Network Topologies using Nokia Service Router Linux

This repository includes three labs that build spine-leaf data centre networks using Nokia Service Router Linux (srlinux) and Conatinerlab. The labs documentation can be found here.

The main features of Nokia srlinux can be found here and they include:

• Open Architucture
• Ground-up support of YANG

Nokia SRLinux can be managed with CLI, gNMI, JSON-RPC, and SNMP.

For more information about creating Containerlab topologies using srlinux, consult this resource.

The labs included in this repository construct three topologies:

1. A small topology that includes three switches and four servers. This topology demonstrates the configuration of VxLAN.
2. A spine-leaf topology that includes six routers and five servers. This topology also demonstrates the configuration of VxLAN using a different approach.
3. A spine-leaf topology that includes five routers and three servers. This topology demonstrates the use of gNMIc to collect telemetry from the network.

To use one of these labs, switch the to corresponding directory and start the lab. For example:

$ cd tiny
tiny$ sudo clab deploy

Nokia Switch Access

1. CLI Access

   $ docker exec -it clab-srl-s1 sr_cli
   

2. SSH Access

   $ ssh clab-srl-s1
   

To exit, type 'quit'.

3. SNMP Connectivity

   To test SNMP connection (using default community string):

   $ docker exec -it clab-srl-mgm snmpwalk -v 2c -c public 172.20.20.11
   

4. JSON-RPC Connectivity

   curl http://admin:admin@clab-srl-s1/jsonrpc -d @- << EOF
   {
       "jsonrpc": "2.0",
       "id": 0,
       "method": "get",
       "params":
       {
           "commands":
           [
               {
                   "path": "/system/information/version",
                   "datastore": "state"
               }
           ]
       }
   }
   EOF
   

Host access

Depending on the type of host container used, you may be able to:

• execute commands diractly via Docker:

  $ docker exec -it clab-srl-h1 ping 192.168.3.101
  

• or, access the shell:

  $ docker exec -it clab-srl-h1 bash
  

• or log in via ssh (use admin/admin)

  $ ssh admin@clab-tiny-h2
  

Traffic capture

To capture traffic from one of the hosts:

docker exec clab-tiny-h1 tshark -i eth1

To capture traffic on links between routers, attach a container to one of the links:

docker run -it --rm --privileged --net container:clab-tiny-r2 akpinar/alpine:lat
est tshark -i e1-12

or

docker run -it --rm --net container:clab-tiny-r2 nicolaka/netshoot tshark -i e1-12

Misc show commands

show interface brief

show network-instance summary

Show routing table

show network-instance default route-table ipv4-unicast summary

to verify BGP neighbours:

show network-instance default protocols bgp neighbor

Verify connectivity from a router (running mode)

ping network-instance default 10.10.10.102

Verify connectivity from a host to another

$ docker exec -it clab-srl-h1 ping 192.168.3.101