# Paragon Automation - Device LCM

## Overview

Paragon Automation is a Network automation platform and simplifies adoption of Network automation for device , network and service life cycles . The idea of Paragon is to eliminate repetitive tasks , improve operation efficiency.

This is a hands-on lab for Paragon Automation use cases Device LCM and Observability, L3VPN Orchestration, PAA, complex config templates .

This lab is based on Paragon Automation 2.0 features and the objective is to get hands on experience on these use cases . The platform will be preinstalled and preconfigured to start with specific use cases. We will be using vMX devices along with PA2.0

## Starting Lab

This lab allows for 16ppl (4ppl per sandbox) to take this lab persession.

If you would like to do this lab raise your hand to get Lab User information.

### Lab Blueprint Topology

The blueprint consists of four sets of vMX devices with traffic agents (TA’s), SET A, B, C and D. Also, a standalone shared ACX7100. Please note that you must choose the right SET of devices allocated to you.

We also have a Paragon Automation 2.0 on-prem instance installed with all device sets on-boarded.

![Topology](./images/Topology.png)

### Connect to Jumpbox

1.  Using RDP Client, connect to your Labuser assigned IP address/Port

    ![windows_rdp](./images/windows_rdp.png)

2.  Login using your Lab User credentials

## Device Lifecycle Management

The objective is to demonstrate Device lifecycle management, Observability and Trust use cases

- Login to Paragon Automation GUI
- Take a configuration Backup
- Deploy a simple configuration template
- Review Audit Logs
- Review the last config change by way of diff and check if this caused any issues.
- Review Trust score
- Review Interfaces Health
- Review outstanding Alarms, Alerts and syslogs

### Login to Paragon

1.  Open **Chrome**, and navigate to https://100.123.42.100, you shoud see the login page to Paragon Automation UI

    ![paragon_login_page](./images/paragon_login_page.png)

2.  Login using your Lab User credentials

    ![paragon_ui](./images/paragon_ui.png)

### Take Configuration Backup

1.  In the Paragon UI on the left side pane, go to **Observability > Troubleshoot Devices**.

    ![observability_troublshoot_devices](./images/observability_troublshoot_devices.png)

2.  Under Hostname click on *Lab User - Device 1*, you will then see the Accordion View.

    ![observability_troublshoot_devices_hostname1](./images/observability_troublshoot_devices_hostname1.png)

3.  Click **Configuration > Backup > OK** 

    ![observability_troublshoot_devices_config_backup](./images/observability_troublshoot_devices_config_backup.png)

4.  You should see the backup is completed successfully and the latest version of backup is shown with timestamp as below.

    ![observability_troublshoot_devices_config_backup_complete](./images/observability_troublshoot_devices_config_backup_complete.png)

5.  Click **Compare**, make sure you compare the latest version of backup and Active. you will see no difference.

    ![observability_troublshoot_devices_config_backup_compare](./images/observability_troublshoot_devices_config_backup_compare.png)

### Deploy A Simple Configuration Template

1.	Click **Inventory > Configuration Templates**, and select **netconf_rate_limit**.

    ![inventory_config_templates](./images/inventory_config_templates.png)

2.  Click **Deploy to devices**

    ![inventory_config_templates_rate_limit](./images/inventory_config_templates_rate_limit.png)

3.  Select *Lab User - Device 1*, and click **Deploy**

    <div class="alert alert-info">
    <strong>Note:</strong> Please do not use other device as this may conflict with other participants.
    </div>

    ![inventory_config_templates_rate_limit_deploy](./images/inventory_config_templates_rate_limit_deploy.png)

4.  You will see a page with Set Configuration Parameters, do not change anything (let it be default).

    ![inventory_config_templates_rate_limit_deploy2](./images/inventory_config_templates_rate_limit_deploy2.png)

5.  Click on OK for the question Are you sure you want to deploy the template to selected device(s).

    ![inventory_config_templates_rate_limit_deploy3](./images/inventory_config_templates_rate_limit_deploy3.png)

6.  You should now see the Configuration Template request correctly submitted.

    ![inventory_config_templates_rate_limit_deploy_complete](./images/inventory_config_templates_rate_limit_deploy_complete.png)

### Review Audit Logs

1.  Navigate to **Settings > Audit Logs**

    ![settings_audit_logs](./images/settings_audit_logs.png)

2.  Select a job (any job) and click **More > Detail**.

    ![settings_audit_logs_job_detail](./images/settings_audit_logs_job_detail.png)

3.  Review the Audit log message.

### Review Configuration Difference

1.  Click on **Observability > Troubleshoot Devices**.

2.  Select *Lab User - Device 1*.

3.  Click **Configuration > Compare**

    ![observability_troublshoot_devices_compare](./images/observability_troublshoot_devices_compare.png)

4.  Make sure to select latest backup and Active to Compare . Review lines added in Green and Lines deleted in Red highlight.

    ![observability_troublshoot_devices_compare2](./images/observability_troublshoot_devices_compare2.png)

### Review Trust Score

1.  Click on **Observability > Troubleshoot Devices**.

2.  Select *Lab User - Device 1*.

3.  Click **Identity & Location > Score**, this is the Trust Score.

    ![observability_troublshoot_devices_trust_score](./images/observability_troublshoot_devices_trust_score.png)

4.  You will see a list of snapshots. Please click on the first one.

    ![observability_troublshoot_devices_trust_score_snapshots](./images/observability_troublshoot_devices_trust_score_snapshots.png)

5.  Review Trust Score weights.

    ![observability_troublshoot_devices_trust_score_weights](./images/observability_troublshoot_devices_trust_score_weights.png)

### Review Interface Health

1.  Click on **Observability > Troubleshoot Devices**.

2.  Select *Lab User - Device 1*.

3.  Click **Interfaces**, and review if the interfaces are flapping or if any input or output interfaces are unhealthy.

    ![observability_troublshoot_devices_interfaces](./images/observability_troublshoot_devices_interfaces.png)

4.  Click on **Output Traffic** and review if there are any FEC or CRC errors.

    <div class="alert alert-info">
    <strong>Note:</strong> Note that you can change the time range (default is set to 30 minutes)
    </div>

    ![observability_troublshoot_devices_interfaces_ouput_traffic](./images/observability_troublshoot_devices_interfaces_ouput_traffic.png)

### Review Alarms, Alerts, and Syslogs

1.  Click on **Observability > Events**, and review Alarms, Alerts, and syslog.