Release 6.2.1

Improvements

OS upgrade:

• Retry OS upgrade for multiple failed switches in a single action

• Allow a local file system path as the OS image location for pre-loaded images

• Add info on OS URL format

• Update OS upgrade worker to skip shutdown when no interface labels are selected

• Interface label now optional in the OS upgrade form

• Make SSH command executor size configurable - improving OS upgrade device parallelism

Bug fixes

• [SD] Unable to create extended mapping sharing a IN prefix list entry with other existing mapping on MCLAG

• [UI] The checkbox for selecting all devices on OS upgrade wizard page doesn't update its state correctly

• [UI] Download Brownfield File button disabled for WARNING pull-brownfield workflows

• [SD] Device cleanup issue after decommissioned selected devices in the pod

• [UI] OS upgrade wizard clears the Available Devices filters when a device is moved back from Selected

• [SD] OS upgrade port shutdown fails on labelled breakout ports that are not instantiated

• [SD] OS upgrade run is cut short after two hours while the upgrade is still in progress

Release 6.2.0

New features

SONiC 4.6.0 support

Sandwork now supports the latest Broadcom SONiC version.

Clone VLAN

This feature allows user to clone existing VLANs both individually and in batch.

Improvements

• Address issues from latest vulnerability & security scans

• Improved parallelism for asynchronous operations

Bug fixes

• [UI] Prefix-List Form - Duplicate range detection

• [UI] Switchport Mapping delta does not highlight DHCP differencies

• [UI] VNI check is not triggered when creating a VXLAN with inconsistent subnet while push to border leaves = false

• [UI] Move greenfield check away from main layout

• [UI] Network segment view scrolling doesn't work correctly

• Thread-unsafe `ArrayList` in `OsUpgradeWorkflowResultsHandler` causes flaky OS-upgrade failures

• Editing extended mapping removes switchport mappings from device

• [UI] Clone & Delete buttons not disabled after selecting and deselecting a network segment

• BgpDelta has no identifier

• [UI] Implement a workaround for autocomplete chips

• [UI] Redirect after login timeout is broken

• [UI] Canceling unsaved data dialog breaks tab navigation

• [SD] - UI Issues

• [SD] - For /api/switchport/add-mapping call, "vlans" list is required and is too dangerous.

• [SD] - extended mappings not showing up networksegments on edit

• [UI] Extended Mapping retry functionality issues

• [API] Brownfield pull is not pulling dhcp in network segments for BLs only pull

• [API] BF Pull returns no brownfield file when POD scoped Intent present in DEVICE scope request

• [SD] - failing to change the subnet(ipv6) for an existing vlan with ipv6 which has BGP unicast configured on the TORS

• [SD] - BGP Switchport Mapping Reverts to Anycast when Configuring Only One Switch

Release 6.1.3

Bug fixes

• [SD] - IPv6 autoconfig is not pushed to the devices when its a mclag-separate ip

Release 6.1.2

Bug fixes

• [SD] - Reconciliation failing due to invalid Auto-config flag for ipv6

• [SD] - Brownfield file import failing due to duplicate BGP neighbor keys

• [SD] - unable to add subinterfaces to bgp unnumbered

Release 6.1.1

Improvements

• [UI] Restore required table columns automatically when they appear unselected.

• [UI] VRF removal is now blocked while the VRF is still assigned to devices.

• [UI] General workflow submit no longer shows device warnings when devices are not being configured.

• [UI] Added cross-table validation to prevent removing entities that are still in use.

• [UI] The match-interface list is now sorted during route map editing.

• [UI] Improved visualization of DHCP relay information during reconciliation.

• [UI] Removed the Untrusted VRF count from the greenfield flow.

• [SD] Data Center role selection now uses radio buttons instead of check boxes.

• [UI] Topology view cards now show the number of border leaves (BLs).

Bug fixes

• [SD] - Brownfield pull for VLAN ignores IPv6 address

• [BE] Incorrect content of ext_overlay prefix lists after retrying a failed workflow

• [UI] Cannot select multiple network segments for extended mapping on border leaves

• [API] Cannot Create BGP Neighbor

• [UI] Cannot change the Set AS path prepend value during route map edit.

• [UI] Non-matching icons for the same operation during route map edit.

• [UI] Routing policy table rows were getting overwritten when deleting.

• [UI] Logs were not displayed.

• [UI] Missing focus highlight on the autocomplete component.

• [UI] Could not create a network segment without a Default VLAN when push to border leaves was set to false.

• [UI] Greenfield init reused password hashes.

• [UI] Adjusted the VTEP reconciliation view.

• [UI] Removed a duplicate button in Pull Brownfield.

• [UI] Missing frontend validation for Router ID address type when creating a new BGP.

• [UI] Visual issues in the BGP creation dialog.

• [UI] Dashboard legend for donut charts was cut off.

• [UI] BGP creation could not select a newly created BGP group for a neighbor.

• [UI] BGP creation could not select a peer group inside a BGP neighbor until an input was dirty.

• [SD] BGP neighbor configuration issue.

• [UI] Adjusted BGP community list creation for EXPANDED community lists.

• [UI] VXLAN network segment table was missing the "Pushed to BL" column.

• [UI] Replaced the Extended Mapping Name input id in the Extended Mapping wizard.

• [UI] Filtering by "Pushed to Border Leaves" in the switchport mapping wizard did not work.

• [UI] Anycast was not prefilled back after the IP address was removed.

• [UI] Greenfield GFS sent SNMP as an empty object.

• [UI] Fixed inconsistent design in the greenfield GFS wizard.

• [UI] Toast notification icons were misaligned.

• [UI] Page could not be refreshed with the refresh button after greenfield init.

• [UI] Searching logs from workflow details did not pre-select the workflow ID in Grafana.

• [UI] Adjusted table height for intent selection while editing a routing policy.

• [UI] BGP with aggregate configuration could not be edited.

• [UI] Fixed Retry functionality in greenfield init.

• [UI] Select all (Ctrl+A) did not work in the description field of the edit routing policy view.

• [UI] Broken sorting for OID trees in SNMPv3.

• [UI] Streamlined remote IP presentation in Extended Mapping export.

• [SD] Unable to modify an IP prefix list created via the Extended Mapping wizard.

• [UI] Gracefully handle incorrect workflow metadata.

• [UI] Greenfield wizard GFS tab now reflects finished workflows.

Security updates

• Analyzed and addressed vulnerabilities reported in third-party images.

• Analyzed and addressed vulnerabilities in the portal frontend.

• Upgraded to Conductor v3.30.1.

Release 6.1.0-patch1

Bug fixes

• [SD] - upgrade failed due to db migration taking too much time.

Release 6.1.0

New features

VRF and VTEP as standalone network intents

The goal of this use-case is to extract VRF and VTEP as standalone intents which can be:

• created and removed in the Inventory Service via standard workflows

• configured on devices via standard workflows

• reconciled (including reconciliation actions)

• imported into Inventory Service via the Brownfield file

• pulled from devices as part of the Brownfield File

This lifts a requirement to execute Greenfield rendering and push in a datacenter.
Since VRFs and VTEPs are supported by Brownfield pull and import, the Greenfield process doesn't have to be executed to work with a datacenter. However, the Greenfield reconciliation will not be possible to execute then.

NSX - Find IP address usages

This feature provides a concise, downloadable user-facing view that summarizes the extended mapping intent (e.g. mapping between VLANs, subnets, and BGP peering configurations for NSX clusters). This allows customers to verify their setup against their intended network architecture and to configure external servers (NSX clusters).

Improvements

Brownfield file pull:

Extends the existing ability to pull intents from devices to following:

• MCLAG

• PortChannel

• DHCP

• Network Segments

• Switchport Mappings

• GFS

Brownfield file import - createOrReplace strategy

This use-case adds an ability to replace current intents during brownfield import instead of just skipping existing intents. Currently, this only applies to:

• MCLAGs

• PortChannel

• DHCP

• Network segments

• Switchport Mappings

• Loopbacks

Other

• [UI] Unify main action buttons' style across the Sandwork

• [UI] E-M Wizard Implement Link for creating SW Mapping 

• [UI] E-M Workflow Implement retry logic

• [SD] - OS Upgrade Validation failure

• [UI] E-M summary preview  json add copy to clipboard button

• [SD][UI] - Port Breakout is lacking Physical Port in Dropdown

• [UI] SW Mappings Wizard, Add select all in check ports

• [UI] SW Mappings, VLAN Config, turn on mc-lag separate ip based on user input

• [UI] Unify switchport mappings tables height

• [UI] Highlight VLAN property diff in reconciliation

• [UI][Improvement] Staging - add link to a device details page

• [UI] Route map entries should be sorted by ascending Sequence number

• [UI] Partial matching in remote as filter

• [SD][UI] - Update intents - from device

• Suggest next Remote AS Number when creating new BGP Peer Group

• [SD] Document process for recovery after changing encryption key

• [UI][Improvement] VRF creation - set name to mgmt for Management VRF

• [UI] Add tooltip to disabled validate only

Bug fixes

• [UI] Incorrect count of selected items

• [API] Issues with vrf retrieve endpoint

• [API] OS-Upgrade - upgrade produces Management port description conflict

• [API] Cannot init Greenfield with SNMP - Reason ''

• [API] BGP - BGP Neighbor - Missing Interface name validation

• [UI] Data loading failed on Devices screen

• [SD] Find device - by IP

• [UI] E-M wizard - default inbound prefix was removed and replaced by users input

• [UI] NS Create NS settings extra symbols

• [UI] Missing cross validation for sequence numbers in E-M wizard for prefix lists

• [API] Pipeline dependent entities bug

• [SD] only one vlan gets deleted from reconciliation page

• [SD] Port Breakout Lists Ethernet sorted as String, not Integer

• [UI] SW Mapping Creation VLAN props, missing mask

• [UI] Incorrect validation for VNI and Default VLAN input fields in VXLAN segment creation dialog

• [UI] Cannot create BGP neighbor w/o peer group assigment

• [UI] E-M Missing visualisation for device scope during update

• [UI] Routing Policy General View the height of table doesn't take the full height

• [UI] Staging - styling issue after stage update

• [UI] Broken table height in OS Images

• [UI] Workflow details - Retry p-button sometimes as of 0 size

• [UI] Reconciliation - TACACS diff - do not highlight existing config if another side is missing

• [SD] reconciliation page does not show all the issues

• [SD] Using long values for ignored intents passes brownfield import but doesn't filter out intents during reconciliation

• [UI] incorrect validation for Communities in BGP Community List creation dialog

• [UI] Adjust workflow details tables to resize based on maximize or accordion collapse

• [UI] Putting a comma into some filters returns error 422

• [UI] E-M Mapping forbid selection of NS with existing mapping

• [UI] Unable to Create a SW Mapping after removing device during creation

• [UI] E-M creation workflow input wrong data

• [UI] unnecessary empty space in the Actions subtable in Prefix lists view

• [UI] Update E-M, stuck on prefix List

• [UI] SW mapping selection in Ex m Wizard is not preserved

• [UI] NS create wizard - VNI validation message could be erased

• [SD] Missing input parameters after validation task complete to Creating BGP AS Path list

• [UI] Invisible validation error when creating a new route map

• [UI] Missing distinction between different extended mappings on export preview & export to PDF

• [UI] MC-LAG Peer Configuration is not displayed during E-M retry 

• [UI] NS remove error - fix message

• [UI] Dashboard widgets - Lock widgets - widgets still can be changed

• [SD] UI Issue-required scroll bar option

• [UI] Tagging filter in switchport mapping wizard doesn't work

• [API] Make string filters case insensitive

• [SD] Device config mismatch after pushing SNMPv3 config

• [UI] Reconciliation workflow output shows switchport mapping with conflicting tagging as separate entities

• [UI] Revert E-M BGP Peer Section

• [UI] Incorrect count of selected items

• [SD] Unable to delete BGP neighbor

• [UI] Incorrect stage check in bgp as path list section

• [UI] Incorrect field labels when creating bgp

• [UI] Force transition dialog reuses button from import inventory

• [UI] Editing of the route maps in ipv4/ipv6 unicast cannot be staged

• [UI] Create bgp peer group - routing updates source interface list has only empty elements

• [UI] Edit of bgp neighbor does not allow peer group assignment

• [UI] Reconciliation SW Mappings console pollution

• [UI] Import brownfield file broken json preview

• [UI] Add length validation for community string

• [UI] VTEP - Update VTEP option is present when there is no VTEP

• [UI] Edit of staged bgp config ends up with multiple entries in the input for the same bgp config

• [UI] Switchport mappings Configuration workflow: unable to switch to Workflow output tab

• [UI] VRF Creation - Changing VRF type doesn't change name error message

• [UI] VRF Assignments - current page doesn't reset after switching PODs

• [UI] VTEP tooltip in device detail's General tab shows incorrect tooltip

• [UI] Forbid deleting switchport when it is used in exm

• [UI] Missing device name in routing policy management

• [UI] Import Inventory file button doesn't open an import modal

• [UI] Reconciliation differences are not shown for loopback IPs

• [UI] Items in left-side menu have slightly different indentation

• PortChannel reconciliation failure

• SONiC 4.1.6: pushing PortChannel from reconciliation fails when MCLAG config is missing - fast-rate CVL error

• [BE] Can't push MC-LAG config to device

• [SD] Vlan Autostate issue while configuring Extended mappings

• Removal of VRF removes network segment (not pushed to BLs) and orphans VLAN

• [UI] Removing Routing Updates Source IP sends an empty string to the backend instead of null

• [UI] Cannot decommision device

• [UI] Data loading failed for some routing policy items

• [SD] unable to to add multiple vlans to multiple pods

• Unable to push greenfield configuration to spines

• Greenfield - loopbacks are not pushed to devices

• [UI] BGP Neighbor detailed configuration. Changes cannot be staged after modifying the config

• [UI] BGP table view jumps to the top after clicking Remove button for a BGP item

• [API] Device Cleanup fails with jOOQ error

• [API] Reconciliation fail if device VTEP not present in inventory

• Bgp Peer group can be deleted while in use by Bgp Neighbor

• Brownfield pull - logs whole brownfield file to audit logs

• [UI] Extended mapping prefix list validators and incrementation scope

Security updates

• Updated Grafana to the latest version

• Updated VictoriaMetrics to the latest version

• Upgraded telemetry, scheduler and rbac-init containers to address vulnerabilities in base packages

• Upgraded Apache Tomcat

• Updated dependencies to versions with no known exploitable vulnerabilities.

File model changes

Open

Release 6.0.1

New features

Extended mappings management

This feature defines service intent called Extended mapping.

Extended mapping represents a group (cluster) of external devices (nodes/edges/SSPs (Server side peer)) (external from the DC fabric perspective) connected to DC fabric in a predefined way in order to allow advertising networks generated by external nodes and to provide necessary redundancy in case of networking failures. External node is the next hop towards the overlay network.

Extended mapping is an aggregate of several intents:

• one mandatory network segment (subnet A)

• three optional network segments (subnets B, C, D)

• list of switchport mappings (from subnets A/B/C/D) connecting fabric devices (PODn border leaves / TORs) <-> external nodes

• routing configuration

• BGP configuration

Extended mapping is in most cases created only on MCLAG paired switches to provide necessary redundancy. Non paired switches are also allowed, but used rarely (if no redundancy is needed).

This allows easy configuration of BGP Peering configuration with systems such as VMware NSX.

The feature allows peering with both TORs and Border Leaves.

Following changes are present for existing use cases:

• Add description (SandWork inventory only) to network segments

• Allow changing VLAN interface configuration when creating switchport mapping

Improvements

Greenfield: implementation changes

• Ignore ethernets with encapsulation config during reconciliation

• Make firewall portchannels optional for BLs

• Extend ethernet config in greenfield

• Make graceful-restart optional for Greenfield

• Extend SNMP general config with location and contact

• Cleanup of leftover properties of greenfield file and UI

• routing policy greenfield generator now uses intents from inventory

Other

• [SD] - [Improvement] Add 'A' (Autoconfig) flag support to standard IPv6 subnet configurations

• [SD] Reconcile only selected intents in Brownfield Pull

• [SD] - Rework bgp greenfield generators to use intents from inventory

• [SD] – Find unmanaged device - Advanced slider has no information

• [SD] - Routing - General show blueprint names