summaryrefslogtreecommitdiffstats
path: root/examples/tests.yaml
diff options
context:
space:
mode:
Diffstat (limited to 'examples/tests.yaml')
-rw-r--r--examples/tests.yaml477
1 files changed, 477 insertions, 0 deletions
diff --git a/examples/tests.yaml b/examples/tests.yaml
new file mode 100644
index 0000000..6b5875f
--- /dev/null
+++ b/examples/tests.yaml
@@ -0,0 +1,477 @@
+---
+anta.tests.aaa:
+ - VerifyTacacsSourceIntf:
+ intf: Management0
+ vrf: default
+ - VerifyTacacsServers:
+ servers:
+ - 1.1.1.1
+ - 2.2.2.2
+ vrf: default
+ - VerifyTacacsServerGroups:
+ groups:
+ - admin
+ - user
+ - VerifyAuthenMethods:
+ methods:
+ - local
+ - none
+ - logging
+ types:
+ - login
+ - enable
+ - dot1x
+ - VerifyAuthzMethods:
+ methods:
+ - local
+ - none
+ - logging
+ types:
+ - commands
+ - exec
+ - VerifyAcctDefaultMethods:
+ methods:
+ - local
+ - none
+ - logging
+ types:
+ - system
+ - exec
+ - commands
+ - dot1x
+ - VerifyAcctConsoleMethods:
+ methods:
+ - local
+ - none
+ - logging
+ types:
+ - system
+ - exec
+ - commands
+ - dot1x
+
+anta.tests.bfd:
+ - VerifyBFDSpecificPeers:
+ bfd_peers:
+ - peer_address: 192.0.255.8
+ vrf: default
+ - peer_address: 192.0.255.7
+ vrf: default
+ - VerifyBFDPeersIntervals:
+ bfd_peers:
+ - peer_address: 192.0.255.8
+ vrf: default
+ tx_interval: 1200
+ rx_interval: 1200
+ multiplier: 3
+ - peer_address: 192.0.255.7
+ vrf: default
+ tx_interval: 1200
+ rx_interval: 1200
+ multiplier: 3
+ - VerifyBFDPeersHealth:
+ down_threshold: 2
+
+anta.tests.configuration:
+ - VerifyZeroTouch:
+ - VerifyRunningConfigDiffs:
+
+anta.tests.connectivity:
+ - VerifyReachability:
+ hosts:
+ - source: Management0
+ destination: 1.1.1.1
+ vrf: MGMT
+ - source: Management0
+ destination: 8.8.8.8
+ vrf: MGMT
+ - VerifyLLDPNeighbors:
+ neighbors:
+ - port: Ethernet1
+ neighbor_device: DC1-SPINE1
+ neighbor_port: Ethernet1
+ - port: Ethernet2
+ neighbor_device: DC1-SPINE2
+ neighbor_port: Ethernet1
+
+anta.tests.field_notices:
+ - VerifyFieldNotice44Resolution:
+ - VerifyFieldNotice72Resolution:
+
+anta.tests.hardware:
+ - VerifyTransceiversManufacturers:
+ manufacturers:
+ - Not Present
+ - Arista Networks
+ - Arastra, Inc.
+ - VerifyTemperature:
+ - VerifyTransceiversTemperature:
+ - VerifyEnvironmentSystemCooling:
+ - VerifyEnvironmentCooling:
+ states:
+ - ok
+ - VerifyEnvironmentPower:
+ states:
+ - ok
+ - VerifyAdverseDrops:
+
+anta.tests.interfaces:
+ - VerifyInterfaceUtilization:
+ - VerifyInterfaceErrors:
+ - VerifyInterfaceDiscards:
+ - VerifyInterfaceErrDisabled:
+ - VerifyInterfacesStatus:
+ interfaces:
+ - interface: Ethernet1
+ state: up
+ - interface: Port-Channel100
+ state: down
+ line_protocol_status: lowerLayerDown
+ - interface: Ethernet49/1
+ state: adminDown
+ line_protocol_status: notPresent
+ - VerifyStormControlDrops:
+ - VerifyPortChannels:
+ - VerifyIllegalLACP:
+ - VerifyLoopbackCount:
+ number: 3
+ - VerifySVI:
+ - VerifyL3MTU:
+ mtu: 1500
+ ignored_interfaces:
+ - Vxlan1
+ specific_mtu:
+ - Ethernet1: 2500
+ - VerifyIPProxyARP:
+ interfaces:
+ - Ethernet1
+ - Ethernet2
+ - VerifyL2MTU:
+ mtu: 1500
+ ignored_interfaces:
+ - Management1
+ - Vxlan1
+ specific_mtu:
+ - Ethernet1/1: 1500
+ - VerifyInterfaceIPv4:
+ interfaces:
+ - name: Ethernet2
+ primary_ip: 172.30.11.0/31
+ secondary_ips:
+ - 10.10.10.0/31
+ - 10.10.10.10/31
+ - VerifyIpVirtualRouterMac:
+ mac_address: 00:1c:73:00:dc:01
+
+anta.tests.logging:
+ - VerifyLoggingPersistent:
+ - VerifyLoggingSourceIntf:
+ interface: Management0
+ vrf: default
+ - VerifyLoggingHosts:
+ hosts:
+ - 1.1.1.1
+ - 2.2.2.2
+ vrf: default
+ - VerifyLoggingLogsGeneration:
+ - VerifyLoggingHostname:
+ - VerifyLoggingTimestamp:
+ - VerifyLoggingAccounting:
+ - VerifyLoggingErrors:
+
+anta.tests.mlag:
+ - VerifyMlagStatus:
+ - VerifyMlagInterfaces:
+ - VerifyMlagConfigSanity:
+ - VerifyMlagReloadDelay:
+ reload_delay: 300
+ reload_delay_non_mlag: 330
+ - VerifyMlagDualPrimary:
+ detection_delay: 200
+ errdisabled: True
+ recovery_delay: 60
+ recovery_delay_non_mlag: 0
+ - VerifyMlagPrimaryPriority:
+ primary_priority: 3276
+
+anta.tests.multicast:
+ - VerifyIGMPSnoopingVlans:
+ vlans:
+ 10: False
+ 12: False
+ - VerifyIGMPSnoopingGlobal:
+ enabled: True
+
+anta.tests.profiles:
+ - VerifyUnifiedForwardingTableMode:
+ mode: 3
+ - VerifyTcamProfile:
+ profile: vxlan-routing
+
+anta.tests.security:
+ - VerifySSHStatus:
+ - VerifySSHIPv4Acl:
+ number: 3
+ vrf: default
+ - VerifySSHIPv6Acl:
+ number: 3
+ vrf: default
+ - VerifyTelnetStatus:
+ - VerifyAPIHttpStatus:
+ - VerifyAPIHttpsSSL:
+ profile: default
+ - VerifyAPIIPv4Acl:
+ number: 3
+ vrf: default
+ - VerifyAPIIPv6Acl:
+ number: 3
+ vrf: default
+ - VerifyAPISSLCertificate:
+ certificates:
+ - certificate_name: ARISTA_SIGNING_CA.crt
+ expiry_threshold: 30
+ common_name: AristaIT-ICA ECDSA Issuing Cert Authority
+ encryption_algorithm: ECDSA
+ key_size: 256
+ - certificate_name: ARISTA_ROOT_CA.crt
+ expiry_threshold: 30
+ common_name: Arista Networks Internal IT Root Cert Authority
+ encryption_algorithm: RSA
+ key_size: 4096
+ - VerifyBannerLogin:
+ login_banner: |
+ # Copyright (c) 2023-2024 Arista Networks, Inc.
+ # Use of this source code is governed by the Apache License 2.0
+ # that can be found in the LICENSE file.
+ - VerifyBannerMotd:
+ motd_banner: |
+ # Copyright (c) 2023-2024 Arista Networks, Inc.
+ # Use of this source code is governed by the Apache License 2.0
+ # that can be found in the LICENSE file.
+ - VerifyIPv4ACL:
+ ipv4_access_lists:
+ - name: default-control-plane-acl
+ entries:
+ - sequence: 10
+ action: permit icmp any any
+ - sequence: 20
+ action: permit ip any any tracked
+ - sequence: 30
+ action: permit udp any any eq bfd ttl eq 255
+ - name: LabTest
+ entries:
+ - sequence: 10
+ action: permit icmp any any
+ - sequence: 20
+ action: permit tcp any any range 5900 5910
+
+anta.tests.services:
+ - VerifyHostname:
+ hostname: s1-spine1
+ - VerifyDNSLookup:
+ domain_names:
+ - arista.com
+ - www.google.com
+ - arista.ca
+ - VerifyDNSServers:
+ dns_servers:
+ - server_address: 10.14.0.1
+ vrf: default
+ priority: 1
+ - server_address: 10.14.0.11
+ vrf: MGMT
+ priority: 0
+ - VerifyErrdisableRecovery:
+ reasons:
+ - reason: acl
+ interval: 30
+ - reason: bpduguard
+ interval: 30
+
+anta.tests.snmp:
+ - VerifySnmpStatus:
+ vrf: default
+ - VerifySnmpIPv4Acl:
+ number: 3
+ vrf: default
+ - VerifySnmpIPv6Acl:
+ number: 3
+ vrf: default
+ - VerifySnmpLocation:
+ location: New York
+ - VerifySnmpContact:
+ contact: Jon@example.com
+
+anta.tests.software:
+ - VerifyEOSVersion:
+ versions:
+ - 4.25.4M
+ - 4.26.1F
+ - VerifyTerminAttrVersion:
+ versions:
+ - v1.13.6
+ - v1.8.0
+ - VerifyEOSExtensions:
+
+anta.tests.stp:
+ - VerifySTPMode:
+ mode: rapidPvst
+ vlans:
+ - 10
+ - 20
+ - VerifySTPBlockedPorts:
+ - VerifySTPCounters:
+ - VerifySTPForwardingPorts:
+ vlans:
+ - 10
+ - 20
+ - VerifySTPRootPriority:
+ priority: 32768
+ instances:
+ - 10
+ - 20
+
+anta.tests.system:
+ - VerifyUptime:
+ minimum: 86400
+ - VerifyReloadCause:
+ - VerifyCoredump:
+ - VerifyAgentLogs:
+ - VerifyCPUUtilization:
+ - VerifyMemoryUtilization:
+ - VerifyFileSystemUtilization:
+ - VerifyNTP:
+
+anta.tests.vlan:
+ - VerifyVlanInternalPolicy:
+ policy: ascending
+ start_vlan_id: 1006
+ end_vlan_id: 4094
+
+anta.tests.vxlan:
+ - VerifyVxlan1Interface:
+ - VerifyVxlanConfigSanity:
+ - VerifyVxlanVniBinding:
+ bindings:
+ 10010: 10
+ 10020: 20
+ - VerifyVxlanVtep:
+ vteps:
+ - 10.1.1.5
+ - 10.1.1.6
+ - VerifyVxlan1ConnSettings:
+ source_interface: Loopback1
+ udp_port: 4789
+
+anta.tests.routing:
+ generic:
+ - VerifyRoutingProtocolModel:
+ model: multi-agent
+ - VerifyRoutingTableSize:
+ minimum: 2
+ maximum: 20
+ - VerifyRoutingTableEntry:
+ vrf: default
+ routes:
+ - 10.1.0.1
+ - 10.1.0.2
+ bgp:
+ - VerifyBGPPeerCount:
+ address_families:
+ - afi: "evpn"
+ num_peers: 2
+ - afi: "ipv4"
+ safi: "unicast"
+ vrf: "PROD"
+ num_peers: 2
+ - afi: "ipv4"
+ safi: "unicast"
+ vrf: "default"
+ num_peers: 3
+ - afi: "ipv4"
+ safi: "multicast"
+ vrf: "DEV"
+ num_peers: 3
+ - VerifyBGPPeersHealth:
+ address_families:
+ - afi: "evpn"
+ - afi: "ipv4"
+ safi: "unicast"
+ vrf: "default"
+ - afi: "ipv6"
+ safi: "unicast"
+ vrf: "DEV"
+ - VerifyBGPSpecificPeers:
+ address_families:
+ - afi: "evpn"
+ peers:
+ - 10.1.0.1
+ - 10.1.0.2
+ - afi: "ipv4"
+ safi: "unicast"
+ peers:
+ - 10.1.254.1
+ - 10.1.255.0
+ - 10.1.255.2
+ - 10.1.255.4
+ - VerifyBGPExchangedRoutes:
+ bgp_peers:
+ - peer_address: 172.30.255.5
+ vrf: default
+ advertised_routes:
+ - 192.0.254.5/32
+ received_routes:
+ - 192.0.255.4/32
+ - peer_address: 172.30.255.1
+ vrf: default
+ advertised_routes:
+ - 192.0.255.1/32
+ - 192.0.254.5/32
+ received_routes:
+ - 192.0.254.3/32
+ - VerifyBGPPeerMPCaps:
+ bgp_peers:
+ - peer_address: 172.30.11.1
+ vrf: default
+ capabilities:
+ - ipv4Unicast
+ - VerifyBGPPeerASNCap:
+ bgp_peers:
+ - peer_address: 172.30.11.1
+ vrf: default
+ - VerifyBGPPeerRouteRefreshCap:
+ bgp_peers:
+ - peer_address: 172.30.11.1
+ vrf: default
+ - VerifyBGPPeerMD5Auth:
+ bgp_peers:
+ - peer_address: 172.30.11.1
+ vrf: default
+ - peer_address: 172.30.11.5
+ vrf: default
+ - VerifyEVPNType2Route:
+ vxlan_endpoints:
+ - address: 192.168.20.102
+ vni: 10020
+ - address: aac1.ab5d.b41e
+ vni: 10010
+ - VerifyBGPAdvCommunities:
+ bgp_peers:
+ - peer_address: 172.30.11.17
+ vrf: default
+ - peer_address: 172.30.11.21
+ vrf: default
+ - VerifyBGPTimers:
+ bgp_peers:
+ - peer_address: 172.30.11.1
+ vrf: default
+ hold_time: 180
+ keep_alive_time: 60
+ - peer_address: 172.30.11.5
+ vrf: default
+ hold_time: 180
+ keep_alive_time: 60
+ ospf:
+ - VerifyOSPFNeighborState:
+ - VerifyOSPFNeighborCount:
+ number: 3