Function startAPMode

web/scripts/ragnar_modern.js:8089–8119

()

    } finally {
        _ndBusy(btn, false);
    }
}
async function vtpTrustBaseline() {
    try {
        await postAPI('/api/net/vtp-baseline', { action: 'reset' });
        addConsoleMessage('VTP baseline reset — re-learning current domain / revision / server', 'info');
        await runVtpWatch();
    } catch (e) {
        addConsoleMessage('Failed to reset VTP baseline: ' + e.message, 'error');
    }
}

// ---- IS-IS Watch (passive IGP routing-security scanner) --------------------
const _ISIS_VERDICT_STYLE = {
    clean:          ['bg-green-950/40 border-green-900 text-green-400', '✓ No IS-IS anomalies detected'],
    'weak-auth':    ['bg-amber-950/50 border-amber-800 text-amber-300', '⚠ IS-IS without HMAC auth (or cleartext) — exposed to LSP injection'],
    anomaly:        ['bg-amber-950/50 border-amber-800 text-amber-300', '⚠ IS-IS anomaly — duplicate system-id / new area'],
    storm:          ['bg-red-950/60 border-red-800 text-red-300', '🛑 IS-IS flooding storm detected'],
    'rogue-router': ['bg-red-950/60 border-red-800 text-red-300', '🛑 Rogue IS-IS speaker — adjacency spoofing'],
    injection:      ['bg-red-950/60 border-red-800 text-red-300', '🛑 IS-IS LSP / prefix injection detected'],
    unknown:        ['bg-slate-800 border-slate-700 text-slate-400', '— Could not determine'],
};
function _isisFillIfaces() {
    const sel = document.getElementById('isis-iface');
    if (!sel || sel.dataset.filled === '1') return Promise.resolve();
    return fetchAPI('/api/net/interfaces').then(x => {
        (x.interfaces || []).forEach(i => {
            const o = document.createElement('option');
            o.value = i.name;
            const tag = i.type === 'wifi' ? ' (WiFi)' : i.type === 'ethernet' ? ' (LAN)' : (i.type ? ' (' + i.type + ')' : '');
            o.textContent = i.name + tag;
            sel.appendChild(o);
        });
        sel.dataset.filled = '1';