NETCONF is a protocol that provides mechanisms for installing, manipulating, and deleting the configuration of network devices. It uses Extensible Markup Language (XML)-based data encoding for configuration data and protocol messages. The NETCONF operations are realized as remote procedure calls (RPCs).
On the DANOS vRouter, NETCONF is used within an SSH session through the SSH connection protocol. This mapping allows NETCONF to be run from a secure shell session by a user or an application. This mapping also makes sure that NETCONF complies with SSH IPv6.
On the DANOS vRouter, NETCONF is intended as a machine interface for management software and not intended as a user interface.
Refer to RFC 6242, Using the NETCONF Protocol over Secure Shell (SSH), at https://tools.ietf.org/html/rfc6242 for more information on using the NETCONF configuration protocol over SSH.
NETCONF capabilities supported on the DANOS vRouter
A NETCONF capability is a set of functions that supplements the base NETCONF specification. The capability is identified by a uniform resource identifier (URI). Capabilities augment the base operations of the device, describing both additional operations and the content that is allowed inside the operations. The client discovers the capabilities of the server and uses any additional operations, parameters, and content that are defined by those capabilities.
Following are the NETCONF capabilities that are supported on the DANOS vRouter:
Verifying Connections and Retrieving Operational Data Using NETCONF
The ping command displays whether a destination responded and how long the destination took to receive a reply. If an error occurs in the delivery to the destination, the command displays an error message.
The interface command displays information about an interface name. The command output displays all the IP addresses that are associated with the interface, administrator status, operational status, and description of the interface.
You can retrieve DANOS vRouter statistics of all types by using NETCONF. Some of the statistics are also available from the CLI. The configuration model is a subtree of the overall YANG tree, which is included in the ISO distribution for the DANOS vRouter.
Use ssh to obtain NETCONF information in XML format from the vRouter as follows.
Configure set service ssh and set service netconf on the DANOS vRouter.
From a remote system, use SSH as follows to access and sign in the DANOS vRouter, when prompted. ssh vyatta@<ip-address> -s netconf
Send a capabilities list enclosed within a <hello>...<hello/> element.