Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Global configuration

AuthorityConductor IP@
Tenants

Tenant is as the endpoints/users that need a similar set of
accesses to common set of services

Name = endpoint + service  >> control access to Network


subtenants: 

Hierarchical scope

subtenant.tenant   or   sub3.sub2.sub1.tenant

Service Policydefine Vector ( broadband or MPLS )
Security Policyencrypted or not
Service

Name

Scope: Private / Public ????

Matching criteria:   

Transport protocol: UDP/TCP/ICMP/GRE

Action:  Allow / Deny

Security Policy:

Service Policy:

Access Policy:





PCLI

show fib router xxxxxxx


Global Servicepacket without a Tenant ( default bucket )


Apply ( 3 ways )to Network Interface
Network interfaceNeighborhoods:  subnet(s) – map to – tenant

dynamic: using the metadata
PCLIshow tenant members router all


Local Configuration: Router

service-route ( for localbreakout )

service-route SSR

https://docs.128technology.com/docs/config_reference_guide/#service-route

Branch:  point to the peer

DC: point the DC servers, or GW

service-route policy ( LB )

https://docs.128technology.com/docs/config_reference_guide/#service-route-policy


Router Provisioning

ZTP or Zero-Touch Provisioningsalt-minion call the salt-master on the Conductor
OTP or One-Touch Provisioning
Automated ProvisionerConductor provisioning


ISO image

Centos 7.5

128T sofware

Useful OS settings and tools


OTP's ISO 

DHCP client on interfaces

Web server GUI

>> Need to address the Conductor IP@

 Interactive ISO




...