System

Diagram

Classes

configuration (iosxe.devices)

Name	Type	Constraint	Mandatory	Default Value
system	Class	`[system]`	No

system (iosxe.devices.configuration)

Name	Type	Constraint	Mandatory
hostname	String	Regex: `^[^\s]*$`	No
ip_bgp_community_new_format	Boolean	`true`, `false`	No
ip_routing	Boolean	`true`, `false`	No
ipv6_unicast_routing	Boolean	`true`, `false`	No
mtu	Integer	min: `1500`, max: `9198`	No
ip_source_route	Boolean	`true`, `false`	No
ip_domain_lookup	Boolean	`true`, `false`	No
ip_domain_name	String	Regex: `^[^\s]*$`	No
login_delay	Integer	min: `1`, max: `10`	No
login_on_failure	Boolean	`true`, `false`	No
login_on_failure_log	Boolean	`true`, `false`	No
login_on_success	Boolean	`true`, `false`	No
login_on_success_log	Boolean	`true`, `false`	No
ip_multicast_routing	Boolean	`true`, `false`	No
multicast_routing_switch	Boolean	`true`, `false`	No
ip_multicast_routing_distributed	Boolean	`true`, `false`	No
multicast_routing_vrfs	List	`[multicast_routing_vrfs]`	No
http	Class	`[http]`	No

multicast_routing_vrfs (iosxe.devices.configuration.system)

Name	Type	Constraint	Mandatory	Default Value
vrf	String	Regex: `^[^\s]*$`	Yes
distributed	Boolean	`true`, `false`	No

http (iosxe.devices.configuration.system)

Name	Type	Constraint	Mandatory
access_class	Integer	min: `1`, max: `99`	No
active_session_modules	String	Regex: `^[^\s]*$`	No
secure_active_session_modules	String	Regex: `^[^\s]*$`	No
max_connections	Integer	min: `1`, max: `50`	No
authentication_aaa	Boolean	`true`, `false`	No
authentication_aaa_exec_authorization	String	Regex: `^[^\s]*$`	No
authentication_aaa_login_authentication	String	Regex: `^[^\s]*$`	No
authentication_aaa_command_authorizations	List	`[authentication_aaa_command_authorizations]`	No
authentication_local	Boolean	`true`, `false`	No
server	Boolean	`true`, `false`	No
secure_server	Boolean	`true`, `false`	No
secure_trustpoint	String	Regex: `^[^\s]*$`	No
tls_version	Choice	`TLSv1.0`, `TLSv1.1`, `TLSv1.2`	No
client_secure_trustpoint	String	Regex: `^[^\s]*$`	No
client_source_interface_type	Choice	`Loopback`, `Vlan`, `GigabitEthernet`, `TenGigabitEthernet`, `FortyGigabitEthernet`, `HundredGigabitEthernet`, `PortChannel`	No
client_source_interface_id	String		No

authentication_aaa_command_authorizations (iosxe.devices.configuration.system.http)

Name	Type	Constraint	Mandatory	Default Value
level	Integer	min: `0`, max: `15`	Yes
name	String	Regex: `^[^\s]*$`	No

Examples

Example-1 : In the below example, it uses local as the HTTP authentication method.

iosxe:
  devices:
    - name: Router1
      configuration:
        system:
          hostname: router1-xe
          ip_bgp_community_new_format: true
          ip_routing: true
          ipv6_unicast_routing: true
          ip_source_route: true
          ip_domain_lookup: true
          ip_domain_name: router1_domain
          login_delay: 2
          login_on_failure: true
          login_on_failure_log: true
          login_on_success: true
          login_on_success_log: true
          ip_multicast_routing: true
          ip_multicast_routing_distributed: true
          http:
            access_class: 10
            active_session_modules: restconf
            secure_active_session_modules: restconf
            max_connections: 25
            authentication_local: true
            server: true
            secure_server: true
            secure_trustpoint: router1_trustpoint
            tls_version: TLSv1.2
            client_secure_trustpoint: router1_trustpoint
            client_source_interface: Loopback0

Example-2 : In the below example, the router instead uses AAA for HTTP authentication.

iosxe:
  devices:
    - name: Router2
      configuration:
        system:
          hostname: router2-xe
          ip_bgp_community_new_format: true
          ip_routing: true
          ipv6_unicast_routing: true
          ip_source_route: true
          ip_domain_lookup: true
          ip_domain_name: router2_domain
          login_delay: 2
          login_on_failure: true
          login_on_failure_log: true
          login_on_success: true
          login_on_success_log: true
          ip_multicast_routing: true
          ip_multicast_routing_distributed: true
          http:
            access_class: 20
            active_session_modules: restconf
            secure_active_session_modules: restconf
            max_connections: 50
            authentication_aaa: true
            authentication_aaa_exec_authorization: test_author_group
            authentication_aaa_login_authentication: test_authen_group
            authentication_aaa_command_authorizations:
              - level: 15
                name:  test1
            server: true
            secure_server: true
            secure_trustpoint: router2_trustpoint
            tls_version: TLSv1.2
            client_secure_trustpoint: router2_trustpoint
            client_source_interface: Loopback1

Example-3 : In the below example, the device is a switch instead of a router. This is significant for the multicast_routing_switch and MTU configurations.

iosxe:
  devices:
    - name: Switch1
      configuration:
        system:
          hostname: switch1-xe
          ip_bgp_community_new_format: true
          ip_routing: true
          mtu: 1600
          ipv6_unicast_routing: true
          ip_source_route: true
          ip_domain_lookup: true
          ip_domain_name: switch1_domain
          login_delay: 2
          login_on_failure: true
          login_on_failure_log: true
          login_on_success: true
          login_on_success_log: true
          multicast_routing_switch: true
          http:
            access_class: 30
            active_session_modules: restconf
            secure_active_session_modules: restconf
            max_connections: 100
            authentication_local: true
            server: true
            secure_server: true
            secure_trustpoint: switch1_trustpoint
            tls_version: TLSv1.2
            client_secure_trustpoint: switch1_trustpoint
            client_source_interface: Loopback2