Vyatta Network OS Documentation

Learn how to install, configure and operate the Vyatta NOS, which helps drive our virtual networking & physical platforms portfolio.

Establish a NETCONF session — <hello>

An example of how to establish an SSH session with Vyatta NOS and send a NETCONF <hello> message.

  1. Establish an SSH session from your local device to the Vyatta NOS system. In this example, the Vyatta NOS interface has the local network address 192.168.252.238.
    $ ssh user@192.168.252.238 -s netconf
    Vyatta NOS will respond with a <hello> message that lists its NETCONF capabilities and each YANG module that it supports, along with the latest revision date and any features.
    Welcome to DANOS - Vyatta NOS Edition
    
    user@192.168.252.238's password:
    <?xml version="1.0" encoding="UTF-8"?>
    <hello xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
      <capabilities>
        <capability>urn:ietf:params:netconf:base:1.0</capability>
        <capability>urn:ietf:params:netconf:base:1.1</capability>
        <capability>urn:ietf:params:netconf:capability:with-defaults:1.0?basic-mode=explicit&also-supported=report-all,explicit</capability>
        <capability>urn:ietf:params:netconf:capability:candidate:1.0</capability>
        <capability>urn:ietf:params:netconf:capability:startup:1.0</capability>
        <capability>urn:ietf:params:netconf:capability:rollback-on-error:1.0</capability>
        <capability>urn:ietf:params:netconf:capability:confirmed-commit:1.1</capability>
        <capability>urn:ietf:params:netconf:capability:validate:1.1</capability>
        <capability>urn:ietf:params:netconf:capability:validate:1.0</capability>
        <capability>urn:vyatta.com:mgmt:vyatta-op-monitor-interfaces:1?module=vyatta-op-monitor-interfaces-v1&revision=2020-01-09</capability>
        <capability>urn:vyatta.com:mgmt:vyatta-op-show-log-file:1?module=vyatta-op-show-log-file-v1&revision=2019-06-06</capability>
        <capability>urn:vyatta.com:mgmt:vyatta-security-vpn-ipsec-remote-access-server:1?module=vyatta-security-vpnipsec-remote-access-server-v1&revision=2020-06-25&features=ipsec_ra_server</capability>
        ...
        <capability>urn:vyatta.com:mgmt:vyatta-op-cpp-rate-limiter:1?module=vyatta-op-cpp-rate-limiterv1&
    revision=2019-03-20</capability>
        <capability>urn:vyatta.com:mgmt:vyatta-routing-v1:1?module=vyatta-routing-v1&revision=2018-09-27</capability>
      </capabilities>
      <session-id>1</session-id>
    </hello>
    ]]>]]>
  2. You must send a <hello> message within 60 seconds, or else the session will time out.
    • Only the NETCONF server instance on the Vyatta NOS system includes the <session-id> element.
    • Note that you must terminate all messages with the ]]>]]> sequence to indicate to SSH that it should send the message.
    Note: Typically, the client/remote user need only support the base NETCONF capability that we show here. The Vyatta NOS instance supports the further capabilities.
    <hello xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
      <capabilities>
        <capability>urn:ietf:params:netconf:base:1.0</capability>
      </capabilities>
    </hello>
    ]]>]]>