在Catalyst 9000系列交换机(Cat9k/C9k)上配置ZTP并对其进行故障排除

简介

本文档介绍在Cisco Catalyst 9k系列交换机上配置和调配零接触调配(ZTP)。 

先决条件

要求 

Cisco 建议您了解以下主题：

• 交换机上的动态主机配置协议(DHCP)服务器配置
• 基本Python代码 
• HTTP/TFTP服务基础知识

支持的平台

• 运行16.5.1a版本的Catalyst 9300系列交换机
• 运行16.5.1a版本的Catalyst 9500系列交换机
• 运行16.6.2版的Catalyst 9400系列交换机

设置HTTP服务

步骤1:在终端主机中安装HTTP服务（示例Linux）

sudo apt update
sudo apt install apache2

第二步：创建Python文件ztp_http.py

如果出现任何权限问题，请使用  chmod 777  授予文件完全权限。

Python文件具有以下任务：

1. Show命令验证。

2.环回配置。

3.配置验证。

#Importing cli module
import cli

print "\n\n Running show version \n\n"
cli.executep('show version')

print "\n\n Configure a Loopback Interface \n\n"
cli.configurep(["interface loop 25", "ip address 192.168.0.25 255.255.255.255", "end"])

print "\n\n Running show ip interface brief \n\n"
cli.executep('show ip int brief | i up')

print "\n\n ZTP is success \n\n"

此文件必须存储在  /var/www/html  在Linux机器中。

vm: /var/www/html$ -ls -l ztp_http.py
-rwxrwxrwx 1 root root 346 Apr 04 14:14 ztp_http.py

第三步：检验HTTP服务和侦听端口

使用service命令验证HTTP服务是否已启动并立即运行。

vm: /var/www/html$ sudo service apache2 status
Active: active (running)

检验HTTP服务当前侦听的端口。

vm: /var/www/html$ sudo netstat -anp | grep apache
tcp6 0 :::80 :::* LISTEN 1998/apache2 <<<< Listens at 80

第四步：端口的浏览器验证

使用任何Web浏览器验证文件是否可下载。

1.打开同一台计算机中的任何浏览器，在本例中为Linux。

2.在搜索栏中输入此内容  localhost:80/ztp_http.py

3.自动下载文件。

设置DHCP服务

步骤1:调配接口配置（新设备）

新交换机应连接到G1/0/1。

enable
configure terminal
interface g1/0/1
description New_9300_switch
switchport
switchport mode access
switchport access vlan 1

第二步：HTTP服务器连接的接口配置

HTTP服务器(Linux)直接连接到3850交换机，例如接口G1/0/2。

enable
configure terminal
interface g1/0/2
description Linux_is_connected_here
switchport
switchport mode access
switchport access vlan 1

第三步：DHCP作用域配置

使用选项67配置DHCP池的示例。

enable
configure terminal
ip dhcp pool ZTP_Pool
network 10.0.0.0 255.255.255.0
default-router 10.0.0.1
option 67 ascii http://10.0.0.2:80/ztp_http.py
end

验证

当前没有可用于此配置的验证过程。

工作输出

No startup-config, starting autoinstall/pnp/ztp...

Autoinstall will terminate if any input is detected on console


--- System Configuration Dialog ---

Would you like to enter the initial configuration dialog? [yes/no]: <<<<<<<< Do not provide any input during this time.
Autoinstall trying DHCPv6 on Vlan1

Autoinstall trying DHCPv4 on Vlan1

Acquired IPv4 address 10.0.0.10 on Interface Vlan1
Received following DHCPv4 options:
bootfile : http://10.0.0.2:80/ztp_http.py

stop Autoip process
OK to enter CLI now...

pnp-discovery can be monitored without entering enable mode

Entering enable mode will stop pnp-discovery

Attempting bootfile http://10.0.0.2:80/ztp_http.py

Loading http://10.0.0.2:80/ztp_http.py
Loading http://10.0.0.2:80/ztp_http.py day0guestshell activated successfully
Current state is: ACTIVATED
day0guestshell started successfully
Current state is: RUNNING
Guestshell enabled successfully


Running show version         <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< show command executed


Cisco IOS XE Software, Version 17.06.04
Cisco IOS Software [Bengaluru], Catalyst L3 Switch Software (CAT9K_IOSXE), Version 17.6.4, RELEASE SOFTWARE (fc1)

<snipped>

Model Number : C9300L-48T-4X
System Serial Number : FOC2531LGM8
CLEI Code Number :
Switch Ports Model SW Version SW Image Mode
------ ----- ----- ---------- ---------- ----
* 1 53 C9300L-48T-4X 17.06.04 CAT9K_IOSXE BUNDLE




Configure a Loopback interface    <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< configuration


Line 1 SUCCESS: interface loop 25
Line 2 SUCCESS: ip address 192.168.0.25 255.255.255.255
Line 3 SUCCESS: end




Running show ip int brief  <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<< Config Verification


Vlan1 10.0.0.10 YES DHCP up up
Vlan4094 192.168.2.1 YES manual up down
GigabitEthernet0/0 unassigned YES unset up up
GigabitEthernet1/0/2 unassigned YES unset up up
GigabitEthernet1/0/3 unassigned YES unset up up
Ap1/0/1 unassigned YES unset up up
Loopback25 192.168.0.25 YES other up up




ZTP is success




Guestshell destroyed successfully
Script execution success!  <<<<<<<<<<<<<<<<<<< Success message

故障排除

本部分提供的信息可用于对配置进行故障排除。

常见问题

1.网络中存在的另一台DHCP服务器

No startup-config, starting autoinstall/pnp/ztp...

Autoinstall will terminate if any input is detected on console


--- System Configuration Dialog ---

Would you like to enter the initial configuration dialog? [yes/no]:
Autoinstall trying DHCPv6 on Vlan1

Autoinstall trying DHCPv4 on Vlan1

Acquired IPv4 address 192.168.45.117 on Interface Vlan1 <<<<<<<<<< Gets different ip from another DHCP server.
Received following DHCPv4 options:
hostname : Switch

stop Autoip process
OK to enter CLI now...

pnp-discovery can be monitored without entering enable mode

Entering enable mode will stop pnp-discovery
Guestshell destroyed successfully

stop Autoip process
% Please answer 'yes' or 'no'.
Would you like to enter the initial configuration dialog? [yes/no]: no

2. Python文件错误

--- System Configuration Dialog ---

Would you like to enter the initial configuration dialog? [yes/no]:
Autoinstall trying DHCPv6 on Vlan1

Autoinstall trying DHCPv4 on Vlan1

Acquired IPv4 address 10.106.37.69 on Interface Vlan1
Received following DHCPv4 options:
bootfile : http://10.106.37.59:80/ztp_http.py

stop Autoip process
OK to enter CLI now...

pnp-discovery can be monitored without entering enable mode

Entering enable mode will stop pnp-discovery

Attempting bootfile http://10.106.37.59:80/ztp_http.py

Loading http://10.106.37.59:80/ztp_http.py
Loading http://10.106.37.59:80/ztp_http.py day0guestshell activated successfully
Current state is: ACTIVATED
day0guestshell started successfully
Current state is: RUNNING
Guestshell enabled successfully
File "/bootflash/guest-share/downloaded_script.py", line 1
print "\n\n Running show version \n\n"
^
SyntaxError: Missing parentheses in call to 'print'. Did you mean print("\n\n Running show version \n\n")?  <<<<<< Error

Guestshell destroyed successfully
Script execution success!

3. HTTP服务端口号

HTTP服务正在侦听不同的端口（例如8080），但选项67的DHCP配置指向80。

enable
configure terminal
ip dhcp excluded-address 10.0.0.2
ip dhcp pool ZTP_Pool
network 10.0.0.0 255.255.255.0
default-router 10.0.0.1
option 67 ascii http://10.0.0.2:80/ztp_http.py    <<<<<<<<<<<<< Change to 8080

4.重复的IP地址

检验DHCP作用域并排除分配给HTTP服务器的IP地址。

enable
configure terminal
ip dhcp excluded-address 10.0.0.2     <<<<<<<<<<<<<<<< Exclude HTTP server address.
ip dhcp pool ZTP_Pool
network 10.0.0.0 255.255.255.0
default-router 10.0.0.1
option 67 ascii http://10.0.0.2:80/ztp_http.py

5.验证HTTP服务、停止和重新启动

vm: /var/www/html$ sudo service apache2 stop
vm: /var/www/html$ sudo service apache2 start
vm: /var/www/html$ sudo service apache2 status

数据包捕获

HTTP交换摘要：

10.0.0.10    10.0.0.2    HTTP  183  GET /http_ztp.py HTTP/1.1        <<<<<< HTTPGETrequest
10.0.0.2     10.0.0.10   HTTP  245  HTTP/1.1 200 OK (text/x-python)  <<<<<< Response

HTTP响应详细信息：

Hypertext Transfer Protocol
HTTP/1.1 200 OK\r\n
Content-Type: text/x-python\r\n
Content-Length: 20\r\n 
Date: Tue, 04 Apr 2023 12:24:02 GMT\r\n
Connection: keep-alive\r\n
Keep-Alive: timeout=5\r\n
\r\n
[HTTP response 1/2]
[Time since request: 0.204568243 seconds]
[Request in frame: 21]
[Next request in frame: 25]
[Next response in frame: 26]
[Request URI: http://10.0.0.2:80/http_ztp.py] >>>>>>> URL