Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Offer a submodule to optionally configure the Cisco 1000v on Network Edge #12

Open
displague opened this issue Dec 3, 2021 · 1 comment

Comments

@displague
Copy link
Member

displague commented Dec 3, 2021

The readme currently starts with a premise that is likely no longer true:

This repo will allow you to deploy a VyOS router onto a baremetal node in Equinix Metal. It will then generate a config file to setup an IPSec tunnel with a Cisco 1000v from Equinix's Network Edge. As of now there is no way to fully automate the configuration of the router (That I've figured out). So we'll be doing a few steps by hand.

It should be possible to ssh into the router to configure the device. The credentials can be configured with the equinix_network_device. The device can be configured over ssh or through other means. The credentials for configuring the device can be sourced from terraform or user parameters.

We may not want to require the csr1000v configuration in this module, and instead offer an examples/csr1000v/ directory in this project demonstrating combined use. That could look something like this:

provider "equinix" {}

module "router" {
  source = "equinix/metal/vyos-router"
  ...
}

module "csr1000v" {
// https://registry.terraform.io/modules/equinix/csr1000v/equinix/latest
  source = "equinix/csr1000v/equinix"
  ...
}
module "ipsec" {
  // this module would configure ipsec on the csr1000v, and perhaps on the vyos router too
  source = "equinix/vyos-router/metal//modules/cisco-vpn"
  ... = module.cisco100v.the_address
  ... = module.cisco100v.the_credentials? (perhaps these should come from an independent source)
  ... = module.router.the_script_parameters
}
@displague
Copy link
Member Author

displague commented Sep 8, 2023

Alternatively, the VyOS Network Edge VNF is now available. An example that connects a VyOS on Metal device to a NE VyOS device would provide a same <-> same experience where the distinguishing features could be discussed (and trialed) without changing much Terraform code.

These could be defined as compatible modules, taking the same arguments and offering the same outputs.

https://vyos.io/platforms/vyos-on-equinix-network-edge
https://docs.equinix.com/en-us/Content/Interconnection/NE/deploy-guide/VyOS/NE-create-VyOS.htm?Highlight=vyos

A reasonable starting point, in that case, would be to create a terraform-equinix-vyos module, following the pattern of the other NE Terraform modules: https://github.com/equinix/terraform-provider-equinix/tree/main/examples/edge-networking

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant