Port Provisioning

Provisioning defines a time frame, during which site engineer must ensure that all cables are plugged in, according to network design. When the provisioning timer has run out, ports without cables plugged in will enter disabled state and this change will be reflected in startup-config.

Introduction

Port provisioning has two stages:

  1. System configurator configures provisioning in the lab and powers off the device.
  2. Site engineer installs all devices on site, plugs in cables, and powers them on. After powering on, device will immediately enter provisioning state, with pre-configured timeout. When the timer runs out, ports that have no link (one or both ends of the cable are unplugged) will enter disbled state.

Provisioning ensures that no access to devices can be gained by plugging in cables to unused ports.

During operation, ports specified for provisioning will blink the leds, in order to visually indicate their involvement in the process. Additionally, each step of the provisioning is logged into a syslog.

By design, provisioning will bring all specified ports up, in order to ensure correct operation and prevent cases where cable is plugged in into a disabled port, resulting in port being disabled by provisioning, upon timeout.

Configuration

Unlike most features of WeOS, port provisioning is configured outside of the config block.

example:/#> provisioning
example:/provisioning/#>
example:/provisioning/#> enable
example:/provisioning/#> ports eth1..eth8
example:/provisioning/#> timeout 180
example:/provisioning/#> leave
[no] enable

Activate provisioning. Note that the actual provisioning process will start upon next boot.

no
Disable provisioning.
[no] ports <PORT|PORT,PORT|PORT..PORT|ALL>

Ports that are to take part in provisioning.

no
Remove configured ports from provisioning. Removes all ports if none are specified.
PORT
The port(s) to be included in or removed from provisioning.
[no] timeout <INTERVAL>

Period of time in seconds (upon boot, unless started explicitly) during which provisioning is active (default: 900 seconds).

no
Reset the timeout to the default.
INTERVAL
INTERVAL in seconds (range 30-1800).
start
Start provisioning immediately using current settings.
stop
Stop provisioning immediately.
show
Show summary of provisioning settings

Recommendations

Authorized individual performing initial setup should ensure that, during provisioning, no unauthorized individuals have access to devices.