Fix re2o 2.8+ Compat

.gitignore

@@ -1,3 +1,4 @@
 config.ini
 **/__pycache__/**
 **.list
+generated/*

LICENSE

@@ -0,0 +1,339 @@
+                    GNU GENERAL PUBLIC LICENSE
+                       Version 2, June 1991
+
+ Copyright (C) 1989, 1991 Free Software Foundation, Inc., <http://fsf.org/>
+ 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The licenses for most software are designed to take away your
+freedom to share and change it.  By contrast, the GNU General Public
+License is intended to guarantee your freedom to share and change free
+software--to make sure the software is free for all its users.  This
+General Public License applies to most of the Free Software
+Foundation's software and to any other program whose authors commit to
+using it.  (Some other Free Software Foundation software is covered by
+the GNU Lesser General Public License instead.)  You can apply it to
+your programs, too.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+this service if you wish), that you receive source code or can get it
+if you want it, that you can change the software or use pieces of it
+in new free programs; and that you know you can do these things.
+
+  To protect your rights, we need to make restrictions that forbid
+anyone to deny you these rights or to ask you to surrender the rights.
+These restrictions translate to certain responsibilities for you if you
+distribute copies of the software, or if you modify it.
+
+  For example, if you distribute copies of such a program, whether
+gratis or for a fee, you must give the recipients all the rights that
+you have.  You must make sure that they, too, receive or can get the
+source code.  And you must show them these terms so they know their
+rights.
+
+  We protect your rights with two steps: (1) copyright the software, and
+(2) offer you this license which gives you legal permission to copy,
+distribute and/or modify the software.
+
+  Also, for each author's protection and ours, we want to make certain
+that everyone understands that there is no warranty for this free
+software.  If the software is modified by someone else and passed on, we
+want its recipients to know that what they have is not the original, so
+that any problems introduced by others will not reflect on the original
+authors' reputations.
+
+  Finally, any free program is threatened constantly by software
+patents.  We wish to avoid the danger that redistributors of a free
+program will individually obtain patent licenses, in effect making the
+program proprietary.  To prevent this, we have made it clear that any
+patent must be licensed for everyone's free use or not licensed at all.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                    GNU GENERAL PUBLIC LICENSE
+   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
+
+  0. This License applies to any program or other work which contains
+a notice placed by the copyright holder saying it may be distributed
+under the terms of this General Public License.  The "Program", below,
+refers to any such program or work, and a "work based on the Program"
+means either the Program or any derivative work under copyright law:
+that is to say, a work containing the Program or a portion of it,
+either verbatim or with modifications and/or translated into another
+language.  (Hereinafter, translation is included without limitation in
+the term "modification".)  Each licensee is addressed as "you".
+
+Activities other than copying, distribution and modification are not
+covered by this License; they are outside its scope.  The act of
+running the Program is not restricted, and the output from the Program
+is covered only if its contents constitute a work based on the
+Program (independent of having been made by running the Program).
+Whether that is true depends on what the Program does.
+
+  1. You may copy and distribute verbatim copies of the Program's
+source code as you receive it, in any medium, provided that you
+conspicuously and appropriately publish on each copy an appropriate
+copyright notice and disclaimer of warranty; keep intact all the
+notices that refer to this License and to the absence of any warranty;
+and give any other recipients of the Program a copy of this License
+along with the Program.
+
+You may charge a fee for the physical act of transferring a copy, and
+you may at your option offer warranty protection in exchange for a fee.
+
+  2. You may modify your copy or copies of the Program or any portion
+of it, thus forming a work based on the Program, and copy and
+distribute such modifications or work under the terms of Section 1
+above, provided that you also meet all of these conditions:
+
+    a) You must cause the modified files to carry prominent notices
+    stating that you changed the files and the date of any change.
+
+    b) You must cause any work that you distribute or publish, that in
+    whole or in part contains or is derived from the Program or any
+    part thereof, to be licensed as a whole at no charge to all third
+    parties under the terms of this License.
+
+    c) If the modified program normally reads commands interactively
+    when run, you must cause it, when started running for such
+    interactive use in the most ordinary way, to print or display an
+    announcement including an appropriate copyright notice and a
+    notice that there is no warranty (or else, saying that you provide
+    a warranty) and that users may redistribute the program under
+    these conditions, and telling the user how to view a copy of this
+    License.  (Exception: if the Program itself is interactive but
+    does not normally print such an announcement, your work based on
+    the Program is not required to print an announcement.)
+
+These requirements apply to the modified work as a whole.  If
+identifiable sections of that work are not derived from the Program,
+and can be reasonably considered independent and separate works in
+themselves, then this License, and its terms, do not apply to those
+sections when you distribute them as separate works.  But when you
+distribute the same sections as part of a whole which is a work based
+on the Program, the distribution of the whole must be on the terms of
+this License, whose permissions for other licensees extend to the
+entire whole, and thus to each and every part regardless of who wrote it.
+
+Thus, it is not the intent of this section to claim rights or contest
+your rights to work written entirely by you; rather, the intent is to
+exercise the right to control the distribution of derivative or
+collective works based on the Program.
+
+In addition, mere aggregation of another work not based on the Program
+with the Program (or with a work based on the Program) on a volume of
+a storage or distribution medium does not bring the other work under
+the scope of this License.
+
+  3. You may copy and distribute the Program (or a work based on it,
+under Section 2) in object code or executable form under the terms of
+Sections 1 and 2 above provided that you also do one of the following:
+
+    a) Accompany it with the complete corresponding machine-readable
+    source code, which must be distributed under the terms of Sections
+    1 and 2 above on a medium customarily used for software interchange; or,
+
+    b) Accompany it with a written offer, valid for at least three
+    years, to give any third party, for a charge no more than your
+    cost of physically performing source distribution, a complete
+    machine-readable copy of the corresponding source code, to be
+    distributed under the terms of Sections 1 and 2 above on a medium
+    customarily used for software interchange; or,
+
+    c) Accompany it with the information you received as to the offer
+    to distribute corresponding source code.  (This alternative is
+    allowed only for noncommercial distribution and only if you
+    received the program in object code or executable form with such
+    an offer, in accord with Subsection b above.)
+
+The source code for a work means the preferred form of the work for
+making modifications to it.  For an executable work, complete source
+code means all the source code for all modules it contains, plus any
+associated interface definition files, plus the scripts used to
+control compilation and installation of the executable.  However, as a
+special exception, the source code distributed need not include
+anything that is normally distributed (in either source or binary
+form) with the major components (compiler, kernel, and so on) of the
+operating system on which the executable runs, unless that component
+itself accompanies the executable.
+
+If distribution of executable or object code is made by offering
+access to copy from a designated place, then offering equivalent
+access to copy the source code from the same place counts as
+distribution of the source code, even though third parties are not
+compelled to copy the source along with the object code.
+
+  4. You may not copy, modify, sublicense, or distribute the Program
+except as expressly provided under this License.  Any attempt
+otherwise to copy, modify, sublicense or distribute the Program is
+void, and will automatically terminate your rights under this License.
+However, parties who have received copies, or rights, from you under
+this License will not have their licenses terminated so long as such
+parties remain in full compliance.
+
+  5. You are not required to accept this License, since you have not
+signed it.  However, nothing else grants you permission to modify or
+distribute the Program or its derivative works.  These actions are
+prohibited by law if you do not accept this License.  Therefore, by
+modifying or distributing the Program (or any work based on the
+Program), you indicate your acceptance of this License to do so, and
+all its terms and conditions for copying, distributing or modifying
+the Program or works based on it.
+
+  6. Each time you redistribute the Program (or any work based on the
+Program), the recipient automatically receives a license from the
+original licensor to copy, distribute or modify the Program subject to
+these terms and conditions.  You may not impose any further
+restrictions on the recipients' exercise of the rights granted herein.
+You are not responsible for enforcing compliance by third parties to
+this License.
+
+  7. If, as a consequence of a court judgment or allegation of patent
+infringement or for any other reason (not limited to patent issues),
+conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot
+distribute so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you
+may not distribute the Program at all.  For example, if a patent
+license would not permit royalty-free redistribution of the Program by
+all those who receive copies directly or indirectly through you, then
+the only way you could satisfy both it and this License would be to
+refrain entirely from distribution of the Program.
+
+If any portion of this section is held invalid or unenforceable under
+any particular circumstance, the balance of the section is intended to
+apply and the section as a whole is intended to apply in other
+circumstances.
+
+It is not the purpose of this section to induce you to infringe any
+patents or other property right claims or to contest validity of any
+such claims; this section has the sole purpose of protecting the
+integrity of the free software distribution system, which is
+implemented by public license practices.  Many people have made
+generous contributions to the wide range of software distributed
+through that system in reliance on consistent application of that
+system; it is up to the author/donor to decide if he or she is willing
+to distribute software through any other system and a licensee cannot
+impose that choice.
+
+This section is intended to make thoroughly clear what is believed to
+be a consequence of the rest of this License.
+
+  8. If the distribution and/or use of the Program is restricted in
+certain countries either by patents or by copyrighted interfaces, the
+original copyright holder who places the Program under this License
+may add an explicit geographical distribution limitation excluding
+those countries, so that distribution is permitted only in or among
+countries not thus excluded.  In such case, this License incorporates
+the limitation as if written in the body of this License.
+
+  9. The Free Software Foundation may publish revised and/or new versions
+of the General Public License from time to time.  Such new versions will
+be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+Each version is given a distinguishing version number.  If the Program
+specifies a version number of this License which applies to it and "any
+later version", you have the option of following the terms and conditions
+either of that version or of any later version published by the Free
+Software Foundation.  If the Program does not specify a version number of
+this License, you may choose any version ever published by the Free Software
+Foundation.
+
+  10. If you wish to incorporate parts of the Program into other free
+programs whose distribution conditions are different, write to the author
+to ask for permission.  For software which is copyrighted by the Free
+Software Foundation, write to the Free Software Foundation; we sometimes
+make exceptions for this.  Our decision will be guided by the two goals
+of preserving the free status of all derivatives of our free software and
+of promoting the sharing and reuse of software generally.
+
+                            NO WARRANTY
+
+  11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
+FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.  EXCEPT WHEN
+OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
+PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
+OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS
+TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE
+PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
+REPAIR OR CORRECTION.
+
+  12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
+REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
+INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
+OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
+TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
+YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
+PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGES.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+convey the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    switchs
+    Copyright (C) 2018  Re2o
+
+    This program is free software; you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation; either version 2 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License along
+    with this program; if not, write to the Free Software Foundation, Inc.,
+    51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
+
+Also add information on how to contact you by electronic and paper mail.
+
+If the program is interactive, make it output a short notice like this
+when it starts in an interactive mode:
+
+    Gnomovision version 69, Copyright (C) year name of author
+    Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
+    This is free software, and you are welcome to redistribute it
+    under certain conditions; type `show c' for details.
+
+The hypothetical commands `show w' and `show c' should show the appropriate
+parts of the General Public License.  Of course, the commands you use may
+be called something other than `show w' and `show c'; they could even be
+mouse-clicks or menu items--whatever suits your program.
+
+You should also get your employer (if you work as a programmer) or your
+school, if any, to sign a "copyright disclaimer" for the program, if
+necessary.  Here is a sample; alter the names:
+
+  Yoyodyne, Inc., hereby disclaims all copyright interest in the program
+  `Gnomovision' (which makes passes at compilers) written by James Hacker.
+
+  {signature of Ty Coon}, 1 April 1989
+  Ty Coon, President of Vice
+
+This General Public License does not permit incorporating your program into
+proprietary programs.  If your program is a subroutine library, you may
+consider it more useful to permit linking proprietary applications with the
+library.  If this is what you want to do, use the GNU Lesser General
+Public License instead of this License.

README.md

@@ -1,9 +1,12 @@
-## Re2o - DHCP
+## Re2o - Switchs config
 
-This service uses Re2o API to generate DHCP leases files
+This service uses Re2o API to generate Swicths config files
 
+More info on https://gitlab.federez.net/re2o/switchs/wikis/home
 
 ## Requirements
 
 * python3
+* python3-jinja2
+* python3-json
 * requirements in https://gitlab.federez.net/re2o/re2oapi

main.py

@@ -6,6 +6,12 @@ from re2oapi import Re2oAPIClient
 
 from jinja2 import Environment, FileSystemLoader
 
+import requests
+import base64
+import json
+import datetime
+import sys
+
 config = ConfigParser()
 config.read('config.ini')
 
@@ -13,23 +19,252 @@ api_hostname = config.get('Re2o', 'hostname')
 api_password = config.get('Re2o', 'password')
 api_username = config.get('Re2o', 'username')
 
-
-
-api_client = Re2oAPIClient(api_hostname, api_username, api_password)
+api_client = Re2oAPIClient(api_hostname, api_username, api_password, use_tls=False)
 
 client_hostname = socket.gethostname().split('.', 1)[0]
 
 all_switchs = api_client.list("switchs/ports-config/")
 
-
 # Création de l'environnement Jinja
 ENV = Environment(loader=FileSystemLoader('.'))
 
-# Import du fichier template dans une variable "template"
-template = ENV.get_template("templates/hp_test.tpl")
 
 # Création du template final avec les valeurs contenues dans le dictionnaire "valeurs" - Ces valeurs sont positionnées dans un objet "temp", qui sera utilisé par le moteur, et que l'on retrouve dans le template.
-conf = template.render(switch=all_switchs[2])
 
-print(all_switchs[2])
-print(conf)
+
+
+
+class Switch:
+    def __init__(self):
+        self.additionnal = None
+        self.all_vlans = api_client.list("machines/vlan/")
+        self.settings = api_client.view("preferences/optionaltopologie/")
+        # Import du fichier template dans une variable "template"
+        self.hp_tpl = ENV.get_template("templates/hp.tpl")
+        self.conf = None
+        self.name = None
+        self.switch = None
+        self.headers = None
+        self.creds_dict = None
+
+    def get_conf_file_name(self):
+        return self.switch["short_name"] + ".conf"
+
+    def preprocess_hp(self):
+        """Prérempli certains valeurs renvoyées directement à jinja, pour plus de simplicité"""
+
+        def add_to_vlans(vlans, vlan, port, tagged=True):
+            if not vlan['vlan_id'] in vlans:
+                if not tagged:
+                    vlans[vlan['vlan_id']] = {'ports_untagged' : [str(port['port'])], 'ports_tagged' : [], 'name' : vlan['name']}
+                else:
+                    vlans[vlan['vlan_id']] = {'ports_tagged' : [str(port['port'])], 'ports_untagged' : [], 'name' : vlan['name']}
+            else:
+                if not tagged:
+                    vlans[vlan['vlan_id']]['ports_untagged'].append(str(port['port']))
+                else:
+                    vlans[vlan['vlan_id']]['ports_tagged'].append(str(port['port']))
+
+        vlans = dict()
+
+        for port in self.switch['ports']:
+            if port['get_port_profile']['vlan_untagged']:
+                add_to_vlans(vlans, port['get_port_profile']['vlan_untagged'], port, tagged=False)
+            if port['get_port_profile']['vlan_tagged']:
+                for vlan in port['get_port_profile']['vlan_tagged']:
+                    add_to_vlans(vlans, vlan, port)
+
+        #Trie les ip par vlan, et les ajoute ainsi que les subnet
+        for ip, subnet in self.switch["interfaces_subnet"].items():
+            if not subnet["vlan_id"] in vlans:
+                raise RuntimeError("La config est dangeureuse, le vlan d'administration n'est pas propagé au switch !")
+            vlans[subnet["vlan_id"]].setdefault("ipv4", {})
+            vlans[subnet["vlan_id"]]["ipv4"][ip] = subnet
+        for ipv6, subnet in self.switch["interfaces6_subnet"].items():
+            vlans[subnet["vlan_id"]].setdefault("ipv6", {})
+            vlans[subnet["vlan_id"]]["ipv6"][ipv6] = subnet
+
+        #Regroupement des options par vlans : dhcp_soop,arp, et dhcpv6, ainsi que igmp, mld , ra-guard et loop_protect
+        arp_protect_vlans = [vlan["vlan_id"] for vlan in self.all_vlans if vlan["arp_protect"]]
+        dhcp_snooping_vlans = [vlan["vlan_id"] for vlan in  self.all_vlans if vlan["dhcp_snooping"]]
+        dhcpv6_snooping_vlans = [vlan["vlan_id"] for vlan in self.all_vlans if vlan["dhcpv6_snooping"]]
+        igmp_vlans = [vlan["vlan_id"] for vlan in self.all_vlans if vlan["igmp"]]
+        mld_vlans = [vlan["vlan_id"] for vlan in self.all_vlans if vlan["mld"]]
+        ra_guarded = [str(port['port']) for port in self.switch['ports'] if port['get_port_profile']['ra_guard']]
+        loop_protected = [str(port['port']) for port in self.switch['ports'] if port['get_port_profile']['loop_protect']]
+
+        self.additionals =  {'ra_guarded' : ra_guarded, 'loop_protected' : loop_protected, 'vlans' : vlans, 'arp_protect_vlans' : arp_protect_vlans, 'dhcp_snooping_vlans' : dhcp_snooping_vlans, 'dhcpv6_snooping_vlans' : dhcpv6_snooping_vlans, 'igmp_vlans' : igmp_vlans, 'mld_vlans': mld_vlans}
+
+
+    def gen_conf_hp(self):
+        """Génère la config pour ce switch hp"""
+        self.preprocess_hp()
+        self.conf = self.hp_tpl.render(switch=self.switch, settings=self.settings, additionals=self.additionals, date_gen=datetime.datetime.now())
+
+    def check_and_get_login(self):
+        """Récupère les login/mdp du switch, renvoie false si ils sont indisponibles"""
+        self.creds_dict = self.switch["get_management_cred_value"]
+        if self.creds_dict:
+            return True
+        else:
+            return False
+
+    def login_hp(self):
+        """Login into rest interface of this switch"""
+        url_login = "http://"  + self.switch["ipv4"] + "/rest/v3/login-sessions"
+
+        payload_login = {
+            "userName" : self.creds_dict["id"],
+            "password" : self.creds_dict["pass"]
+        }
+        get_cookie = requests.post(url_login, data=json.dumps(payload_login))
+        cookie = get_cookie.json()['cookie']
+        self.headers = {"Cookie" : cookie}
+
+    def test(self):
+        url_info = "http://" + self.switch["ipv4"] + "/rest/v4/system/status/global_info"
+        get = requests.get(url_info, headers=self.headers)
+
+    def apply_conf_hp(self):
+        """Apply config restore via rest"""
+        url_restore = "http://" + self.switch["ipv4"] + "/rest/v4/system/config/cfg_restore"
+        provision_mode = self.settings["switchs_provision"]
+        if provision_mode == "tftp":
+            data = {
+                "server_type": "ST_TFTP",
+                "file_name": self.get_conf_file_name(),
+                "tftp_server_address": {
+                    "server_address": {
+                        "ip_address": {
+                            "version":"IAV_IP_V4",
+                             "octets":self.settings["switchs_management_interface_ip"]}}},
+                "is_forced_reboot_enabled": True,
+            }
+        elif provision_mode == "sftp":
+             data = {
+                "server_type": "ST_SFTP",
+                "file_name": self.get_conf_file_name(),
+                "tftp_server_address": {
+                    "server_address": {
+                        "ip_address": {
+                            "version":"IAV_IP_V4",
+                             "octets":self.settings["switchs_management_interface_ip"]}},
+                    "user_name": self.settings["switchs_management_sftp_creds"]["login"],
+                    "password": self.settings["switchs_management_sftp_creds"]["pass"],
+                    },
+                "is_forced_reboot_enabled": True,
+            }
+        # Nous lançons la requête de type POST.
+        post_restore = requests.post(url_restore, data=json.dumps(data), headers=self.headers)
+
+    def gen_conf_and_write(self):
+        """Génère la conf suivant le bon constructeur et l'écrit"""
+        if self.switch["model"]:
+            constructor = self.switch["model"]["constructor"].lower()
+            try:
+                if "hp" in constructor or "aruba" in constructor:
+                    self.gen_conf_hp()
+                    self.write_conf()
+            except RuntimeError:
+                print("Il y a eu une erreur pour le switch %s, la config proposée n'est pas intègre" % self.switch["short_name"])
+
+    def apply_conf(self):
+        if self.check_and_get_login():
+            if self.switch["model"] and self.switch["automatic_provision"] == True and self.settings["provision_switchs_enabled"]:
+                constructor = self.switch["model"]["constructor"].lower()
+                if "hp" in constructor or "aruba" in constructor:
+                    self.login_hp()
+                    self.apply_conf_hp()
+
+    def write_conf(self):
+        """Ecriture de la conf du switch dans le fichier qui va bien"""
+        with open("generated/" + self.get_conf_file_name(), 'w+') as f:
+            f.write(self.conf)
+
+    def upgrade(self):
+        """Met à jour le switch en fonction du constructeur"""
+        if self.switch["model"]:
+            constructor = self.switch["model"]["constructor"].lower()
+            try:
+                if "hp" in constructor or "aruba" in constructor:
+                    self.get_firmware_hp()
+                    if self.primary_firmware < self.switch["firmware"]:
+                        self.upgrade_hp()
+                        # self.reboot_hp()
+            except RuntimeError:
+                print("Il y a eu une erreur pour la mise à jour du switch" + self.switch["short_name"])
+
+    def get_firmware_hp(self):
+        # L'URI est positionnée dans une variable
+        url_cli = "http://" + self.switch["ipv4"] + "/rest/v4/cli"
+        # On crée le dictionnaire avec la clé "cmd" et la valeur de la commande convertit en châine
+        data = {
+            "cmd": "show flash"
+                }
+        # On lance la requête avec le dictionnaire convertit en JSON et l'entête de session
+        post_cmd = requests.post(url_cli, data= json.dumps(data), headers=self.headers)
+        # On récupère le résultat de la requête, qui est décodé de base64, puis décodé en utf-8
+        result_decode = base64.b64decode(post_cmd.json()['result_base64_encoded']).decode('utf-8')
+        self.primary_firmware = result_decode.split('Secondary')[0].split()[-1]
+        self.secondary_firmware = result_decode.split('Boot')[0].split()[-1]
+
+
+    def upgrade_hp(self):
+        """Update switch via rest"""
+
+        # On spécifie l'URI pour le transfert de fichier
+        url_file = "http://" + self.switch["ipv4"] + "/rest/v4/file-transfer"
+
+        # On crée le dictionnaire comportant les informations nécessaires (actions / URL / etc...)
+        data = {
+                "file_type":"FTT_FIRMWARE",
+                "url":"http://" + self.settings["switchs_management_interface_ip"] + "/" + self.switch["firmware"] + ".swi",
+                "action":"FTA_DOWNLOAD",
+                "boot_image": "BI_PRIMARY_IMAGE"
+                }
+
+        # On lance la requête au format POST
+        post_file = requests.post(url_file, data=json.dumps(data), headers=self.headers)
+
+
+    def reboot_hp(slef):
+        url_reboot = "http://" + self.switch["ipv4"] + "/rest/v4/system/reboot"
+
+        data = {
+                "action":"reload"
+               }
+
+        post_reboot = requests.post(url_reboot, data=json.dumps(data), headers=self.headers)
+
+
+if "--force" in sys.argv:
+    sw = Switch()
+    for switch in all_switchs:
+        sw.switch = switch
+        sw.gen_conf_and_write()
+        try:
+            sw.apply_conf()
+        except:
+            print("Erreur dans l'application de la conf pour " + switch["short_name"])
+
+if "--upgrade" in sys.argv:
+    sw = Switch()
+    for switch in all_switchs:
+        sw.switch = switch
+        sw.upgrade()
+
+
+for service in api_client.list("services/regen/"):
+    if service['hostname'] == client_hostname and \
+        service['service_name'] == 'switchs' and \
+        service['need_regen']:
+        error = False
+        sw=Switch()
+        for switch in all_switchs:
+            sw.switch = switch
+            sw.gen_conf_and_write()
+            try:
+                sw.apply_conf()
+            except:
+                error = True
+        api_client.patch(service['api_url'], data={'need_regen': error})

templates/hp.tpl

@@ -0,0 +1,193 @@
+; {%- if switch.model.reference[-1]=='A' %} {{ switch.model.reference }}{%- else %} {{ switch.model.reference }}A{%- endif %} Configuration Editor; Created on release {%- if switch.model.firmware[0]=='#' %} {{ switch.model.firmware }}{%- else %} #{{ switch.model.firmware }}{%- endif %}
+
+hostname "{{ switch.short_name }}"
+; Generated on {{ date_gen }} by re2o
+;--- General ---
+{%- for slot, ref in switch.list_modules %}
+module {{ slot }} type {{ ref }}
+{%- endfor %}
+;--- Snmp ---
+{%- if switch.switchbay.name %}
+snmp-server location "{{ switch.switchbay.name }}"
+{%- endif %}
+;A faire à la main
+snmpv3 enable
+snmpv3 restricted-access
+snmpv3 user "re2o"
+snmpv3 group ManagerPriv user "re2o" sec-model ver3
+snmp-server community "public" Operator
+;--- Heure/date
+time timezone 60
+time daylight-time-rule Western-Europe
+{%- for ipv4 in settings.switchs_management_utils.ntp_servers.ipv4 %}
+sntp server priority {{ loop.index }} {{ ipv4 }} 4
+{%- endfor %}
+{%- for ipv6 in settings.switchs_management_utils.ntp_servers.ipv6 %}
+sntp server priority {{ loop.index + settings.switchs_management_utils.ntp_servers.ipv4|length }} {{ ipv6 }} 4
+{%- endfor %}
+timesync sntp
+sntp unicast
+;--- Misc ---
+console inactivity-timer 30
+;--- Logs ---
+{%- for ipv4 in settings.switchs_management_utils.log_servers.ipv4 %}
+logging {{ ipv4 }}
+{%- endfor %}
+{%- for ipv6 in settings.switchs_management_utils.log_servers.ipv6 %}
+logging {{ ipv6 }}
+{%- endfor %}
+;--- IP du switch ---
+no ip default-gateway
+max-vlans 256
+{%- for id, vlan in additionals.vlans.items() %}
+vlan {{ id }}
+   name "{{ vlan["name"]|capitalize }}"
+   {%- if vlan["ports_tagged"] %}
+   tagged {{ vlan["ports_tagged"]|join(',') }}
+   {%- endif %}
+   {%- if vlan["ports_untagged"] %}
+   untagged {{ vlan["ports_untagged"]|join(',') }}
+   {%- endif %} 
+   {%- if id in additionals.igmp_vlans %}
+   ip igmp
+   {%- endif %}
+   {%- if id in additionals.mld_vlans %}
+   ipv6 mld version 1
+   ipv6 mld enable
+   {%- endif %}
+   {%- if vlan.ipv4 %}
+   {%- for ipv4, subnet in vlan.ipv4.items() %}
+   ip address {{ ipv4 }}/{{ subnet.netmask_cidr }}
+   {%- endfor %}
+   {%- else %}
+   no ip address
+   {%- endif %} 
+   {%- if vlan.ipv6 %}
+   {%- for ipv6, subnet6 in vlan.ipv6.items() %}
+   ipv6 address {{ ipv6 }}/{{ subnet6.netmask_cidr }}
+   {%- endfor %}
+   {%- if id in additionals.igmp_vlans %}
+   no ip igmp querier
+   {%- endif %} 
+   {%- if id in additionals.mld_vlans %}
+   no ipv6 mld querier
+   {%- endif %} 
+   {%- endif %} 
+exit
+{%- endfor %}
+;--- Accès d'administration ---
+no telnet-server
+{%- if switch.web_management_enabled %}
+{%- if switch.web_management_enabled != "ssl" %}
+web-management plaintext
+{%- endif %}
+{%- if switch.web_management_enabled == "ssl" %}
+web-management ssl
+{%- endif %}
+{%- else %}
+no web-management
+{%- endif %}
+{%- if switch.rest_enabled %}
+rest-interface
+{%- endif %}
+aaa authentication ssh login public-key none
+aaa authentication ssh enable public-key none
+ip ssh
+ip ssh filetransfer
+{%- if settings.switchs_management_utils.subnet %}
+ip authorized-managers {{ settings.switchs_management_utils.subnet.network }} {{ settings.switchs_management_utils.subnet.netmask }} access manager
+{%- endif %}
+{%- for ipv4 in settings.switchs_management_utils.dns_recursive_servers.ipv4 %}
+ip dns server-address priority {{ loop.index }} {{ ipv4 }}
+{%- endfor %}
+{%- if settings.switchs_management_utils.subnet6 %}
+ipv6 authorized-managers {{ settings.switchs_management_utils.subnet6.network }} {{ settings.switchs_management_utils.subnet6.netmask }} access manager
+{%- endif %}
+{%- if additionals.loop_protected %}
+;--- Protection contre les boucles ---
+loop-protect disable-timer 30
+loop-protect transmit-interval 3
+loop-protect {{ additionals.loop_protected|join(',') }}
+{%- endif %}
+;--- Serveurs Radius 
+radius-server dead-time 2
+{%- for ipv4 in switch.get_radius_servers.ipv4 %}
+radius-server host {{ ipv4 }} key "{{ switch.get_radius_key_value }}"
+radius-server host {{ ipv4 }} dyn-authorization
+{%- endfor %}
+radius-server dyn-autz-port 3799
+;--- Filtrage mac ---
+aaa port-access mac-based addr-format multi-colon
+;--- Bricoles ---
+no cdp run
+{%- if additionals.dhcp_snooping_vlans %}
+;--- DHCP Snooping ---
+{%- for ipv4 in settings.switchs_management_utils.dhcp_servers.ipv4 %}
+dhcp-snooping authorized-server {{ ipv4 }}
+{%- endfor %}
+dhcp-snooping vlan {{ additionals.dhcp_snooping_vlans|join(' ') }}
+dhcp-snooping
+{%- endif %}
+{%- if additionals.arp_protect_vlans %}
+;--- ARP Protect ---
+arp-protect
+arp-protect vlan {{ additionals.arp_protect_vlans|join(' ') }}
+arp-protect validate src-mac dest-mac
+{%- endif %}
+{%- if additionals.dhcpv6_snooping_vlans %}
+;--- DHCPv6 Snooping ---
+dhcpv6-snooping vlan {{ additionals.dhcpv6_snooping_vlans|join(' ') }}
+dhcpv6-snooping
+{%- endif %}
+{%- if additionals.ra_guarded %}
+;--- RA guards ---
+ipv6 ra-guard ports {{ additionals.ra_guarded|join(',')}}
+{%- endif %}
+;--- Config des prises ---
+{%- for port in switch.ports %}
+{%- if port.get_port_profile.radius_type == "802.1X" %}
+aaa port-access authenticator {{ port.port }}
+{%- if port.get_port_profile.mac_limit %}
+aaa port-access authenticator {{ port.port }} client-limit {{ port.get_port_profile.mac_limit }}
+{%- endif %}
+aaa port-access authenticator {{ port.port }} logoff-period 3600
+{%- endif %}
+{%- if port.get_port_profile.radius_type == "MAC-radius" %}
+aaa port-access mac-based {{ port.port }}
+{%- if port.get_port_profile.mac_limit %}
+aaa port-access mac-based {{ port.port }} addr-limit {{ port.get_port_profile.mac_limit }}
+{%- endif %}
+aaa port-access mac-based {{ port.port }} logoff-period 3600
+{%- endif %}
+interface {{ port.port }}
+   {%- if port.state %}
+   enable
+   {%- else %}
+   disable
+   {%- endif %}
+   name "{{ port.pretty_name }}"
+   {%- if port.get_port_profile.flow_control %}
+   flow-control
+   {%- endif %}
+   {%- if not port.get_port_profile.dhcp_snooping %}
+   dhcp-snooping trust
+   {%- endif %}
+   {%- if not port.get_port_profile.arp_protect %}
+   arp-protect trust
+   {%- endif %}
+   {%- if not port.get_port_profile.dhcpv6_snooping %}
+   dhcpv6-snooping trust
+   {%- endif %}
+   {%- if port.get_port_profile.speed != "auto" %}
+   speed-duplex {{port.get_port_profile.speed}}
+   {%- endif %}
+   no lacp
+exit
+{%- endfor %}
+;--- Configuration comptabilisation RADIUS ---
+aaa accounting network start-stop radius
+aaa accounting session-id unique
+aaa accounting update periodic 240
+;--- Filtre de protocole ---
+filter multicast 01005e0000fb drop all
+filter multicast 3333000000fb drop all

templates/hp_test.tpl

@@ -1,86 +0,0 @@
-; {{ switch.model.reference }}A Configuration Editor; Created on release #{{ firmware }}
-
-hostname "{{ switch.short_name }}"
-; Generated on {{ date_gen }} by re2o
-;--- Snmp ---
-snmp-server contact "root@crans.org"
-snmp-server location "{{ switch.switchbay.name }}"
-;A faire à la main
-snmpv3 enable
-snmpv3 restricted-access
-;snmpv3 user "initial"
-snmpv3 user "crans"
-snmpv3 group ManagerPriv user "crans" sec-model ver3
-snmp-server community "public" Operator
-timesync sntp
-sntp unicast
-;--- Misc ---
-console inactivity-timer 30
-;--- IP du switch ---
-no ip default-gateway
-;--- Accès d'administration ---
-no telnet-server
-no web-management
-aaa authentication ssh login public-key none
-aaa authentication ssh enable public-key none
-ip ssh
-ip ssh filetransfer
-ip authorized-managers {{ switch.subnet.0.network }} {{switch.subnet.0.netmask }} access manager
-{%- if switch.subnet6 %}
-ipv6 authorized-managers {{ switch.subnet6.network }} {{switch.subnet6.netmask }} access manager
-{%- endif %}
-;--- Protection contre les boucles ---
-loop-protect disable-timer 30
-loop-protect transmit-interval 3
-radius-server dyn-autz-port 3799
-;--- Filtrage mac ---
-aaa port-access mac-based addr-format multi-colon
-;--- Bricoles ---
-no cdp run
-dhcp-snooping
-;--- Config des prises ---
-{%- for port in switch.ports %}
-{%- if port.get_port_profil.radius_type == "802.1X" %}
-aaa port-access authenticator {{ port.port }}
-{%- if port.get_port_profil.mac_limit %}
-aaa port-access authenticator {{ port.port }} client-limit {{ port.get_port_profil.mac_limit }}
-{%- endif %}
-aaa port-access authenticator {{ port.port }} logoff-period 3600
-{%- endif %}
-{%- if port.get_port_profil.radius_type == "MAC-radius" %}
-aaa port-access mac-based {{ port.port }}
-{%- if port.get_port_profil.mac_limit %}
-aaa port-access mac-based {{ port.port }} addr-limit {{ port.get_port_profil.mac_limit }}
-{%- endif %}
-aaa port-access mac-based {{ port.port }} logoff-period 3600
-aaa port-access mac-based {{ port.port }} unauth-vid 1
-{%- endif %}
-interface {{ port.port }}
-   {%- if port.state %}
-   enable
-   {%- else %}
-   disable
-   {%- endif %}
-   name "{{ port.port }}"
-   {%- if port.get_port_profil.flow_control %}
-   flow control
-   {%- endif %}
-   {%- if not port.get_port_profil.dhcp_snooping %}
-   dhcp-snooping trust
-   {%- endif %}
-   {%- if not port.get_port_profil.arp_protect %}
-   arp-protect trust
-   {%- endif %}
-   {%- if not port.get_port_profil.dhcpv6_snooping %}
-   dhcpv6-snooping trust
-   {%- endif %}
-   no lacp
-exit
-{%- endfor %}
-;--- Configuration comptabilisation RADIUS ---
-aaa accounting network start-stop radius
-aaa accounting session-id unique
-aaa accounting update periodic 240
-;--- Filtre de protocole ---
-filter multicast 01005e0000fb drop all
-filter multicast 3333000000fb drop all