WeOS
5.29.0

# Port Provisioning

Provisioning defines a time frame, during which site engineer must ensure that all cables are plugged in, according to network design. When the provisioning timer has run out, ports without cables plugged in will enter disabled state and this change will be reflected in startup-config.

## Introduction

Port provisioning has two stages:

1. System configurator configures provisioning in the lab and powers off the device.
2. Site engineer installs all devices on site, plugs in cables, and powers them on. After powering on, device will immediately enter provisioning state, with pre-configured timeout. When the timer runs out, ports that have no link (one or both ends of the cable are unplugged) will enter disbled state.

Provisioning ensures that no access to devices can be gained by plugging in cables to unused ports.

During operation, ports specified for provisioning will blink the leds, in order to visually indicate their involvement in the process. Additionally, each step of the provisioning is logged into a syslog.

By design, provisioning will bring all specified ports up, in order to ensure correct operation and prevent cases where cable is plugged in into a disabled port, resulting in port being disabled by provisioning, upon timeout.

## Configuration

Unlike most features of WeOS, port provisioning is configured outside of the config block.

    example:/#> provisioning
    example:/provisioning/#>
    example:/provisioning/#> enable
    example:/provisioning/#> ports eth1..eth8
    example:/provisioning/#> timeout 180
    example:/provisioning/#> leave

`[no] enable`

  Activate provisioning. Note that the actual provisioning process will start upon next boot.

  no
    Disable provisioning.
`[no] ports <PORT|PORT,PORT|PORT..PORT|ALL>`

  Ports that are to take part in provisioning.

  no
    Remove configured ports from provisioning. Removes all ports if none are specified.
  PORT
    The port(s) to be included in or removed from provisioning.
`[no] mode <MODE>`

  Operating modes: - one-shot : run only once, on the next device bootup - always : run on every device bootup

  no
    Reset the mode to the default (one-shot).
  MODE
    ‘one-shot’ or ‘always’.
`[no] timeout <INTERVAL>`

  Period of time in seconds (upon boot, unless started explicitly) during which provisioning is active (default: 900 seconds).

  no
    Reset the timeout to the default.
  INTERVAL
    INTERVAL in seconds (range 30-1800).
`start`
  Start provisioning immediately using current settings.
`stop`
  Stop provisioning immediately.
`show`
  Show summary of provisioning settings

## Recommendations

Authorised individual performing initial setup should ensure that, during provisioning, no unauthorized individuals have access to devices.

« Previous Next »