NSO 6.3 version & ios xr router 설정

토폴로지망

IOS XR Config 설정

CE01 Config 설정

hostname CE01

username nso
 group root-lr
 group cisco-support
 secret 
! (Note: Replace with an actual secret for nso if different, or keep if generic)

interface MgmtEth0/RP0/CPU0/0
 description NSO_Management_Interface
 ipv4 address 172.16.1.11 255.255.255.0

interface GigabitEthernet0/0/0/0
 description Link_to_Net_Cloud_from_CE01
 ipv4 address 192.168.1.1 255.255.255.252

interface GigabitEthernet0/0/0/1
 description Link_to_VPC7
 ipv4 address 10.0.7.1 255.255.255.0

interface preconfigure MgmtEth0/0/0/0
 description NSO_Management_Interface
 ipv4 address 172.16.1.11 255.255.255.0

router static
 address-family ipv4 unicast
  0.0.0.0/0 172.16.1.1

router ospf 1
 address-family ipv4 unicast
  area 0
   interface GigabitEthernet0/0/0/0
    network point-to-point

ssh server vrf default
ssh server netconf vrf default

CE02 Config

hostname CE02

username nso
 group root-lr
 group cisco-support
 secret 
! (Note: Replace with an actual secret for nso if different, or keep if generic)

interface MgmtEth0/RP0/CPU0/0
 description NSO_Management_Interface
 ipv4 address 172.16.1.13 255.255.255.0

interface GigabitEthernet0/0/0/2
 description Link_to_VPC4
 ipv4 address 10.0.4.1 255.255.255.0

interface GigabitEthernet0/0/0/3
 description Link_to_Net_Cloud_from_CE02
 ipv4 address 192.168.1.5 255.255.255.252

router static
 address-family ipv4 unicast
  0.0.0.0/0 172.16.1.1

router ospf 1
 address-family ipv4 unicast
  area 0
   interface GigabitEthernet0/0/0/3
    network point-to-point

ssh server vrf default
ssh server netconf vrf default

end

CE03 Config

hostname CE03

username nso
 group root-lr
 group cisco-support
 secret 


interface MgmtEth0/RP0/CPU0/0
 description NSO_Management_Interface
 ipv4 address 172.16.1.12 255.255.255.0

interface GigabitEthernet0/0/0/0
 description Link_to_Net_Cloud_from_CE03
 ipv4 address 192.168.1.9 255.255.255.252

interface GigabitEthernet0/0/0/1
 description Link_to_VPC5
 ipv4 address 10.0.5.1 255.255.255.0


router static
 address-family ipv4 unicast
  0.0.0.0/0 172.16.1.1

router ospf 1
 address-family ipv4 unicast
  area 0
   interface GigabitEthernet0/0/0/0
    network point-to-point

ssh server vrf default
ssh server netconf vrf default

end

NSO 접속 및 설정

디바이스 생성
Group 설정 및 IP, Port 할당
IOS xr일 경우 device-type 설정
State unlock 변경
이후 Action
1. Ping test 확인
2. Fetch-host-keys
  1. Group 설정해 놓은 ID PW 접속 후 RSA key를 받는 작업
3. connect
4. sync-from
결과
sync-from에 성공했을 시 해당 제품의 상태 확인 가능

Error 해결

Package 인식을 못할시

nso-6.5(설치한 버전)
cp -r ~/nso-6.5/packages/neds/* ~/nso-instance/packages/

ncs_cli -C -u admin
packages reload force

위의 방법으로 해결 불가시
```
ncs --stop
ncs
packages reload force
```
해당 VM 재시작

Router 연결 오류

IOS XR 기준 Memory: 60G이상, CPU: 6개 이상

devices fetch-ssh-host-keys error

ssh server vrf default
ssh server netconf vrf default

해당 코드가 정확하게 입력 되었는지 확인

devices sync-form error

기존에 설정한 포트 확인 830, 그 외의 포트일 경우 안될 확률 있음
1. Port 22 + 포트가 라우터에 열려있는지 확인
show running-config devices global-setting ssh-algorithms public-key | details
1. NSO에 CLI 접속 후 위에 명령어를 쳐서 ssh-rsa 포함 여부 확인
2. 없으면 아래 명령어로 추가
  1. config
  2. devices global-setting ssh-algorithms pulbic-key ssh-rsa
3. 기존에 ssh 연결되어 fingerprint가 발생한다면 아래 화면에서 SSH 제거
4. Time out 증가
```
각 라우터 접속 후
configure terminal
ssh server rate-limit 180
```

비밀번호 오류

아래의 명령어처럼 비밀번호 재설정

devices authgroups group default umap admin remote-name admin remote-password admin\"\!\@\#\%\^\&\*\(\)\_\+

참고

https://community.cisco.com/t5/nso-developer-hub-discussions/failed-to-connect-to-device-x-connection-refused-ssh/td-p/3868114

https://community.cisco.com/t5/devnet-sandbox/connectivity-issues-to-network-devices-in-nso-sandbox/td-p/4497195

https://quickview.cloudapps.cisco.com/quickview/bug/CSCvo17475

https://community.cisco.com/t5/crosswork-automation-hub-knowledge-articles/how-to-use-nso-in-a-network-which-is-not-completely-configured/ta-p/3651176

https://community.cisco.com/t5/nso-developer-hub-discussions/nso-restconf-sync-from-fails-with-nedcom-connect-authenticate/td-p/4694597

https://www.cisco.com/c/ko_kr/support/docs/security-vpn/secure-shell-ssh/4145-ssh.html