Upload the configuration files to the nodes

Before you begin

The following configuration files will be used to bring up basic configuration for SRL nodes:

  • node 1-1.cfg

  • node 1-2.cfg

  • node 1-3.cfg

  • node 1-4.cfg

  • node 2-1.cfg

  • node 2-2.cfg

Steps
 
1 

When the nodes are operational in the container lab, log in to the container lab and retrieve the IP addresses of the node using the below command:

root@<user>-container-srl ~]# cd /opt/srl/
[root@<user>-container-srl srl]# more nodes.json
{"kind": "srl", "group": "tier-1", "type": "ixrd2", "ports": ["40001:22", "57401:57400"], "number": 1, "image": "srlinux:25.3-la test", "image_org": "25.3.2-312", "name": "node1-1", "vip": "100.120.81.46", "systemIp": "93.1.81.46"}
{"kind": "srl", "group": "tier-1", "type": "ixrd2", "ports": ["40002:22", "57402:57400"], "number": 2, "image": "srlinux:25.3-la test", "image_org": "25.3.2-312", "name": "node1-2", "vip": "100.120.81.29", "systemIp": "93.2.81.29"}
{"kind": "srl", "group": "tier-1", "type": "ixrd2", "ports": ["40003:22", "57403:57400"], "number": 3, "image": "srlinux:25.3-la test", "image_org": "25.3.2-312", "name": "node1-3", "vip": "100.120.80.208", "systemIp": "93.3.80.208"}
{"kind": "srl", "group": "tier-1", "type": "ixrd2", "ports": ["40004:22", "57404:57400"], "number": 4, "image": "srlinux:25.3-la test", "image_org": "25.3.2-312", "name": "node1-4", "vip": "100.120.82.109", "systemIp": "93.4.82.109"}
{"kind": "srl", "group": "tier-2", "type": "ixrd3", "ports": ["40005:22", "57405:57400"], "number": 5, "image": "srlinux:25.3-la test", "image_org": "25.3.2-312", "name": "node2-1", "vip": "100.120.80.179", "systemIp": "93.5.80.179"}
{"kind": "srl", "group": "tier-2", "type": "ixrd3", "ports": ["40006:22", "57406:57400"], "number": 6, "image": "srlinux:25.3-la test", "image_org": "25.3.2-312", "name": "node2-2", "vip": "100.120.81.197", "systemIp": "93.6.81.197"}
{"kind": "srl", "type": "ixrd1", "ports": ["40021:22", "57421:57400"], "number": 7, "image": "srlinux:25.3-latest", "image_org": "25.3.2-312", "name": "ce-1", "vip": "100.120.82.133", "systemIp": "93.7.82.133"}
{"kind": "srl", "type": "ixrd1", "ports": ["40022:22", "57422:57400"], "number": 8, "image": "srlinux:25.3-latest", "image_org": "25.3.2-312", "name": "ce-2", "vip": "100.120.81.136", "systemIp": "93.8.81.136"}
{"kind": "srl", "type": "ixrd1", "ports": ["40023:22", "57423:57400"], "number": 9, "image": "srlinux:25.3-latest", "image_org": "25.3.2-312", "name": "ce-3", "vip": "100.120.81.158", "systemIp": "93.9.81.158"}
[root@<user>-container-srl srl]# ssh -p 40002 admin@100.120.81.46
2 

Copy the Key and certificate using the following command:

SSH to node: ssh -p 40001 admin@<node_1-1_ip>

Note: Use the exact port number with the IP address, as each node has a different port number.

A:admin@node1-1# info flat detail system tls server-profile tls-profile-1

The output will be as follows:

$aes1$ATNlExpKJ3yQtW8=$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   set / system tls server-profile tls-profile-1 certificate "-----BEGIN CERTIFICATE-----   MIIDnDCCAoSgAwIBAgIBATANBgkqhkiG9w0BAQsFADCBgTELMAkGA1UEBhMCQ0Ex   DzANBgNVBAcTBk90dGF3YTEQMA4GA1UECBMHT250YXJpbzEPMA0GA1UEBxMGT3R0   YXdhMQ4wDAYDVQQKEwVOb2tpYTEMMAoGA1UECxMDTlNNMSAwHgYDVQQDExdOU1Ag   RGV2ZWxvcG1lbnQgUm9vdCBDQTAeFw0yNTA1MjcxMjQ2MDFaFw0zNTA1MjUxMjQ2   MDFaMIGLMQswCQYDVQQGEwJERTELMAkGA1UECAwCSEUxEjAQBgNVBAcMCUZyYW5r   ZnVydDEMMAoGA1UECgwDSVBEMQwwCgYDVQQLDANQTE0xHjAcBgNVBAMMFUdJUklT   SEFfQ29udGFpbmVyX1NSTDEfMB0GCSqGSIb3DQEJARYQbm9ib2R5QG5va2lhLmNv   bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOsYWPqUVt7WRxG2RQlj   dkIsJVLwNdXw9tyX7Q/VPt8qQkb+jG/GQKyYhFsRzaML4XAo6XbnhXY0Utup4P9S   Vjv1UrAl1CNtk5I0gyRoSD9ldDiutOGLi8BR1mP2/XhLz8sVAHuJnat+GF6rCOz/   QPHMDWFgRufAeSv/LCD3b//pCAjricadvDuMorIMoCv1nSL/T5/fi7fs1K3j/RE7   QFQXScAqJ1RdS3qgOW41VMjGxgRxaDzDZxzRRp4XDIGUGwDlVxpLSLe3ZaiAnEYi   BIOoSKVBSgpTfiKLyYaKHOJ9TSMIfCTiQGQZGn2i7ILvcgFOyLC729/tmCKDjXZZ   fUECAwEAAaMTMBEwDwYDVR0RBAgwBocEZHhRxTANBgkqhkiG9w0BAQsFAAOCAQEA   iKn21SG/4hkLBRgRZle9Pg7DsnmenXGmqUq2aA0WZstwlKA2gTHT4ASZUNtCcnSx   /TwtseOlzEL7pZXz6Gz6UkvYAs92G6i6LTCAM6UGuFqYwrT/QmBekygWjxGqluOj   mJH4i1FfATz5Ejh8gS4pQJu/3sj+ZWix6kI6Wc4F7f/FNEVSJJgxGvRzkj2MXETq   Eb/Kl/NWrfGCqeSCYIE6K8lrlL8LrOMBTQOJUS1TPNPYX/DPGwkrsRXLIMJlzHxd   n2g39kiSXozPjP5gHcd8FYT+ykpUG1sYXkUDLa1g9lo1tPuxGtWxMXR02j2xrO3x   a8hNZ91OA5eN9G2ZD0NVAQ==   -----END CERTIFICATE-----" 

3 

Using Notepad++, open the node1-1 configuration file and search for "tls-profile-1", where "key" and "certificate" are present. Perform the following:

  1. Remove the key content that is in double quotes in the node1-1 configuration file, then paste the key content retrieved by executing the following command:

    A:admin@node1-1# info flat detail system tls server-profile tls-profile-1

  2. Remove the certificate content that is in the double quotes in the node1-1 configuration file, then paste the certificate content retrieved by executing the following command:

    A:admin@node1-1# info flat detail system tls server-profile tls-profile-1

  3. Copy the node1-1.cfg.json file to the node path: /etc/opt/srlinux.

    Note: Use the WinSCP tool to transfer the file to the node. For node1-1, the IP address is 100.120.81.46 and the port number is 40001. The user name is "admin" and the password is "admin".

4 

Log in to node1-1 using the following command:

SSH to node: ssh -p 40001 admin@100.120.81.46
5 

Execute the below commands to load the configuration and change the password:

A:admin@node1-1# enter candidate
A:admin@node1-1# load file  /etc/opt/srlinux/node2-2.cfg.json
A:admin@leaf-11# set system aaa authentication admin-user password admin
A:admin@node1-1# commit stay
6 

Repeat the Step 1 through Step 5 for all six nodes except CE1, CE2, and CE3.

End of steps