update Meraki code to match Meraki DNE

Author: denapom11

intro-meraki/meraki-mission-1/mxfirewallcontrol.py

@@ -0,0 +1,180 @@
+"""The provided sample code in this repository will reference this file to get the
+information needed to connect to your lab backend.  You provide this info here
+once and the scripts in this repository will access it as needed by the lab.
+Copyright (c) 2019 Cisco and/or its affiliates.
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+"""
+
+# Libraries
+from pprint import pprint
+import sys, os, getopt, json, time, datetime
+from webexteamssdk import WebexTeamsAPI
+import requests
+
+# Get the absolute path for the directory where this file is located "here"
+here = os.path.abspath(os.path.dirname(__file__))
+
+# Get the absolute path for the project / repository root
+project_root = os.path.abspath(os.path.join(here, ".."))
+
+# Extend the system path to include the project root and import the env files
+sys.path.insert(0, project_root)
+import env_user  # noqa
+
+# WEBEX TEAMS LIBRARY
+teamsapi = WebexTeamsAPI(access_token=env_user.WT_ACCESS_TOKEN)
+
+# MERAKI BASE URL 
+base_url = "https://api.meraki.com/api/v0"
+
+def getnetworklist():
+    orgs = ""
+
+    # Get Orgs that entered Meraki API Key has access to
+    try:
+        # MISSION TODO
+        orgs = requests.get(
+            base_url + "TODO:ADD URL TO GET ORGANIZATION LIST HERE",
+            headers={
+                "X-Cisco-Meraki-API-Key": env_user.MERAKI_API_KEY,
+            }
+        )
+        # Deserialize response text (str) to Python Dictionary object so
+        # we can work with it
+        orgs = json.loads(orgs.text)
+        pprint(orgs)
+        # END MISSION SECTION
+    except Exception as e:
+        pprint(e)
+
+    # Now get a specific network based on name added on command line
+    networks = ""
+    if orgs != "":
+        for org in orgs:
+            try:
+                # MISSION TODO
+                networks = requests.get(
+                    base_url + "TODO:ADD URL TO GET NETWORK LIST HERE (be sure to add organization id to the string)",
+                    headers={
+                        "X-Cisco-Meraki-API-Key": env_user.MERAKI_API_KEY,
+                    })
+                # Deserialize response text (str) to Python Dictionary object so
+                # we can work with it
+                networks = json.loads(networks.text)
+                pprint(networks)
+                return networks
+                # END MISSION SECTION
+            except Exception as e:
+                pprint(e)
+                return ""
+    
+    return "No Networks Found"
+
+
+def get_mx_l3_firewall_rules(network):
+    # return the MX L3 firewall ruleset for a network
+    try:
+        # MISSION TODO
+        rules = requests.get(
+                base_url + "TODO:ADD URL TO GET L3 Firewall Rules HERE (be sure to add network id to the string)",
+                headers={
+                    "X-Cisco-Meraki-API-Key": env_user.MERAKI_API_KEY,
+                })
+        pprint(network + ": " + rules.text)
+        return rules.text
+        # END MISSION SECTION
+    except Exception as e:
+        pprint("Rules lookup failed")
+        pprint(e)
+        return ""
+
+def createbackup(networks):
+    # create directory to place backups
+    flag_creationfailed = True
+    MAX_FOLDER_CREATE_TRIES = 5
+    for i in range(0, MAX_FOLDER_CREATE_TRIES):
+        time.sleep(2)
+        timestamp = "{:%Y%m%d_%H%M%S}".format(datetime.datetime.now())
+        directory = "mxfwctl_backup_" + timestamp
+        flag_noerrors = True
+        try:
+            os.makedirs(directory)
+        except Exception as e:
+            print(e)
+            flag_noerrors = False
+        if flag_noerrors:
+            flag_creationfailed = False
+            break
+
+    if flag_creationfailed:
+        pprint("Unable to create directory for backups")
+        sys.exit(2)
+    else:
+        pprint('INFO: Backup directory is ' + directory)
+
+    # create backups - one file per network
+    for network in networks:
+        rules = get_mx_l3_firewall_rules(network["id"])
+        if rules != "":
+            filename = network["id"] + ".json"
+            filepath = directory + "/" + filename
+            if os.path.exists(filepath):
+                pprint(
+                    "Cannot create backup file: name conflict " + filename
+                )
+                sys.exit(2)
+            else:
+                try:
+                    f = open(filepath, "w")
+                except Exception as e:
+                    pprint(
+                        "Unable to open file path for writing: " + filepath
+                    )
+                    sys.exit(2)
+
+
+                f.write(rules)
+
+                try:
+                    f.close()
+                except Exception as e:
+                    pprintusertext(
+                        "Unable to close file path: " + filepath
+                    )
+                    sys.exit(2)
+
+                pprint(
+                    "INFO: Created backup for " + network["name"]
+                )
+
+                teamsapi.messages.create(
+                    env_user.WT_ROOM_ID,
+                    files=[filepath],
+                    text="Network " + network["name"] + " L3 Rules Backup",
+                )
+        else:
+            pprint(
+                "WARNING: Unable to read MX ruleset for " + network["name"]
+            )
+            
+    return (0)    
+
+# Launch application
+if __name__ == "__main__":
+    # Configuration parameters
+    networks = getnetworklist()
+    createbackup(networks)

intro-meraki/meraki-mission-1/requirements.txt

@@ -0,0 +1,4 @@
+Flask==1.1.1
+requests==2.22.0
+requests-toolbelt==0.9.1
+webexteamssdk==1.2

intro-meraki/meraki-webhooks/README.md

@@ -0,0 +1,2 @@
+# meraki_webhook_sample_webex_teams
+Sample Meraki Service That Posts to WebEx Teams

intro-meraki/meraki-webhooks/requirements.txt

@@ -0,0 +1,4 @@
+Flask==1.1.1
+requests==2.22.0
+requests-toolbelt==0.9.1
+webexteamssdk==1.2

intro-meraki/meraki-webhooks/webhookreceiver.py

@@ -0,0 +1,93 @@
+"""Set the Environment Information Needed to Access Your Lab!
+
+The provided sample code in this repository will reference this file to get the
+information needed to connect to your lab backend.  You provide this info here
+once and the scripts in this repository will access it as needed by the lab.
+
+
+Copyright (c) 2018 Cisco and/or its affiliates.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+"""
+
+# Libraries
+from pprint import pprint
+from flask import Flask, json, request, render_template
+import sys, os, getopt, json
+from webexteamssdk import WebexTeamsAPI
+import requests
+
+# Get the absolute path for the directory where this file is located "here"
+here = os.path.abspath(os.path.dirname(__file__))
+
+# Get the absolute path for the project / repository root
+project_root = os.path.abspath(os.path.join(here, ".."))
+
+# Extend the system path to include the project root and import the env files
+sys.path.insert(0, project_root)
+import env_user  # noqa
+
+# WEBEX TEAMS LIBRARY
+teamsapi = WebexTeamsAPI(access_token=env_user.WT_ACCESS_TOKEN)
+
+# Flask App
+app = Flask(__name__)
+
+# Webhook Receiver Code - Accepts JSON POST from Meraki and 
+# Posts to WebEx Teams
+@app.route("/", methods=["POST"])
+def get_webhook_json():
+    global webhook_data
+
+    # Webhook Receiver
+    webhook_data = request.json
+    pprint(webhook_data, indent=1)
+    webhook_data = json.dumps(webhook_data)
+    # WebEx Teams can only handle so much text so limit to 1000 chars
+    webhook_data = webhook_data[:1000] + '...'
+
+    # Send Message to WebEx Teams
+    teamsapi.messages.create(
+        env_user.WT_ROOM_ID,
+        text="Meraki Webhook Alert: " + webhook_data
+    )
+
+    # Return success message
+    return "WebHook POST Received"
+
+# Launch application with supplied arguments
+def main(argv):
+    try:
+        opts, args = getopt.getopt(argv, "hs:", ["secret="])
+    except getopt.GetoptError:
+        print("webhookreceiver.py -s <secret>")
+        sys.exit(2)
+    for opt, arg in opts:
+        if opt == "-h":
+            print("webhookreceiver.py -s <secret>")
+            sys.exit()
+        elif opt in ("-s", "--secret"):
+            secret = arg
+
+    print("secret: " + secret)
+
+
+if __name__ == "__main__":
+    main(sys.argv[1:])
+    app.run(host="0.0.0.0", port=5005, debug=False)

intro-meraki/meraki_cloud_simulator/README.md

@@ -0,0 +1,40 @@
+# Meraki Cloud Simulator
+Locally run Python 3.5+ Flask based application that provides HTTP POST simulations of Location Scanning, WebHook Alerts and Splash Page (Captive Portal) Integrations.
+
+To run:
+
+* virtual envrionment:
+```
+python -m venv simulator
+source simulator/bin/activate
+```
+
+* Install dependencies
+```
+pip install -r requirements.txt
+```
+
+* Go!
+```
+python meraki_cloud_simulator.py
+```
+
+Navigate to http://localhost:5001/go and select the simulator you'd like to use.
+
+All of the below require a third party application to be running for these simulations to send data to.  Baseline samples can be found at:
+
+* Location Scanning sample receiver
+* Webhook Sample receiver
+* Captive Portal Sample
+
+## Location Scanning
+
+Enter number of clients and APs for the simulator provide location data, set the location of the desired map and the receiving services url and hit Launch Simulator to run.  Location data for that location, AP and client set will be generated and HTTP Posted to the url provided
+
+## Webhook Alerts
+
+Select the alerts for this service to send and configure the HTTP listening service at the bottom and set as default receiver.  Upon Save, sample alerts will be sent on a 10 second basis>
+
+## Captive portal
+
+Enter the URL for the captive portal to be tested and the continuation URL.  Upon hitting "Simulate WiFi Connection" the service will open a new tab to the captive portal as if your local client was connecting to a Meraki SSID and serving up a captive portal

intro-meraki/meraki_cloud_simulator/meraki_cloud_simulator.py

@@ -0,0 +1,42 @@
+"""Cisco Meraki Cloud Simulator for External Captive Portal labs."""
+
+from merakicloudsimulator import merakicloudsimulator
+from merakicloudsimulator.meraki_settings import ORGANIZATIONS, NETWORKS
+from flask import render_template,jsonify,abort
+
+# Module Constants & Simulated Cloud Data
+WEB_SERVER_HOSTNAME = "localhost"
+WEB_SERVER_BIND_IP = "0.0.0.0"
+WEB_SERVER_BIND_PORT = 5001
+
+@merakicloudsimulator.route("/go", methods=["GET"])
+def meraki_simulator_go():
+    return render_template("index.html")
+
+# Flask micro-webservice API/URI endpoints
+@merakicloudsimulator.route("/organizations", methods=["GET"])
+def get_org_id():
+    """Get a list of simulated organizations."""
+    return jsonify(ORGANIZATIONS)
+
+
+@merakicloudsimulator.route("/organizations/<organization_id>/networks", methods=["GET"])
+def get_networks(organization_id):
+    """Get the list of networks for an organization."""
+    organization_networks = NETWORKS.get(organization_id)
+    if organization_networks:
+        return jsonify(organization_networks)
+    else:
+        abort(404)
+
+if __name__ == "__main__":
+    print(
+        f"\n>>> "
+        f"Open your browser and browse to "
+        f"http://{WEB_SERVER_HOSTNAME}:{WEB_SERVER_BIND_PORT}/go "
+        f"to configure the captive portal and simulate a client login."
+        f" <<<\n"
+    )
+
+    # Start the web server
+    merakicloudsimulator.run(host=WEB_SERVER_BIND_IP, port=WEB_SERVER_BIND_PORT, threaded=True, debug=False)

intro-meraki/meraki_cloud_simulator/merakicloudsimulator/__init__.py

@@ -0,0 +1,10 @@
+from flask import Flask, request, render_template, redirect, jsonify, abort
+
+merakicloudsimulator = Flask(__name__)
+
+from merakicloudsimulator import meraki_settings
+from merakicloudsimulator import alert_settings
+from merakicloudsimulator import sample_alert_messages
+from merakicloudsimulator import excapsimulator
+from merakicloudsimulator import locationscanningsimulator
+from merakicloudsimulator import webhooksimulator