final.py

# CIS 347 Group 5: David, Josh, Mario, Santiago
import requests
import yaml
from jnpr.junos import Device
from jnpr.junos.utils.config import Config
from jnpr.junos.factory.factory_loader import FactoryLoader

#OpenDayLight RESTCONF API settings.
odl_ip = raw_input("Enter your OpenDayLight IP: ")
username = raw_input('Enter ODL username: ')
password = raw_input('Enter ODL password: ')
odl_url = 'http://' + odl_ip + ':8181/restconf/operational/network-topology:network-topology'
odl_username = username
odl_password = password

# Fetch information from API.
response = requests.get(odl_url, auth=(odl_username, odl_password))

# Find information about nodes in retrieved JSON file.
odl_macs = []
for nodes in response.json()['network-topology']['topology']:

    	# Walk through all node information.
        node_info = nodes['node']

	# Look for MAC and IP addresses in node information.
	for node in node_info:
		try:
			ip_address = node['host-tracker-service:addresses'][0]['ip']
			mac_address = node['host-tracker-service:addresses'][0]['mac']
			odl_parse = 'Found host with MAC address %s and IP address %s' % (mac_address, ip_address)
			odl_macs.append(mac_address)
			print odl_parse
		except:
			pass

# Part 2 ---------------------------------------------------------------------------------------------------


yaml_data = '''
---
EtherSwTable:
  rpc: get-interface-ethernet-switching-table
  item: ethernet-switching-table/mac-table-entry[mac-type='Learn']
  key: mac-address
  view: EtherSwView

EtherSwView:
  fields:
    vlan_name: mac-vlan
    mac: mac-address
    mac_type: mac-type
    mac_age: mac-age
    interface: mac-interfaces-list/mac-interfaces
'''
# Login to switch
host = raw_input('Enter Switch IP: ')
switch_user = raw_input('Enter switch username: ')
switch_password = raw_input('Enter switch password: ')
dev = Device(host='%s' % (host),user='%s' % (switch_user),password='%s' %(switch_password))
dev.open()

# Retrieve ArpTable info
globals().update(FactoryLoader().load(yaml.load(yaml_data)))
table = EtherSwTable(dev)
table.get()

# Organize Arp entries
mac_table = []
for i in table:
  	print 'vlan_name:', i.vlan_name
  	print 'mac:', i.mac
  	print 'mac_type:', i.mac_type
  	print 'mac_age:', i.mac_age
  	print 'interface:', i.interface
  	print
  	mac_table.append(i.interface+'|'+i.mac)

# Compare MACs from ODL and ARP Table
mac_set = [i for e in odl_macs for i in mac_table if e in i]
#port_interface = [i.split('|', 1)[0] for i in mac_set]
#port_mac = [i.split('|', 1)[1] for i in mac_set]

# Automate the port security for each entry in final list.
print mac_set
port_security = raw_input('These MACs match your ODL flow MACs. Would you like to bind these MACs to their current interface? (yes or no) ')
if port_security.lower() == 'yes':
	config_add =[]
	for i in mac_set:
		 mac = [i.split('|', 1)[1]]
		 new_mac = mac.pop()
		 interface = [i.split('|', 1)[0]]
		 interface = [i[:-2] for i in interface]
		 #print interface
		 new_interface = interface.pop()
		 #print new_interface
		 config_add.append('set interface %s allowed-mac %s' % (new_interface, new_mac))
	set_add = '\n'.join(map(str,config_add))
	print set_add
	config_script = """
	edit ethernet-switching-options secure-access-port
	%s
	""" % (set_add)

	cu = Config(dev)
	cu.load(config_script, format="set", merge=True)
	print 'These are the changes:\n ' + cu.diff()
#	print cu.diff()
	cu.commit()
	print "Configuration Successful! Goodbye."
	dev.close()
else:
	print "Too bad. Switch, out."
	dev.close()