/home/pipi/.local/lib/python3.10/site-packages/paramiko/pkey.py:100: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0. "cipher": algorithms.TripleDES, /home/pipi/.local/lib/python3.10/site-packages/paramiko/transport.py:259: CryptographyDeprecationWarning: TripleDES has been moved to cryptography.hazmat.decrepit.ciphers.algorithms.TripleDES and will be removed from cryptography.hazmat.primitives.ciphers.algorithms in 48.0.0. "class": algorithms.TripleDES, [WARNING]: Could not match supplied host pattern, ignoring: unprovisioned [WARNING]: Found variable using reserved name: hosts PLAY [Deploy initial device configuration] ************************************* TASK [Set variables that cannot be set with VARS] ****************************** ok: [dut] ok: [x2] ok: [x1] TASK [Find device readiness script] ******************************************** ok: [dut] ok: [x2] ok: [x1] TASK [Wait for device to become ready] ***************************************** included: /home/pipi/netlab_gh/netsim/ansible/tasks/readiness-check/ioll2-clab.yml for dut included: /home/pipi/netlab_gh/netsim/ansible/tasks/readiness-check/eos-clab.yml for x2, x1 TASK [Check if 'sshpass' is installed] ***************************************** ok: [dut -> localhost] TASK [Check for 'timeout' command] ********************************************* ok: [dut -> localhost] TASK [Execute local ssh command to check ioll2 readiness] ********************** ok: [dut -> localhost] TASK [Confirm dut SSH server works] ******************************************** ok: [dut] => msg: Node dut is ready. TASK [Wait for cEOS SSH daemon to start] *************************************** ok: [x1] ok: [x2] TASK [Normalize config on bridge-like devices] ********************************* included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-module.yml for dut, x2, x1 TASK [Figure out whether to deploy the module normalize on current device] ***** ok: [dut] ok: [x2] ok: [x1] TASK [Find configuration template for normalize] ******************************* ok: [dut] ok: [x2] ok: [x1] TASK [fail] ******************************************************************** skipping: [dut] skipping: [x2] skipping: [x1] TASK [Find configuration deployment deploy_script for normalize] *************** ok: [dut] ok: [x2] ok: [x1] TASK [Print deployed configuration when running in verbose mode] *************** ok: [dut] => msg: |- normalize configuration for dut ========================================= ! interface Ethernet0/1 shutdown mac-address 52dc.cafe.0101 ! interface Ethernet0/2 shutdown mac-address 52dc.cafe.0102 ok: [x2] => msg: |- normalize configuration for x2 ========================================= ! interface Ethernet1 shutdown mac-address 52dc.cafe.0201 ! interface Ethernet2 shutdown mac-address 52dc.cafe.0202 ok: [x1] => msg: |- normalize configuration for x1 ========================================= ! interface Ethernet1 shutdown mac-address 52dc.cafe.0301 ! interface Ethernet2 shutdown mac-address 52dc.cafe.0302 TASK [Deploy normalize configuration] ****************************************** included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-config/ios.yml for dut included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-config/eos.yml for x2, x1 TASK [ios_config: deploying normalize from /home/pipi/netlab_gh/netsim/ansible/templates/normalize/ioll2.j2] *** [WARNING]: To ensure idempotency and correct diff the input configuration lines should be similar to how they appear if present in the running configuration on device including the indentation changed: [dut] TASK [eos_config: deploying normalize from /home/pipi/netlab_gh/netsim/ansible/templates/normalize/eos.j2] *** changed: [x1] changed: [x2] TASK [Deploy initial configuration] ******************************************** included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-module.yml for dut, x2, x1 TASK [Figure out whether to deploy the module initial on current device] ******* ok: [dut] ok: [x2] ok: [x1] TASK [Find configuration template for initial] ********************************* ok: [dut] ok: [x2] ok: [x1] TASK [fail] ******************************************************************** skipping: [dut] skipping: [x2] skipping: [x1] TASK [Find configuration deployment deploy_script for initial] ***************** ok: [dut] ok: [x2] ok: [x1] TASK [Print deployed configuration when running in verbose mode] *************** ok: [dut] => msg: |- initial configuration for dut ========================================= hostname dut ! no ip domain lookup ! lldp run ! ip host x2 10.0.0.2 ip host x1 10.0.0.3 ! ip routing ! no ipv6 unicast-routing ! vlan 76 name blue ! vlan 42 name red ! ! ! interface Loopback0 ip address 10.0.0.1 255.255.255.255 ! interface Ethernet0/0 no lldp transmit no lldp receive ! interface Ethernet0/1 no switchport description dut -> x1 no shutdown ! interface Ethernet0/2 no switchport description dut -> x2 no shutdown ! interface Vlan76 description VLAN blue (76) -> [x1,x2] mac-address 4001.cafe.0100 no shutdown ! interface Vlan42 description VLAN red (42) -> [x1,x2] mac-address 4001.cafe.0101 no shutdown ! ! line vty 0 4 exec-timeout 0 0 ! no banner exec no banner login no banner incoming ok: [x2] => msg: |- initial configuration for x2 ========================================= hostname x2 ! logging monitor debugging aaa authorization exec default local ! lldp run ip routing no ipv6 unicast-routing ! ! ip host dut 10.0.0.1 ip host x1 10.0.0.3 ! interface Management0 no lldp transmit no lldp receive ! interface Loopback0 ip address 10.0.0.2/32 ! interface Ethernet1 no switchport description x2 -> dut ! mac-address 52dc.cafe.0201 no shutdown ! interface Ethernet2 no switchport description x2 -> x1 ! mac-address 52dc.cafe.0202 no shutdown ! interface Vlan76 description VLAN blue (76) -> [x1,dut] ! interface Vlan42 description VLAN red (42) -> [x1,dut] ! ok: [x1] => msg: |- initial configuration for x1 ========================================= hostname x1 ! logging monitor debugging aaa authorization exec default local ! lldp run ip routing no ipv6 unicast-routing ! ! ip host dut 10.0.0.1 ip host x2 10.0.0.2 ! interface Management0 no lldp transmit no lldp receive ! interface Loopback0 ip address 10.0.0.3/32 ! interface Ethernet1 no switchport description x1 -> dut ! mac-address 52dc.cafe.0301 no shutdown ! interface Ethernet2 no switchport description x1 -> x2 ! mac-address 52dc.cafe.0302 no shutdown ! interface Vlan76 description VLAN blue (76) -> [dut,x2] ! interface Vlan42 description VLAN red (42) -> [dut,x2] ! TASK [Deploy initial configuration] ******************************************** included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-config/ios.yml for dut included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-config/eos.yml for x2, x1 TASK [ios_config: deploying initial from /home/pipi/netlab_gh/netsim/ansible/templates/initial/ios.j2] *** changed: [dut] TASK [eos_config: deploying initial from /home/pipi/netlab_gh/netsim/ansible/templates/initial/eos.j2] *** changed: [x1] changed: [x2] PLAY [Deploy module-specific configurations] *********************************** TASK [Set variables that cannot be set with VARS] ****************************** ok: [dut] ok: [x2] ok: [x1] TASK [Deploy individual configuration modules] ********************************* included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-module.yml for dut, x2, x1 => (item=vlan) included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-module.yml for dut, x2, x1 => (item=stp) TASK [Figure out whether to deploy the module vlan on current device] ********** ok: [dut] ok: [x2] ok: [x1] TASK [Find configuration template for vlan] ************************************ ok: [x1] ok: [dut] ok: [x2] TASK [fail] ******************************************************************** skipping: [dut] skipping: [x2] skipping: [x1] TASK [Find configuration deployment deploy_script for vlan] ******************** ok: [dut] ok: [x2] ok: [x1] TASK [Print deployed configuration when running in verbose mode] *************** ok: [dut] => msg: |- vlan configuration for dut ========================================= vlan 76 name blue ! vlan 42 name red ! ! interface Ethernet0/1 switchport switchport trunk encapsulation dot1q switchport mode trunk switchport trunk allowed vlan 42,76 ! interface Ethernet0/2 switchport switchport trunk encapsulation dot1q switchport mode trunk switchport trunk allowed vlan 42,76 ok: [x2] => msg: |- vlan configuration for x2 ========================================= vlan 76 name blue ! vlan 42 name red ! ! interface Ethernet1 switchport switchport mode trunk switchport trunk allowed vlan 42,76 switchport trunk native vlan tag ! interface Ethernet2 switchport switchport mode trunk switchport trunk allowed vlan 42,76 switchport trunk native vlan tag ! interface Vlan76 ! interface Vlan42 ok: [x1] => msg: |- vlan configuration for x1 ========================================= vlan 76 name blue ! vlan 42 name red ! ! interface Ethernet1 switchport switchport mode trunk switchport trunk allowed vlan 42,76 switchport trunk native vlan tag ! interface Ethernet2 switchport switchport mode trunk switchport trunk allowed vlan 42,76 switchport trunk native vlan tag ! interface Vlan76 ! interface Vlan42 TASK [Deploy vlan configuration] *********************************************** included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-config/ios.yml for dut included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-config/eos.yml for x2, x1 TASK [ios_config: deploying vlan from /home/pipi/netlab_gh/netsim/ansible/templates/vlan/ioll2.j2] *** changed: [dut] TASK [eos_config: deploying vlan from /home/pipi/netlab_gh/netsim/ansible/templates/vlan/eos.j2] *** changed: [x2] changed: [x1] TASK [Figure out whether to deploy the module stp on current device] *********** ok: [dut] ok: [x2] ok: [x1] TASK [Find configuration template for stp] ************************************* ok: [dut] ok: [x2] ok: [x1] TASK [fail] ******************************************************************** skipping: [dut] skipping: [x2] skipping: [x1] TASK [Find configuration deployment deploy_script for stp] ********************* ok: [dut] ok: [x2] ok: [x1] TASK [Print deployed configuration when running in verbose mode] *************** ok: [dut] => msg: |- stp configuration for dut ========================================= spanning-tree mode mst spanning-tree pathcost method long spanning-tree mst 0 priority 4096 ok: [x2] => msg: |- stp configuration for x2 ========================================= spanning-tree mode rstp spanning-tree priority 16384 ok: [x1] => msg: |- stp configuration for x1 ========================================= spanning-tree mode rstp TASK [Deploy stp configuration] ************************************************ included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-config/ios.yml for dut included: /home/pipi/netlab_gh/netsim/ansible/tasks/deploy-config/eos.yml for x2, x1 TASK [ios_config: deploying stp from /home/pipi/netlab_gh/netsim/ansible/templates/stp/ios.j2] *** changed: [dut] TASK [eos_config: deploying stp from /home/pipi/netlab_gh/netsim/ansible/templates/stp/eos.j2] *** changed: [x1] changed: [x2] PLAY [Deploy custom deployment templates] ************************************** skipping: no hosts matched PLAY RECAP ********************************************************************* dut : ok=36 changed=4 unreachable=0 failed=0 skipped=4 rescued=0 ignored=0 x1 : ok=33 changed=4 unreachable=0 failed=0 skipped=4 rescued=0 ignored=0 x2 : ok=33 changed=4 unreachable=0 failed=0 skipped=4 rescued=0 ignored=0 The devices under test form a layer-2 triangle of VLAN trunks The bridge with the highest priority (s1) should become the root on all VLANs, the link x1-x2 should get blocked. Please note that we're running traditional STP where BPDUs are sent untagged.