CA certificate to remove. Section 7.50 Removing a CRL File This action removes the specified .crl file from the device. Specify the .crl file name in the element. This action does not take any parameters.
RUGGEDCOM NETCONF Chapter 8 Reference Guide NETCONF XML Elements NETCONF XML Elements This chapter details the individual XML elements that can be utilized when using NETCONF. CONTENTS • Section 8.1, “]]>]]>” • Section 8.2, “” • Section 8.3, “” • Section 8.4, “” • Section 8.5, “”...
Chapter 8 RUGGEDCOM NETCONF NETCONF XML Elements Reference Guide Section 8.2 Description: Requests the graceful termination of a NETCONF session. When a NETCONF server receives a request, it does the following: • gracefully closes the session • releases any locks and resources associated with the session •...
RUGGEDCOM NETCONF Chapter 8 Reference Guide NETCONF XML Elements 30 ]]>]]> Section 8.4 Description: Creates or replaces a specified configuration with a specified configuration. If the configuration exists, it is overwritten. If the configuration does not exist, a new configuration is created. Parameters: ...
Chapter 8 RUGGEDCOM NETCONF NETCONF XML Elements Reference Guide Section 8.6 Description: Discards changes to the candidate configuration and reverts the candidate configuration to the currently running configuration. Example: To discard changes to the candidate configuration: ]]>]]> Section 8.7 ...
RUGGEDCOM NETCONF Chapter 8 Reference Guide NETCONF XML Elements message-idrpc ]]>]]> Section 8.9 Description: Requests all or part of a specified configuration. Parameters: : the configuration to query: candidate or running. : identifies the configuration segments to retrieve. The filter element contains elements describing the configuration segment to return.
RUGGEDCOM NETCONF Chapter 8 Reference Guide NETCONF XML Elements Section 8.11 Description: Terminates a specified NETCONF session, cancelling any operations in progress and releasing all locks, resources, and connections for the session. does not roll back the configuration or state changes made by the configuration being terminated. If the session being terminated is performing a confirmed commit when the ...
Chapter 8 RUGGEDCOM NETCONF NETCONF XML Elements Reference Guide Section 8.13 Description: Appears in an message to indicate successful completion of a NETCONF request. Example: An message indicating the successful completion of a NETCONF request: ...
RUGGEDCOM NETCONF Chapter 8 Reference Guide NETCONF XML Elements : shows a human-readable error message describing the error condition. This element does not appear if no error message is available for the error condition. : shows protocol or data-model error content. This element does not appear if no error content is available for the error condition.
Chapter 8 RUGGEDCOM NETCONF NETCONF XML Elements Reference Guide protocollock-deniederror3216]]>]]> Section 8.17 Description: Specifies the configuration on which to perform on operation. is used in the , , , , and ...
RUGGEDCOM NETCONF Chapter 8 Reference Guide NETCONF XML Elements ]]>]]> Section 8.19 Description: Validates the syntax of the specified configuration. After making changes to the candidate configuration, use to make sure the syntax is correct. Parameters: : specifies the configuration to validate: or . Response: If the NETCONF device can complete the request, it sends an ...
Page 148
Chapter 8 RUGGEDCOM NETCONF NETCONF XML Elements Reference Guide ...
