Merge remote-tracking branch 'acs/master'

4 files changed, 255 insertions, 122 deletions

diff --git a/notes/projects/sd-wan/.gitignore b/notes/projects/sd-wan/.gitignore
index bd5fcbd..7865b42 100644
--- a/notes/projects/sd-wan/.gitignore
+++ b/notes/projects/sd-wan/.gitignore
@@ -1 +1,2 @@
 /passwords.md
+/passwords-sdn.txt
diff --git a/notes/projects/sd-wan/passwords-sdn.txt.asc b/notes/projects/sd-wan/passwords-sdn.txt.asc
new file mode 100644
index 0000000..b4898c3
--- /dev/null
+++ b/notes/projects/sd-wan/passwords-sdn.txt.asc
@@ -0,0 +1,92 @@
+-----BEGIN PGP MESSAGE-----
+Comment: GPGTools - http://gpgtools.org
+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+=60qh
+-----END PGP MESSAGE-----
diff --git a/notes/projects/sd-wan/provision_vm.conf b/notes/projects/sd-wan/provision_vm.conf
index f52e361..e30903a 100644
--- a/notes/projects/sd-wan/provision_vm.conf
+++ b/notes/projects/sd-wan/provision_vm.conf
@@ -18,47 +18,47 @@ server = csp-central-infravm1, csp-central-infravm2, csp-central-infravm3, csp-c
 
 # Physical Server Details
 [xen16]
-management_address = 10.0.111.16/24
+management_address = 209.193.12.1/27
 management_interface = virbr0
-gateway = 10.0.111.254
-dns_search = prv.cwc.acsalaska.net cwc.acsalaska.net acsalaska.net
-dns_servers = 10.0.0.40 10.0.0.41
+gateway = 209.193.12.30
+dns_search = cwc.acsalaska.net acsalaska.net
+dns_servers = 209.193.4.7 209.112.160.2
 hostname = xen16.prv.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @KVMROOT_PASSWORD@
 data_interface =
 
 [xen17]
-management_address = 10.0.111.17/24
+management_address = 209.193.12.2/27
 management_interface = virbr0
-gateway = 10.0.111.254
-dns_search = prv.cwc.acsalaska.net cwc.acsalaska.net acsalaska.net
-dns_servers = 10.0.0.40 10.0.0.41
+gateway = 209.193.12.30
+dns_search = cwc.acsalaska.net acsalaska.net
+dns_servers = 209.193.4.7 209.112.160.2
 hostname = xen17.prv.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @KVMROOT_PASSWORD@
 data_interface =
 
 [xen18]
-management_address = 10.0.111.18/24
+management_address = 209.193.12.3/27
 management_interface = virbr0
-gateway = 10.0.111.254
-dns_search = prv.cwc.acsalaska.net cwc.acsalaska.net acsalaska.net
-dns_servers = 10.0.0.40 10.0.0.41
+gateway = 209.193.12.30
+dns_search = cwc.acsalaska.net acsalaska.net
+dns_servers = 209.193.4.7 209.112.160.2
 hostname = xen18.prv.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @KVMROOT_PASSWORD@
 data_interface =
 
 [xen19]
-management_address = 10.0.111.19/24
+management_address = 209.193.12.4/27
 management_interface = virbr0
-gateway = 10.0.111.254
-dns_search = prv.cwc.acsalaska.net cwc.acsalaska.net acsalaska.net
-dns_servers = 10.0.0.40 10.0.0.41
+gateway = 209.193.12.30
+dns_search = cwc.acsalaska.net acsalaska.net
+dns_servers = 209.193.4.7 209.112.160.2
 hostname = xen19.prv.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @KVMROOT_PASSWORD@
 data_interface =
 
 
@@ -68,9 +68,9 @@ data_interface =
 management_address = 209.193.12.6/27
 hostname = sdncentralinfravm1.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @VMROOT_PASSWORD@
 local_user = junipercso
-local_password = @PASSWORD@
+local_password = @LOCAL_PASSWORD@
 guest_os = ubuntu
 host_server = xen16
 memory = 65536
@@ -84,9 +84,9 @@ base_disk_size = 100G
 management_address = 209.193.12.7/27
 hostname = sdncentralinfravm2.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @VMROOT_PASSWORD@
 local_user = junipercso
-local_password = @PASSWORD@
+local_password = @LOCAL_PASSWORD@
 guest_os = ubuntu
 host_server = xen17
 memory = 65536
@@ -100,9 +100,9 @@ base_disk_size = 100G
 management_address = 209.193.12.8/27
 hostname = sdncentralinfravm3.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @VMROOT_PASSWORD@
 local_user = junipercso
-local_password = @PASSWORD@
+local_password = @LOCAL_PASSWORD@
 guest_os = ubuntu
 host_server = xen19
 memory = 65536
@@ -116,9 +116,9 @@ base_disk_size = 100G
 management_address = 209.193.12.9/27
 hostname = sdninstallervm.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @VMROOT_PASSWORD@
 local_user = junipercso
-local_password = @PASSWORD@
+local_password = @LOCAL_PASSWORD@
 guest_os = ubuntu
 host_server = xen19
 memory = 32768
@@ -132,9 +132,9 @@ base_disk_size = 100G
 management_address = 209.193.12.10/27
 hostname = sdncentrallbvm1.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @VMROOT_PASSWORD@
 local_user = junipercso
-local_password = @PASSWORD@
+local_password = @LOCAL_PASSWORD@
 guest_os = ubuntu
 host_server = xen17
 memory = 32768
@@ -148,9 +148,9 @@ base_disk_size = 100G
 management_address = 209.193.12.11/27
 hostname = sdncentrallbvm2.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @VMROOT_PASSWORD@
 local_user = junipercso
-local_password = @PASSWORD@
+local_password = @LOCAL_PASSWORD@
 guest_os = ubuntu
 host_server = xen18
 memory = 32768
@@ -164,9 +164,9 @@ base_disk_size = 100G
 management_address = 209.193.12.12/27
 hostname = sdncentrallbvm3.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @VMROOT_PASSWORD@
 local_user = junipercso
-local_password = @PASSWORD@
+local_password = @LOCAL_PASSWORD@
 guest_os = ubuntu
 host_server = xen19
 memory = 32768
@@ -180,9 +180,9 @@ base_disk_size = 100G
 management_address = 209.193.12.13/27
 hostname = sdncentralelkvm1.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @VMROOT_PASSWORD@
 local_user = junipercso
-local_password = @PASSWORD@
+local_password = @LOCAL_PASSWORD@
 guest_os = ubuntu
 host_server = xen17
 memory = 32768
@@ -196,9 +196,9 @@ base_disk_size = 100G
 management_address = 209.193.12.14/27
 hostname = sdncentralelkvm2.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @VMROOT_PASSWORD@
 local_user = junipercso
-local_password = @PASSWORD@
+local_password = @LOCAL_PASSWORD@
 guest_os = ubuntu
 host_server = xen18
 memory = 32768
@@ -212,9 +212,9 @@ base_disk_size = 100G
 management_address = 209.193.12.15/27
 hostname = sdncentralelkvm3.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @VMROOT_PASSWORD@
 local_user = junipercso
-local_password = @PASSWORD@
+local_password = @LOCAL_PASSWORD@
 guest_os = ubuntu
 host_server = xen19
 memory = 32768
@@ -228,9 +228,9 @@ base_disk_size = 100G
 management_address = 209.193.12.16/27
 hostname = sdncentralmsvm1.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @VMROOT_PASSWORD@
 local_user = junipercso
-local_password = @PASSWORD@
+local_password = @LOCAL_PASSWORD@
 guest_os = ubuntu
 host_server = xen16
 memory = 65536
@@ -244,9 +244,9 @@ base_disk_size = 100G
 management_address = 209.193.12.17/27
 hostname = sdncentralmsvm2.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @VMROOT_PASSWORD@
 local_user = junipercso
-local_password = @PASSWORD@
+local_password = @LOCAL_PASSWORD@
 guest_os = ubuntu
 host_server = xen18
 memory = 65536
@@ -260,9 +260,9 @@ base_disk_size = 100G
 management_address = 209.193.12.18/27
 hostname = sdncentralmsvm3.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @VMROOT_PASSWORD@
 local_user = junipercso
-local_password = @PASSWORD@
+local_password = @LOCAL_PASSWORD@
 guest_os = ubuntu
 host_server = xen19
 memory = 65536
@@ -276,9 +276,9 @@ base_disk_size = 100G
 management_address = 209.193.12.19/27
 hostname = sdnsblb1.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @VMROOT_PASSWORD@
 local_user = junipercso
-local_password = @PASSWORD@
+local_password = @LOCAL_PASSWORD@
 guest_os = ubuntu
 host_server = xen17
 memory = 16384
@@ -292,9 +292,9 @@ base_disk_size = 100G
 management_address = 209.193.12.20/27
 hostname = sdnsblb2.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @VMROOT_PASSWORD@
 local_user = junipercso
-local_password = @PASSWORD@
+local_password = @LOCAL_PASSWORD@
 guest_os = ubuntu
 host_server = xen18
 memory = 16384
@@ -308,9 +308,9 @@ base_disk_size = 500G
 management_address = 209.193.12.21/27
 hostname = sdncan1.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @VMROOT_PASSWORD@
 local_user = junipercso
-local_password = @PASSWORD@
+local_password = @LOCAL_PASSWORD@
 guest_os = ubuntu
 host_server = xen16
 memory = 65536
@@ -325,9 +325,9 @@ base_disk_size = 500G
 management_address = 209.193.12.22/27
 hostname = sdncan2.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @VMROOT_PASSWORD@
 local_user = junipercso
-local_password = @PASSWORD@
+local_password = @LOCAL_PASSWORD@
 guest_os = ubuntu
 host_server = xen17
 memory = 65536
@@ -341,9 +341,9 @@ base_disk_size = 500G
 management_address = 209.193.12.23/27
 hostname = sdncan3.cwc.acsalaska.net
 username = root
-password = @PASSWORD@
+password = @VMROOT_PASSWORD@
 local_user = junipercso
-local_password = @PASSWORD@
+local_password = @LOCAL_PASSWORD@
 guest_os = ubuntu
 host_server = xen18
 memory = 65536
@@ -358,7 +358,7 @@ base_disk_size = 500G
 management_address = 209.193.12.24/27
 hostname = sdnvrr1.cwc.acsalaska.net
 gateway = 209.193.12.30
-newpassword = @PASSWORD@
+newpassword = @VRR_PASSWORD@
 guest_os = vrr
 host_server = xen16
 memory = 32768
@@ -368,7 +368,7 @@ vcpu = 4
 management_address = 209.193.12.25/27
 hostname = sdnvrr2.cwc.acsalaska.net
 gateway = 209.193.12.30
-newpassword = @PASSWORD@
+newpassword = @VRR_PASSWORD@
 guest_os = vrr
 host_server = xen17
 memory = 32768
@@ -379,7 +379,7 @@ vcpu = 4
 management_address = 209.193.12.26/27
 hostname = sdnvrr3.cwc.acsalaska.net
 gateway = 209.193.12.30
-newpassword = @PASSWORD@
+newpassword = @VRR_PASSWORD@
 guest_os = vrr
 host_server = xen18
 memory = 32768
@@ -390,7 +390,7 @@ vcpu = 4
 management_address = 209.193.12.27/27
 hostname = sdnvrr4.cwc.acsalaska.net
 gateway = 209.193.12.30
-newpassword = @PASSWORD@
+newpassword = @VRR_PASSWORD@
 guest_os = vrr
 host_server = xen19
 memory = 32768
@@ -404,7 +404,7 @@ gateway = 209.193.12.30
 nameserver_address = 209.193.4.7 209.112.160.2
 hostname = sdnspacevm.cwc.acsalaska.net
 username = admin
-password = @PASSWORD@
+password = abc123
 newpassword = jnpr123!
 guest_os = space
 host_server = xen17
diff --git a/notes/projects/sd-wan/servers.md b/notes/projects/sd-wan/servers.md
index 38ab8b2..0e93501 100644
--- a/notes/projects/sd-wan/servers.md
+++ b/notes/projects/sd-wan/servers.md
@@ -10,6 +10,7 @@ Table of Contents
      - Juniper Contacts
      - Alaska Communications Contacts
    * Networking
+     - WebUI/Portals
      - LAN Services
      - DNS Conventions
      - Infrastructure Networks
@@ -32,11 +33,10 @@ TODO
    Juniper:
 
    Alaska Communications:
-   [ ] Setup centralized auth
-   [ ] Finish adding metadata to DNS (i.e. purpose)
-   [ ] Merge servers-cso.list into servers.list
-   [ ] Standardize root passwords for CSO installation
-   [ ] Cleanup VM names to match DNS hostnames
+   [ ] Setup centralized auth (LDAP, RADIUS, SSO, etc)
+   [ ] Add CSO into servers.list
+   [ ] SSH trusts from admin servers to CSO VMs
+   [ ] Replace SSL cert with trusted SSL cert
    [ ] Fix VM internal hostnames to match DNS names
 
 
@@ -108,6 +108,13 @@ Alaska Communications Contacts
 Networking
 ==========
 
+WebUI/Portals
+-------------
+
+   * CSO Web UI
+     - https://sdn.acsalaska.net/
+
+
 LAN Services
 ------------
 
@@ -141,10 +148,6 @@ DNS Conventions
 Infrastructure Networks
 -----------------------
 
-  * Routing:
-    - Private ASN:  TBD
-    - Flannel Net:  TBD (172.16.0.0/16???)
-
   * ASN: 65520
 
   * VLAN
@@ -212,6 +215,16 @@ Hosts
 =====
 
 
+Virtual Address
+---------------
+
+   * 209.193.12.1 - OPEN
+   * 209.193.12.2 - OPEN
+   * 209.193.12.3 - OPEN
+   * 209.193.12.4 - sdnsblb.cwc.acsalaska.net (southbound load balancer)
+   * 209.193.12.5 - sdnhaproxy.cwc.acsalaska.net (Haproxy HA)
+
+
 Servers/Hypervsiors
 -------------------
 
@@ -221,14 +234,14 @@ Servers/Hypervsiors
      - Alias:      sdnbastion.acsalaska.net
      - Hypervisor: xen14.prv.cwc
      - Network:    VLAN 2057: 10.0.59.125/25    GW 10.0.59.126
-     - Network:    VLAN 2058: 209.193.12.29/28  GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.29/27  GW 209.193.12.30
 
    * sdnbootstrap.prv.cwc
      - Purpose:    Bare Metal CSO Installer
      - Alias:      sdnbootstrap.cwc.acsalaska.net
      - Hypervisor: xen16.prv.cwc
      - Network:    VLAN 2057: 10.0.59.124/25    GW 10.0.59.126
-     - Network:    VLAN 2058: 209.193.12.28/28  GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.28/27  GW 209.193.12.30
 
    * xen16.prv.cwc
      - Purpose:    CSO KVM Hypervisor
@@ -254,73 +267,73 @@ Juniper VMs
      - Purpose:    Analytics
      - Type:       csp-contrailanalytics-1
      - Hypervisor: xen16.prv.cwc
-     - Network:    VLAN 2058: 209.193.12.1/28   GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.21/27  GW 209.193.12.30
 
    * sdncan2.cwc
      - Purpose:    Analytics
      - Type:       csp-contrailanalytics-2
      - Hypervisor: xen17.prv.cwc
-     - Network:    VLAN 2058: 209.193.12.2/28   GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.22/27  GW 209.193.12.30
 
    * sdncan3.cwc
      - Purpose:    Analytics
      - Type:       csp-contrailanalytics-3
      - Hypervisor: xen18.prv.cwc
-     - Network:    VLAN 2058: 209.193.12.3/28   GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.23/27  GW 209.193.12.30
 
    * sdncentralelkvm1.cwc
      - Purpose:    TBD
      - Type:       csp-central-elkvm1
      - Hypervisor: xen17.prv.cwc
-     - Network:    VLAN 2058: 209.193.12.19/25  GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.13/25  GW 209.193.12.30
 
    * sdncentralelkvm2.cwc
      - Purpose:    TBD
      - Type:       csp-central-elkvm2
      - Hypervisor: xen18.prv.cwc
-     - Network:    VLAN 2058: 209.193.12.20/25  GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.14/25  GW 209.193.12.30
 
    * sdncentralelkvm3.cwc
      - Purpose:    TBD
      - Type:       csp-central-elkvm3
      - Hypervisor: xen19.prv.cwc
-     - Network:    VLAN 2058: 209.193.12.21/25  GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.15/25  GW 209.193.12.30
 
    * sdncentralinfravm1.cwc
      - Purpose:    TBD
      - Type:       csp-central-infravm1
      - Hypervisor: xen16.prv.cwc
-     - Network:    VLAN 2058: 209.193.12.10/25  GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.6/25  GW 209.193.12.30
 
    * sdncentralinfravm2.cwc
      - Purpose:    TBD
      - Type:       csp-central-infravm2
      - Hypervisor: xen17.prv.cwc
-     - Network:    VLAN 2058: 209.193.12.11/25  GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.7/25  GW 209.193.12.30
 
    * sdncentralinfravm3.cwc
      - Purpose:    TBD
      - Type:       csp-central-infravm3
      - Hypervisor: xen19.prv.cwc
-     - Network:    VLAN 2058: 209.193.12.12/25  GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.8/25  GW 209.193.12.30
 
    * sdncentrallbvm1.cwc
      - Purpose:    TBD
      - Type:       csp-central-lbvm1
      - Hypervisor: xen17.prv.cwc
-     - Network:    VLAN 2058: 209.193.12.13/25  GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.10/25  GW 209.193.12.30
 
    * sdncentrallbvm2.cwc
      - Purpose:    TBD
      - Type:       csp-central-lbvm2
      - Hypervisor: xen18.prv.cwc
-     - Network:    VLAN 2058: 209.193.12.14/25  GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.11/25  GW 209.193.12.30
 
    * sdncentrallbvm3.cwc
      - Purpose:    TBD
      - Type:       csp-central-lbvm3
      - Hypervisor: xen19.prv.cwc
-     - Network:    VLAN 2058: 209.193.12.15/25  GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.12/25  GW 209.193.12.30
 
    * sdncentralmsvm1.cwc
      - Purpose:    TBD
@@ -344,43 +357,43 @@ Juniper VMs
      - Purpose:    TBD
      - Type:       csp-installer-vm
      - Hypervisor: xen19.prv.cwc
-     - Network:    VLAN 2058: 209.193.12.27/28   GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.9/28   GW 209.193.12.30
 
    * sdnsblb1.cwc
      - Purpose:    TBD
      - Type:       csp-regional-sblb1
      - Hypervisor: xen17.prv.cwc
-     - Network:    VLAN 2058: 209.193.12.22/25  GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.19/25  GW 209.193.12.30
 
    * sdnsblb2.cwc
      - Purpose:    TBD
      - Type:       csp-regional-sblb2
      - Hypervisor: xen18.prv.cwc
-     - Network:    VLAN 2058: 209.193.12.23/25  GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.20/25  GW 209.193.12.30
 
    * sdnvrr1.cwc
      - Purpose:    TBD
      - Type:       csp-vrr-vm1
      - Hypervisor: xen16.prv.cwc
-     - Network:    VLAN 2058: 209.193.12.6/28   GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.24/27  GW 209.193.12.30
 
    * sdnvrr2.cwc
      - Purpose:    TBD
      - Type:       csp-vrr-vm2
      - Hypervisor: xen17.prv.cwc
-     - Network:    VLAN 2058: 209.193.12.7/28   GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.25/27  GW 209.193.12.30
 
    * sdnvrr3.cwc
      - Purpose:    TBD
      - Type:       csp-vrr-vm3
      - Hypervisor: xen18.prv.cwc
-     - Network:    VLAN 2058: 209.193.12.8/28   GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.26/27  GW 209.193.12.30
 
    * sdnvrr4.cwc
      - Purpose:    TBD
      - Type:       csp-vrr-vm4
      - Hypervisor: xen19.prv.cwc
-     - Network:    VLAN 2058: 209.193.12.9/28   GW 209.193.12.30
+     - Network:    VLAN 2058: 209.193.12.27/27  GW 209.193.12.30
 
 
 Network Equipment
@@ -394,15 +407,14 @@ Network Equipment
      - Serial:  17111027103 (Mainboard)
      - Version: 15.1X49-D144.1
      - Console: ts2.prv.cwc - serial-1/12 (tcp:2078)
-     - Console: ts2.prv.cwc - serial-1/18 (tcp:2084) [temp]
      - Power:   PSU1: TBD
      - Power:   PSU2: TBD
-     - Network: lo;      209.193.12.48/32; n/a
+     - Network: lo;      209.193.12.36/32; n/a
      - Network: fxp0     10.0.2.183/24 GW 10.0.2.254; TBD
      - Network: xe-0/0/0 209.193.12.33/31; js7.prv.cwc - xe-0/1/0 (access tag 2000)
-     - Network: xe-0/0/1 209.193.12.35/31; js7.prv.cwc - xe-0/1/1 (access tag 2001)
-     - Network: xe-0/0/2 209.193.12.37/31; js7.prv.cwc - xe-0/1/2 (access tag 2002)
-     - Network: xe-0/0/3 209.193.12.39/31; js7.prv.cwc - xe-0/1/3 (access tag 2003)
+     - Network: xe-0/0/1 unused
+     - Network: xe-0/0/2 unused
+     - Network: xe-0/0/3 unused
 
    * jr2.nwc (was jfw2.lab)
      - Purpose: CSO Hub
@@ -414,12 +426,12 @@ Network Equipment
      - Console: ts4.prv.nwc - serial 1/53 (tcp:2053) [line: 52]
      - Power:   PSU1: ps66.prv.nwc outlet 5;
      - Power:   PSU2: ps67.prv.nwc outlet 5;
-     - Network: lo;      209.193.12.49/32;; n/a
+     - Network: lo;      209.193.12.37/32;; n/a
      - Network: fxp0     10.0.2.184/24 GW 10.0.2.254; cs13.prv.nwc Gi1/0/3
-     - Network: xe-0/0/0 209.193.12.41/31; js7.prv.nwc - xe-0/1/0 (access tag 2000)
-     - Network: xe-0/0/1 209.193.12.43/31; js7.prv.nwc - xe-0/1/1 (access tag 2001)
-     - Network: xe-0/0/2 209.193.12.45/31; js7.prv.nwc - xe-0/1/2 (access tag 2002)
-     - Network: xe-0/0/3 209.193.12.47/31; js7.prv.nwc - xe-0/1/3 (access tag 2003)
+     - Network: xe-0/0/0 209.193.12.35/31; js7.prv.nwc - xe-0/1/0 (access tag 2000)
+     - Network: xe-0/0/1 unused
+     - Network: xe-0/0/2 unused
+     - Network: xe-0/0/3 unused
 
    * jr3.cwc
      - Purpose: Juniper CSO VM Firewall
@@ -427,7 +439,7 @@ Network Equipment
      - Model:   SRX300
      - Serial:  n/a
      - Version: TBD
-     - Console: TBD
+     - Console: ts2.prv.cwc - serial-1/18 (tcp:2084)
      - Power:   TBD
      - Network: lo n/a;
      - Network: ge-0/0/0 209.193.12.51/31; js6.prv.nwc - ge-0/0/6 (access tag 2056)
@@ -470,18 +482,12 @@ Network Equipment
      - Model:   MX960
      - Version: 15.1R6.7
      - Network: ge-7/3/0 209.193.12.32/31; js7.prv.cwc ge-0/0/0, xe-0/1/0;  jr2.cwc xe-0/0/0
-     - Network: ge-7/3/1 209.193.12.34/31; js7.prv.cwc ge-0/0/1, xe-0/1/1;  jr2.cwc xe-0/0/1
-     - Network: ge-7/3/2 209.193.12.36/31; js7.prv.cwc ge-0/0/2, xe-0/1/2;  jr2.cwc xe-0/0/2
-     - Network: ge-7/3/3 209.193.12.38/31; js7.prv.cwc ge-0/0/3, xe-0/1/3;  jr2.cwc xe-0/0/3
 
    * r2.nwc
      - Purpose: Core Network
      - Model:   MX960
      - Version: 15.1R7.8
      - Network: ge-7/3/0 209.193.12.40/31; js7.prv.nwc ge-0/0/0, xe-0/1/0;  jr2.nwc xe-0/0/0
-     - Network: ge-7/3/1 209.193.12.42/31; js7.prv.nwc ge-0/0/1, xe-0/1/1;  jr2.nwc xe-0/0/1
-     - Network: ge-7/3/2 209.193.12.44/31; js7.prv.nwc ge-0/0/2, xe-0/1/2;  jr2.nwc xe-0/0/2
-     - Network: ge-7/3/3 209.193.12.46/31; js7.prv.nwc ge-0/0/3, xe-0/1/3;  jr2.nwc xe-0/0/3
 
 
 CPE Labs
@@ -588,7 +594,6 @@ Unless otherwsie noted, the following is run as root from the respective hosts.
 
              sudo apt-get install python-pip
              sudo apt-get install libssl-dev
-             #sudo apt-get install python-dev
 
        - Copy install files to `/usr/local/src`
          - KVM-4.0.1.tar.gz
@@ -638,21 +643,56 @@ Unless otherwsie noted, the following is run as root from the respective hosts.
           # false start 1 (will fail)
           ./provision_vm.sh
 
-          # install python modules
-          pip install psutil
-          pip install hurry.filesize
-          pip install oslo.config
-          pip install pyyaml
-          pip install easyprocess
-          pip install tendo
-          pip install colorlog
-          pip install eventlet
-          pip install paramiko
-          pip install flask
-
           # false start 2 (will fail)
           ./provision_vm.sh
 
+          # copy package and config to installer vm
+          cd cd /usr/local/src/
+          scp Contrail_Service_Orchestration_4.0.1.tar.gz root@sdninstallervm.cwc.acsalaska.net:
+          scp Contrail_Service_Orchestration_4.0.1/confs/provision_vm.conf root@sdninstallervm.cwc.acsalaska.net:
+
+   * Configure initial deployment (sdninstallervm.cwc as root)
+
+     - prepare directory
+
+          cd /root
+          tar -xf Contrail_Service_Orchestration_4.0.1.tar.gz
+          cp provision_vm.conf Contrail_Service_Orchestration_4.0.1/confs/Contrail_Service_Orchestration_4.0.1
+
+      - start configuration
+
+          cd /root/Contrail_Service_Orchestration_4.0.1
+          ./setup_assist.sh
+
+   * Snapshot VMs (xen16/xen17/xen18/xen19 as root)
+
+          # shutdown VMs
+          for DOM in $(virsh list |grep sdn |awk '{print$2}');do
+             virsh shutdown ${DOM};
+          done
+
+          # snapshot VMs
+          SNAPDIR="/root/ubuntu_vm/snap1/$(date +%Y-%m-%d-%H%M)";
+          mkdir -p "${SNAPDIR}";
+          for DOM in $(virsh list --all |grep sdn |awk '{print$2}');do
+             echo ${DOM};
+             virsh dumpxml ${DOM} > "${SNAPDIR}/${DOM}.domxml";
+             cp -vpR --sparse=always /root/ubuntu_vm/${DOM} "${SNAPDIR}/${DOM}";
+          done
+
+          # restart VMs
+          for DOM in $(virsh list --inactive |grep sdn |awk '{print$2}');do
+             echo ${DOM};
+             virsh start ${DOM};
+          done
+
+   * Deploy and load services (sdninstallervm.cwc as root)
+
+          cd /root/Contrail_Service_Orchestration_4.0.1
+          ./deploy_infra_services.sh
+          ./deploy_micro_services.sh
+          ./load_services_data.sh
+
 
 Re-install CSO
 ==============
@@ -748,7 +788,7 @@ Unless otherwsie noted, the following is run as root from the respective hosts.
 
                SNAPDIR="/root/ubuntu_vm/snap1/$(date +%Y-%m-%d-%H%M)";
                mkdir -p "${SNAPDIR}";
-               for DOM in $(virsh list --all |grep sdwan |grep -v install |awk '{print$2}');do
+               for DOM in $(virsh list --all |grep sdn |grep -v install |awk '{print$2}');do
                   echo ${DOM};
                   virsh dumpxml ${DOM} > "${SNAPDIR}/${DOM}.domxml";
                   cp -vpR --sparse=always /root/ubuntu_vm/${DOM} "${SNAPDIR}/${DOM}";