Organize Rules Into Groups Aligned to Model & Add New Rules for VRFs & Networks

roles/validate/files/rules/required_rules/305_topology_switch_interfaces_members_unique.py → roles/validate/files/rules/required_rules/304_topology_switch_interfaces_members_unique.py

@@ -2,7 +2,7 @@
 
 
 class Rule:
-    id = "305"
+    id = "304"
     description = "\n1)Verify Interface names are Unique per switch\n2)Verify member interfaces are not repeated within a switch\n"
     severity = "HIGH"
 

roles/validate/files/rules/required_rules/306_topology_switch_interfaces_vpc.py → roles/validate/files/rules/required_rules/305_topology_switch_interfaces_vpc.py

@@ -2,7 +2,7 @@
 
 
 class Rule:
-    id = "306"
+    id = "305"
     description = (
         "Verify vPC interfaces are compliant with vPC configuration requirements"
     )

roles/validate/files/rules/required_rules/304_overlay_services_cross_reference.py → roles/validate/files/rules/required_rules/401_overlay_services_cross_reference.py

@@ -1,5 +1,5 @@
 class Rule:
-    id = "304"
+    id = "401"
     description = "Cross Reference VRFs and Networks items in the Service Model"
     severity = "HIGH"
 
@@ -19,11 +19,7 @@ def match(cls, inventory):
             if inventory["vxlan"].get("overlay_services", None):
                 if inventory.get("vxlan").get("overlay_services").get("vrfs", None):
                     sm_vrfs = inventory.get("vxlan").get("overlay_services").get("vrfs")
-        # Build list of VRF names from sm_networks
-        # network_vrf_names = []
-        # for net in sm_networks:
-        #     if net.get('vrf_name') is not None:
-        #         network_vrf_names.append(net.get('vrf_name'))
+
         # Build list of VRF names from sm_vrfs
         if sm_vrfs and sm_networks:
             vrf_names = []

roles/validate/files/rules/required_rules/402_overlay_services_vrfs.py

@@ -0,0 +1,45 @@
+class Rule:
+    id = "402"
+    description = "Verify VRF elements are enabled in fabric overlay services"
+    severity = "HIGH"
+
+    @classmethod
+    def match(cls, inventory):
+        results = []
+        fabric_netflow_status = False
+        fabric_trm_status = False
+        vrfs = []
+
+        if inventory.get("vxlan", None):
+            if inventory["vxlan"].get("global", None):
+                if inventory["vxlan"].get("global").get("netflow", None):
+                    fabric_netflow_status = inventory["vxlan"]["global"]["netflow"].get("enable", False)
+
+        if inventory.get("vxlan", None):
+            if inventory["vxlan"].get("underlay", None):
+                if inventory["vxlan"].get("underlay").get("multicast", None):
+                    fabric_trm_status = inventory["vxlan"]["underlay"]["multicast"].get("trm_enable", False)
+
+        if inventory.get("vxlan", None):
+            if inventory["vxlan"].get("overlay_services", None):
+                if inventory["vxlan"].get("overlay_services").get("vrfs", None):
+                    vrfs = inventory["vxlan"]["overlay_services"]["vrfs"]
+
+        for vrf in vrfs:
+            current_vrf_netflow_status = vrf.get("netflow_enable", None)
+            if current_vrf_netflow_status is not None:
+                if fabric_netflow_status is False and current_vrf_netflow_status is True:
+                    results.append(
+                        f"For vxlan.overlay_services.vrfs.{vrf['name']}.netflow_enable to be enabled, "
+                        f"first vxlan.global.netflow.enable must be enabled (true)."
+                    )
+
+            current_vrf_trm_status = vrf.get("trm_enable", None)
+            if current_vrf_trm_status is not None:
+                if fabric_trm_status is False and current_vrf_trm_status is True:
+                    results.append(
+                        f"For vxlan.overlay_services.vrfs.{vrf['name']}.trm_enable to be enabled, "
+                        f"first vxlan.underlay.multicast.trm_enable must be enabled (true)."
+                    )
+
+        return results

roles/validate/files/rules/required_rules/403_overlay_services_networks.py

@@ -0,0 +1,31 @@
+class Rule:
+    id = "403"
+    description = "Verify Network elements are enabled in fabric overlay services"
+    severity = "HIGH"
+
+    @classmethod
+    def match(cls, inventory):
+        results = []
+        fabric_netflow_status = False
+        networks = []
+
+        if inventory.get("vxlan", None):
+            if inventory["vxlan"].get("global", None):
+                if inventory["vxlan"].get("global").get("netflow", None):
+                    fabric_netflow_status = inventory["vxlan"]["global"]["netflow"].get("enable", False)
+
+        if inventory.get("vxlan", None):
+            if inventory["vxlan"].get("overlay_services", None):
+                if inventory["vxlan"].get("overlay_services").get("networks", None):
+                    networks = inventory["vxlan"]["overlay_services"]["networks"]
+
+        for network in networks:
+            current_network_netflow_status = network.get("netflow_enable", None)
+            if current_network_netflow_status is not None:
+                if fabric_netflow_status is False and current_network_netflow_status is True:
+                    results.append(
+                        f"For vxlan.overlay_services.networks.{network['name']}.netflow_enable to be enabled, "
+                        f"first vxlan.global.netflow.enable must be enabled (true)."
+                    )
+
+        return results