diff options
Diffstat (limited to 'examples/tests.yaml')
| -rw-r--r-- | examples/tests.yaml | 477 |
1 files changed, 477 insertions, 0 deletions
diff --git a/examples/tests.yaml b/examples/tests.yaml new file mode 100644 index 0000000..6b5875f --- /dev/null +++ b/examples/tests.yaml @@ -0,0 +1,477 @@ +--- +anta.tests.aaa: + - VerifyTacacsSourceIntf: + intf: Management0 + vrf: default + - VerifyTacacsServers: + servers: + - 1.1.1.1 + - 2.2.2.2 + vrf: default + - VerifyTacacsServerGroups: + groups: + - admin + - user + - VerifyAuthenMethods: + methods: + - local + - none + - logging + types: + - login + - enable + - dot1x + - VerifyAuthzMethods: + methods: + - local + - none + - logging + types: + - commands + - exec + - VerifyAcctDefaultMethods: + methods: + - local + - none + - logging + types: + - system + - exec + - commands + - dot1x + - VerifyAcctConsoleMethods: + methods: + - local + - none + - logging + types: + - system + - exec + - commands + - dot1x + +anta.tests.bfd: + - VerifyBFDSpecificPeers: + bfd_peers: + - peer_address: 192.0.255.8 + vrf: default + - peer_address: 192.0.255.7 + vrf: default + - VerifyBFDPeersIntervals: + bfd_peers: + - peer_address: 192.0.255.8 + vrf: default + tx_interval: 1200 + rx_interval: 1200 + multiplier: 3 + - peer_address: 192.0.255.7 + vrf: default + tx_interval: 1200 + rx_interval: 1200 + multiplier: 3 + - VerifyBFDPeersHealth: + down_threshold: 2 + +anta.tests.configuration: + - VerifyZeroTouch: + - VerifyRunningConfigDiffs: + +anta.tests.connectivity: + - VerifyReachability: + hosts: + - source: Management0 + destination: 1.1.1.1 + vrf: MGMT + - source: Management0 + destination: 8.8.8.8 + vrf: MGMT + - VerifyLLDPNeighbors: + neighbors: + - port: Ethernet1 + neighbor_device: DC1-SPINE1 + neighbor_port: Ethernet1 + - port: Ethernet2 + neighbor_device: DC1-SPINE2 + neighbor_port: Ethernet1 + +anta.tests.field_notices: + - VerifyFieldNotice44Resolution: + - VerifyFieldNotice72Resolution: + +anta.tests.hardware: + - VerifyTransceiversManufacturers: + manufacturers: + - Not Present + - Arista Networks + - Arastra, Inc. + - VerifyTemperature: + - VerifyTransceiversTemperature: + - VerifyEnvironmentSystemCooling: + - VerifyEnvironmentCooling: + states: + - ok + - VerifyEnvironmentPower: + states: + - ok + - VerifyAdverseDrops: + +anta.tests.interfaces: + - VerifyInterfaceUtilization: + - VerifyInterfaceErrors: + - VerifyInterfaceDiscards: + - VerifyInterfaceErrDisabled: + - VerifyInterfacesStatus: + interfaces: + - interface: Ethernet1 + state: up + - interface: Port-Channel100 + state: down + line_protocol_status: lowerLayerDown + - interface: Ethernet49/1 + state: adminDown + line_protocol_status: notPresent + - VerifyStormControlDrops: + - VerifyPortChannels: + - VerifyIllegalLACP: + - VerifyLoopbackCount: + number: 3 + - VerifySVI: + - VerifyL3MTU: + mtu: 1500 + ignored_interfaces: + - Vxlan1 + specific_mtu: + - Ethernet1: 2500 + - VerifyIPProxyARP: + interfaces: + - Ethernet1 + - Ethernet2 + - VerifyL2MTU: + mtu: 1500 + ignored_interfaces: + - Management1 + - Vxlan1 + specific_mtu: + - Ethernet1/1: 1500 + - VerifyInterfaceIPv4: + interfaces: + - name: Ethernet2 + primary_ip: 172.30.11.0/31 + secondary_ips: + - 10.10.10.0/31 + - 10.10.10.10/31 + - VerifyIpVirtualRouterMac: + mac_address: 00:1c:73:00:dc:01 + +anta.tests.logging: + - VerifyLoggingPersistent: + - VerifyLoggingSourceIntf: + interface: Management0 + vrf: default + - VerifyLoggingHosts: + hosts: + - 1.1.1.1 + - 2.2.2.2 + vrf: default + - VerifyLoggingLogsGeneration: + - VerifyLoggingHostname: + - VerifyLoggingTimestamp: + - VerifyLoggingAccounting: + - VerifyLoggingErrors: + +anta.tests.mlag: + - VerifyMlagStatus: + - VerifyMlagInterfaces: + - VerifyMlagConfigSanity: + - VerifyMlagReloadDelay: + reload_delay: 300 + reload_delay_non_mlag: 330 + - VerifyMlagDualPrimary: + detection_delay: 200 + errdisabled: True + recovery_delay: 60 + recovery_delay_non_mlag: 0 + - VerifyMlagPrimaryPriority: + primary_priority: 3276 + +anta.tests.multicast: + - VerifyIGMPSnoopingVlans: + vlans: + 10: False + 12: False + - VerifyIGMPSnoopingGlobal: + enabled: True + +anta.tests.profiles: + - VerifyUnifiedForwardingTableMode: + mode: 3 + - VerifyTcamProfile: + profile: vxlan-routing + +anta.tests.security: + - VerifySSHStatus: + - VerifySSHIPv4Acl: + number: 3 + vrf: default + - VerifySSHIPv6Acl: + number: 3 + vrf: default + - VerifyTelnetStatus: + - VerifyAPIHttpStatus: + - VerifyAPIHttpsSSL: + profile: default + - VerifyAPIIPv4Acl: + number: 3 + vrf: default + - VerifyAPIIPv6Acl: + number: 3 + vrf: default + - VerifyAPISSLCertificate: + certificates: + - certificate_name: ARISTA_SIGNING_CA.crt + expiry_threshold: 30 + common_name: AristaIT-ICA ECDSA Issuing Cert Authority + encryption_algorithm: ECDSA + key_size: 256 + - certificate_name: ARISTA_ROOT_CA.crt + expiry_threshold: 30 + common_name: Arista Networks Internal IT Root Cert Authority + encryption_algorithm: RSA + key_size: 4096 + - VerifyBannerLogin: + login_banner: | + # Copyright (c) 2023-2024 Arista Networks, Inc. + # Use of this source code is governed by the Apache License 2.0 + # that can be found in the LICENSE file. + - VerifyBannerMotd: + motd_banner: | + # Copyright (c) 2023-2024 Arista Networks, Inc. + # Use of this source code is governed by the Apache License 2.0 + # that can be found in the LICENSE file. + - VerifyIPv4ACL: + ipv4_access_lists: + - name: default-control-plane-acl + entries: + - sequence: 10 + action: permit icmp any any + - sequence: 20 + action: permit ip any any tracked + - sequence: 30 + action: permit udp any any eq bfd ttl eq 255 + - name: LabTest + entries: + - sequence: 10 + action: permit icmp any any + - sequence: 20 + action: permit tcp any any range 5900 5910 + +anta.tests.services: + - VerifyHostname: + hostname: s1-spine1 + - VerifyDNSLookup: + domain_names: + - arista.com + - www.google.com + - arista.ca + - VerifyDNSServers: + dns_servers: + - server_address: 10.14.0.1 + vrf: default + priority: 1 + - server_address: 10.14.0.11 + vrf: MGMT + priority: 0 + - VerifyErrdisableRecovery: + reasons: + - reason: acl + interval: 30 + - reason: bpduguard + interval: 30 + +anta.tests.snmp: + - VerifySnmpStatus: + vrf: default + - VerifySnmpIPv4Acl: + number: 3 + vrf: default + - VerifySnmpIPv6Acl: + number: 3 + vrf: default + - VerifySnmpLocation: + location: New York + - VerifySnmpContact: + contact: Jon@example.com + +anta.tests.software: + - VerifyEOSVersion: + versions: + - 4.25.4M + - 4.26.1F + - VerifyTerminAttrVersion: + versions: + - v1.13.6 + - v1.8.0 + - VerifyEOSExtensions: + +anta.tests.stp: + - VerifySTPMode: + mode: rapidPvst + vlans: + - 10 + - 20 + - VerifySTPBlockedPorts: + - VerifySTPCounters: + - VerifySTPForwardingPorts: + vlans: + - 10 + - 20 + - VerifySTPRootPriority: + priority: 32768 + instances: + - 10 + - 20 + +anta.tests.system: + - VerifyUptime: + minimum: 86400 + - VerifyReloadCause: + - VerifyCoredump: + - VerifyAgentLogs: + - VerifyCPUUtilization: + - VerifyMemoryUtilization: + - VerifyFileSystemUtilization: + - VerifyNTP: + +anta.tests.vlan: + - VerifyVlanInternalPolicy: + policy: ascending + start_vlan_id: 1006 + end_vlan_id: 4094 + +anta.tests.vxlan: + - VerifyVxlan1Interface: + - VerifyVxlanConfigSanity: + - VerifyVxlanVniBinding: + bindings: + 10010: 10 + 10020: 20 + - VerifyVxlanVtep: + vteps: + - 10.1.1.5 + - 10.1.1.6 + - VerifyVxlan1ConnSettings: + source_interface: Loopback1 + udp_port: 4789 + +anta.tests.routing: + generic: + - VerifyRoutingProtocolModel: + model: multi-agent + - VerifyRoutingTableSize: + minimum: 2 + maximum: 20 + - VerifyRoutingTableEntry: + vrf: default + routes: + - 10.1.0.1 + - 10.1.0.2 + bgp: + - VerifyBGPPeerCount: + address_families: + - afi: "evpn" + num_peers: 2 + - afi: "ipv4" + safi: "unicast" + vrf: "PROD" + num_peers: 2 + - afi: "ipv4" + safi: "unicast" + vrf: "default" + num_peers: 3 + - afi: "ipv4" + safi: "multicast" + vrf: "DEV" + num_peers: 3 + - VerifyBGPPeersHealth: + address_families: + - afi: "evpn" + - afi: "ipv4" + safi: "unicast" + vrf: "default" + - afi: "ipv6" + safi: "unicast" + vrf: "DEV" + - VerifyBGPSpecificPeers: + address_families: + - afi: "evpn" + peers: + - 10.1.0.1 + - 10.1.0.2 + - afi: "ipv4" + safi: "unicast" + peers: + - 10.1.254.1 + - 10.1.255.0 + - 10.1.255.2 + - 10.1.255.4 + - VerifyBGPExchangedRoutes: + bgp_peers: + - peer_address: 172.30.255.5 + vrf: default + advertised_routes: + - 192.0.254.5/32 + received_routes: + - 192.0.255.4/32 + - peer_address: 172.30.255.1 + vrf: default + advertised_routes: + - 192.0.255.1/32 + - 192.0.254.5/32 + received_routes: + - 192.0.254.3/32 + - VerifyBGPPeerMPCaps: + bgp_peers: + - peer_address: 172.30.11.1 + vrf: default + capabilities: + - ipv4Unicast + - VerifyBGPPeerASNCap: + bgp_peers: + - peer_address: 172.30.11.1 + vrf: default + - VerifyBGPPeerRouteRefreshCap: + bgp_peers: + - peer_address: 172.30.11.1 + vrf: default + - VerifyBGPPeerMD5Auth: + bgp_peers: + - peer_address: 172.30.11.1 + vrf: default + - peer_address: 172.30.11.5 + vrf: default + - VerifyEVPNType2Route: + vxlan_endpoints: + - address: 192.168.20.102 + vni: 10020 + - address: aac1.ab5d.b41e + vni: 10010 + - VerifyBGPAdvCommunities: + bgp_peers: + - peer_address: 172.30.11.17 + vrf: default + - peer_address: 172.30.11.21 + vrf: default + - VerifyBGPTimers: + bgp_peers: + - peer_address: 172.30.11.1 + vrf: default + hold_time: 180 + keep_alive_time: 60 + - peer_address: 172.30.11.5 + vrf: default + hold_time: 180 + keep_alive_time: 60 + ospf: + - VerifyOSPFNeighborState: + - VerifyOSPFNeighborCount: + number: 3 |