Alright friends, so let's walk through the validation challenge then. So we've
been asked some questions about netconf.
The first one is, "Are configurations made via netconf secure?"
Well the answer to this is a resounding "Yes, they are absolutely secure"
because the entire channel has been encrypted because essentially we're going
to be using SSH as transportway,
which as we know is a secure protocol.
Alright, so fairly simple and resounding answer to the first question, what is
the next one? WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Well, we're asked which port number does netconf use? What does SSH use?
As the actual transport. Although SSH typically is using port 22, in this case
here that is not the case.
Instead this time we're going to be using SSH port 830.
Now the next question is asking is netconf capable of retrieving operational
state data?
And this is kind of borne out of the idea that netconf is the network
configuration protocol.
And remember that netconf was essentially built to handle the shortcomings of WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And remember that netconf was essentially built to handle the shortcomings of
SNMP's ability to handle configurations.
So clearly we know that netconf was designed with making configuration changes
in mind,
but it's also very important to realize that we still can retrieve operational
state data.
So this would be things like the interface counters, this would be things like
the state of our OSPF adjacencies.
All of this type of data absolutely can be retrieved via netconf, no problem at
all.
Now next one, this one might be a little bit more in depth.
How can netconf help us implement configuration changes in a more reliable WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
How can netconf help us implement configuration changes in a more reliable
manner?
Well, first thing is that netconf gives us the ability to utilize a candidate
configuration.
So if we want to make configuration changes to a whole bunch of devices, we can
send out those configs and just put it into the candidate config.
And then once we are ready for those configurations to go live altogether, we
can then send a commit message to ultimately copy over the configuration that
is now in the candidate data store into the live running data store.
Now in a similar way, netconf's edit config rpc is actually pretty flexible. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Now in a similar way, netconf's edit config rpc is actually pretty flexible.
We can specify if we want to merge configurations i.e. just add configurations
to the already existing configuration on the device.
Or if we so wish we can choose to replace very particular parts of the
configuration.
So say for example, we want to replace all of the routing information on the
device.
We can just simply target that very precise piece of data.
And as we saw, we can also target very particular pieces of our configuration
for deletion also.
So lots of flexibility with netconf and that ability to not have the changes go WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So lots of flexibility with netconf and that ability to not have the changes go
live immediately really is very, very valuable.
Now the last thing is we're asked are there any particular tools we can use to
send netconf configurations, whether actually are a whole bunch of different
utilities, but one that we saw in this particular skill, which is very well
known as one known as NC client, the net conf clients.
So this particular library allows us to send all the rpcs that we need, the get
rpcs, the getconf, rpcs, the edit rpcs, copy configurations, so on, so forth. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
rpcs, the getconf, rpcs, the edit rpcs, copy configurations, so on, so forth.
And when we get our data back, say for example, operational data, we can also
manipulate that information utilizing Python directly.
So really is a very, very good tool to use.
So friends, that is us for our validation challenge on netconf.
I hope it's been informative for you and I'd like to thank you for viewing.