IP Infusion

This guide covers switches and routers running IP Infusion OcNOS, the network OS used on many open networking (white-box) platforms.

Create a backup account

Create a dedicated user named netwatch-backup in the device's user management. OcNOS provides role-based access; assign the read-only operator role if your release can display the full running configuration with it, and the network administrator role otherwise. QUARK only runs show commands, so prefer the least-privileged role that works on your version.

If you authenticate administrators through RADIUS or TACACS+, you can define the account there instead, provided the resulting session can display the running configuration.

Enable SSH

OcNOS is managed over SSH. Confirm the SSH server is enabled on the management interface and that the device is reachable from the Netwatch collector on TCP port 22. If you use management-plane ACLs or firewall rules on the management VRF, permit the collector's IP address.

Platform notes

• On devices where the management port is in a dedicated management VRF, register the management-VRF address in QUARK and make sure the collector can route to it.
• QUARK retrieves the running configuration as displayed by the CLI; it does not read or modify the underlying Linux system.

Enable backup in Netwatch

Once the device is prepared, open its host in Netwatch (Data collection > Hosts) and add the Config Backup macros — the supported status flag, the model code for this platform, and the credentials you created. See Getting started for the full macro list and values.