Feat(eos_cli_config_gen): add ip verify unicast source to ethernet-, …

…sub- and vlan-interfaces
aristanetworks · Jan 15, 2024 · 1de61be · 1de61be
1 parent 2c393e4
commit 1de61be
Show file tree

Hide file tree

Showing 21 changed files with 405 additions and 5 deletions.
diff --git a/...ta/avd/molecule/eos_cli_config_gen/documentation/devices/ethernet-interfaces.md b/...ta/avd/molecule/eos_cli_config_gen/documentation/devices/ethernet-interfaces.md
@@ -344,6 +344,7 @@ interface Ethernet1
    bgp session tracker ST1
    no switchport
    ip address 172.31.255.1/31
+   ip verify unicast source reachable-via rx
    bfd interval 500 min-rx 500 multiplier 5
    bfd echo
    priority-flow-control on

diff --git a/...vd/molecule/eos_cli_config_gen/documentation/devices/port-channel-interfaces.md b/...vd/molecule/eos_cli_config_gen/documentation/devices/port-channel-interfaces.md
@@ -364,6 +364,7 @@ interface Port-Channel5
    l2 mtu 8000
    l2 mru 8000
    mlag 5
+   ip verify unicast source reachable-via rx
    storm-control broadcast level 1
    storm-control multicast level 1
    storm-control unknown-unicast level 1

diff --git a/...arista/avd/molecule/eos_cli_config_gen/documentation/devices/vlan-interfaces.md b/...arista/avd/molecule/eos_cli_config_gen/documentation/devices/vlan-interfaces.md
@@ -335,8 +335,8 @@ interface Vlan91
 interface Vlan92
    description SVI Description
    ip proxy-arp
-   ip directed-broadcast
    ip address 10.10.92.1/24
+   ip directed-broadcast
 !
 interface Vlan110
    description PVLAN Primary with vlan mapping
@@ -423,6 +423,7 @@ interface Vlan2002
    description SVI Description
    no autostate
    vrf Tenant_B
+   ip verify unicast source reachable-via rx
    isis enable EVPN_UNDERLAY
    ip address virtual 10.2.2.1/24
 !

diff --git a/...llections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ethernet-interfaces.cfg b/...llections/arista/avd/molecule/eos_cli_config_gen/intended/configs/ethernet-interfaces.cfg
@@ -16,6 +16,7 @@ interface Ethernet1
    bgp session tracker ST1
    no switchport
    ip address 172.31.255.1/31
+   ip verify unicast source reachable-via rx
    bfd interval 500 min-rx 500 multiplier 5
    bfd echo
    priority-flow-control on

diff --git a/...tions/arista/avd/molecule/eos_cli_config_gen/intended/configs/port-channel-interfaces.cfg b/...tions/arista/avd/molecule/eos_cli_config_gen/intended/configs/port-channel-interfaces.cfg
@@ -26,6 +26,7 @@ interface Port-Channel5
    l2 mtu 8000
    l2 mru 8000
    mlag 5
+   ip verify unicast source reachable-via rx
    storm-control broadcast level 1
    storm-control multicast level 1
    storm-control unknown-unicast level 1

diff --git a/...e_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vlan-interfaces.cfg b/...e_collections/arista/avd/molecule/eos_cli_config_gen/intended/configs/vlan-interfaces.cfg
@@ -160,8 +160,8 @@ interface Vlan91
 interface Vlan92
    description SVI Description
    ip proxy-arp
-   ip directed-broadcast
    ip address 10.10.92.1/24
+   ip directed-broadcast
 !
 interface Vlan110
    description PVLAN Primary with vlan mapping
@@ -248,6 +248,7 @@ interface Vlan2002
    description SVI Description
    no autostate
    vrf Tenant_B
+   ip verify unicast source reachable-via rx
    isis enable EVPN_UNDERLAY
    ip address virtual 10.2.2.1/24
 !

diff --git a/...ctions/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ethernet-interfaces.yml b/...ctions/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/ethernet-interfaces.yml
@@ -28,6 +28,9 @@ ethernet_interfaces:
       multiplier: 5
     bgp:
       session_tracker: ST1
+    ip_verify:
+      unicast_source:
+        reachable_via: rx
     eos_cli: |
       comment
       Comment created from eos_cli under ethernet_interfaces.Ethernet1

diff --git a/...ns/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/port-channel-interfaces.yml b/...ns/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/port-channel-interfaces.yml
@@ -23,6 +23,9 @@ port_channel_interfaces:
       session_tracker: ST2
     l2_mtu: 8000
     l2_mru: 8000
+    ip_verify:
+      unicast_source:
+        reachable_via: rx
     eos_cli: |
       comment
       Comment created from eos_cli under port_channel_interfaces.Port-Channel5

diff --git a/...ollections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/vlan-interfaces.yml b/...ollections/arista/avd/molecule/eos_cli_config_gen/inventory/host_vars/vlan-interfaces.yml
@@ -16,6 +16,9 @@ vlan_interfaces:
     ip_address_virtual: 10.2.2.1/24
     no_autostate: true
     isis_enable: "EVPN_UNDERLAY"
+    ip_verify:
+      unicast_source:
+        reachable_via: rx
 
   - name: Vlan81
     description: IPv6 Virtual Address

diff --git a/...lections/arista/avd/roles/eos_cli_config_gen/docs/tables/ethernet-interfaces.md b/...lections/arista/avd/roles/eos_cli_config_gen/docs/tables/ethernet-interfaces.md
@@ -78,6 +78,9 @@
     | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;ip_address</samp>](## "ethernet_interfaces.[].ip_address") | String |  |  |  | IPv4 address/mask or "dhcp" |
     | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;ip_address_secondaries</samp>](## "ethernet_interfaces.[].ip_address_secondaries") | List, items: String |  |  |  |  |
     | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-&nbsp;&lt;str&gt;</samp>](## "ethernet_interfaces.[].ip_address_secondaries.[]") | String |  |  |  |  |
+    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;ip_verify</samp>](## "ethernet_interfaces.[].ip_verify") | Dictionary |  |  |  |  |
+    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;unicast_source</samp>](## "ethernet_interfaces.[].ip_verify.unicast_source") | Dictionary |  |  |  |  |
+    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;reachable_via</samp>](## "ethernet_interfaces.[].ip_verify.unicast_source.reachable_via") | String |  |  | Valid Values:<br>- <code>any</code><br>- <code>rx</code> |  |
     | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;dhcp_client_accept_default_route</samp>](## "ethernet_interfaces.[].dhcp_client_accept_default_route") | Boolean |  |  |  | Install default-route obtained via DHCP |
     | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;dhcp_server_ipv4</samp>](## "ethernet_interfaces.[].dhcp_server_ipv4") | Boolean |  |  |  | Enable IPv4 DHCP server. |
     | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;dhcp_server_ipv6</samp>](## "ethernet_interfaces.[].dhcp_server_ipv6") | Boolean |  |  |  | Enable IPv6 DHCP server. |
@@ -502,6 +505,9 @@
         ip_address: <str>
         ip_address_secondaries:
           - <str>
+        ip_verify:
+          unicast_source:
+            reachable_via: <str; "any" | "rx">
 
         # Install default-route obtained via DHCP
         dhcp_client_accept_default_route: <bool>

diff --git a/...ions/arista/avd/roles/eos_cli_config_gen/docs/tables/port-channel-interfaces.md b/...ions/arista/avd/roles/eos_cli_config_gen/docs/tables/port-channel-interfaces.md
@@ -140,6 +140,9 @@
     | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;vlan</samp>](## "port_channel_interfaces.[].ptp.vlan") | String |  |  |  | VLAN can be 'all' or list of vlans as string |
     | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;transport</samp>](## "port_channel_interfaces.[].ptp.transport") | String |  |  | Valid Values:<br>- <code>ipv4</code><br>- <code>ipv6</code><br>- <code>layer2</code> |  |
     | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;ip_address</samp>](## "port_channel_interfaces.[].ip_address") | String |  |  |  | IPv4 address/mask |
+    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;ip_verify</samp>](## "port_channel_interfaces.[].ip_verify") | Dictionary |  |  |  |  |
+    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;unicast_source</samp>](## "port_channel_interfaces.[].ip_verify.unicast_source") | Dictionary |  |  |  |  |
+    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;reachable_via</samp>](## "port_channel_interfaces.[].ip_verify.unicast_source.reachable_via") | String |  |  | Valid Values:<br>- <code>any</code><br>- <code>rx</code> |  |
     | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;ip_nat</samp>](## "port_channel_interfaces.[].ip_nat") | Dictionary |  |  |  |  |
     | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;destination</samp>](## "port_channel_interfaces.[].ip_nat.destination") | Dictionary |  |  |  |  |
     | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;dynamic</samp>](## "port_channel_interfaces.[].ip_nat.destination.dynamic") | List, items: Dictionary |  |  |  |  |
@@ -475,6 +478,9 @@
 
         # IPv4 address/mask
         ip_address: <str>
+        ip_verify:
+          unicast_source:
+            reachable_via: <str; "any" | "rx">
         ip_nat:
           destination:
             dynamic:

diff --git a/..._collections/arista/avd/roles/eos_cli_config_gen/docs/tables/vlan-interfaces.md b/..._collections/arista/avd/roles/eos_cli_config_gen/docs/tables/vlan-interfaces.md
@@ -26,6 +26,9 @@
     | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;ip_address_virtual</samp>](## "vlan_interfaces.[].ip_address_virtual") | String |  |  |  | IPv4_address/Mask |
     | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;ip_address_virtual_secondaries</samp>](## "vlan_interfaces.[].ip_address_virtual_secondaries") | List, items: String |  |  |  |  |
     | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;-&nbsp;&lt;str&gt;</samp>](## "vlan_interfaces.[].ip_address_virtual_secondaries.[]") | String |  |  |  | IPv4_address/Mask |
+    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;ip_verify</samp>](## "vlan_interfaces.[].ip_verify") | Dictionary |  |  |  |  |
+    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;unicast_source</samp>](## "vlan_interfaces.[].ip_verify.unicast_source") | Dictionary |  |  |  |  |
+    | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;reachable_via</samp>](## "vlan_interfaces.[].ip_verify.unicast_source.reachable_via") | String |  |  | Valid Values:<br>- <code>any</code><br>- <code>rx</code> |  |
     | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;ip_igmp</samp>](## "vlan_interfaces.[].ip_igmp") | Boolean |  |  |  |  |
     | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;ip_igmp_version</samp>](## "vlan_interfaces.[].ip_igmp_version") | Integer |  |  | Min: 1<br>Max: 3 |  |
     | [<samp>&nbsp;&nbsp;&nbsp;&nbsp;ip_helpers</samp>](## "vlan_interfaces.[].ip_helpers") | List, items: Dictionary |  |  |  | List of DHCP servers |
@@ -215,6 +218,9 @@
 
             # IPv4_address/Mask
           - <str>
+        ip_verify:
+          unicast_source:
+            reachable_via: <str; "any" | "rx">
         ip_igmp: <bool>
         ip_igmp_version: <int; 1-3>
 

diff --git a/...ollections/arista/avd/roles/eos_cli_config_gen/schemas/eos_cli_config_gen.jsonschema.json b/...ollections/arista/avd/roles/eos_cli_config_gen/schemas/eos_cli_config_gen.jsonschema.json
diff --git a/...ble_collections/arista/avd/roles/eos_cli_config_gen/schemas/eos_cli_config_gen.schema.yml b/...ble_collections/arista/avd/roles/eos_cli_config_gen/schemas/eos_cli_config_gen.schema.yml
diff --git a/...ista/avd/roles/eos_cli_config_gen/schemas/schema_fragments/ethernet_interfaces.schema.yml b/...ista/avd/roles/eos_cli_config_gen/schemas/schema_fragments/ethernet_interfaces.schema.yml
@@ -276,6 +276,17 @@ keys:
           type: list
           items:
             type: str
+        ip_verify:
+          type: dict
+          keys:
+            unicast_source:
+              type: dict
+              keys:
+                reachable_via:
+                  type: str
+                  valid_values:
+                    - any
+                    - rx
         dhcp_client_accept_default_route:
           type: bool
           description: Install default-route obtained via DHCP

diff --git a/.../avd/roles/eos_cli_config_gen/schemas/schema_fragments/port_channel_interfaces.schema.yml b/.../avd/roles/eos_cli_config_gen/schemas/schema_fragments/port_channel_interfaces.schema.yml
@@ -580,6 +580,17 @@ keys:
         ip_address:
           type: str
           description: IPv4 address/mask
+        ip_verify:
+          type: dict
+          keys:
+            unicast_source:
+              type: dict
+              keys:
+                reachable_via:
+                  type: str
+                  valid_values:
+                    - any
+                    - rx
         ip_nat:
           type: dict
           $ref: "eos_cli_config_gen#/$defs/interface_ip_nat"

diff --git a/...s/arista/avd/roles/eos_cli_config_gen/schemas/schema_fragments/vlan_interfaces.schema.yml b/...s/arista/avd/roles/eos_cli_config_gen/schemas/schema_fragments/vlan_interfaces.schema.yml
@@ -68,6 +68,17 @@ keys:
           items:
             type: str
             description: IPv4_address/Mask
+        ip_verify:
+          type: dict
+          keys:
+            unicast_source:
+              type: dict
+              keys:
+                reachable_via:
+                  type: str
+                  valid_values:
+                    - any
+                    - rx
         ip_igmp:
           type: bool
         ip_igmp_version:

diff --git a/ansible_collections/arista/avd/roles/eos_cli_config_gen/templates/eos/ethernet-interfaces.j2 b/ansible_collections/arista/avd/roles/eos_cli_config_gen/templates/eos/ethernet-interfaces.j2
@@ -346,6 +346,13 @@ interface {{ ethernet_interface.name }}
           ethernet_interface.bfd.multiplier is arista.avd.defined %}
    bfd interval {{ ethernet_interface.bfd.interval }} min-rx {{ ethernet_interface.bfd.min_rx }} multiplier {{ ethernet_interface.bfd.multiplier }}
 {%     endif %}
+{%     if ethernet_interface.ip_verify is arista.avd.defined %}
+{%         if ethernet_interface.ip_verify.unicast_source is arista.avd.defined %}
+{%             if ethernet_interface.ip_verify.unicast_source.reachable_via is arista.avd.defined %}
+   ip verify unicast source reachable-via {{ ethernet_interface.ip_verify.unicast_source.reachable_via }}
+{%             endif %}
+{%         endif %}
+{%     endif %}
 {%     if ethernet_interface.bfd.echo is arista.avd.defined(true) %}
    bfd echo
 {%     elif ethernet_interface.bfd.echo is arista.avd.defined(false) %}

diff --git a/..._collections/arista/avd/roles/eos_cli_config_gen/templates/eos/port-channel-interfaces.j2 b/..._collections/arista/avd/roles/eos_cli_config_gen/templates/eos/port-channel-interfaces.j2
@@ -226,6 +226,13 @@ interface {{ port_channel_interface.name }}
 {%     if port_channel_interface.ip_address is arista.avd.defined %}
    ip address {{ port_channel_interface.ip_address }}
 {%     endif %}
+{%     if port_channel_interface.ip_verify is arista.avd.defined %}
+{%         if port_channel_interface.ip_verify.unicast_source is arista.avd.defined %}
+{%             if port_channel_interface.ip_verify.unicast_source.reachable_via is arista.avd.defined %}
+   ip verify unicast source reachable-via {{ port_channel_interface.ip_verify.unicast_source.reachable_via }}
+{%             endif %}
+{%         endif %}
+{%     endif %}
 {%     if port_channel_interface.ipv6_enable is arista.avd.defined(true) %}
    ipv6 enable
 {%     endif %}