�
�Udac @ s� i d d 6d g d 6d d 6Z d Z d Z d Z d d
l m Z m Z d d l m Z m Z d d l m
Z
e d
� Z d � Z
d � Z d � Z d � Z d � Z d � Z e d k r� e � n d S( s 1.1t metadata_versiont previewt statust networkt supported_bys
---
module: nxos_acl
extends_documentation_fragment: nxos
version_added: "2.2"
short_description: Manages access list entries for ACLs.
description:
- Manages access list entries for ACLs.
author:
- Jason Edelman (@jedelman8)
- Gabriele Gerbino (@GGabriele)
notes:
- Tested against NXOSv 7.3.(0)D1(1) on VIRL
- C(state=absent) removes the ACE if it exists.
- C(state=delete_acl) deletes the ACL if it exists.
- For idempotency, use port numbers for the src/dest port
params like I(src_port1) and names for the well defined protocols
for the I(proto) param.
- Although this module is idempotent in that if the ace as presented in
the task is identical to the one on the switch, no changes will be made.
If there is any difference, what is in Ansible will be pushed (configured
options will be overridden). This is to improve security, but at the
same time remember an ACE is removed, then re-added, so if there is a
change, the new ACE will be exactly what parameters you are sending to
the module.
options:
seq:
description:
- Sequence number of the entry (ACE).
name:
description:
- Case sensitive name of the access list (ACL).
required: true
action:
description:
- Action of the ACE.
choices: ['permit', 'deny', 'remark']
remark:
description:
- If action is set to remark, this is the description.
proto:
description:
- Port number or protocol (as supported by the switch).
src:
description:
- Source ip and mask using IP/MASK notation and
supports keyword 'any'.
src_port_op:
description:
- Source port operands such as eq, neq, gt, lt, range.
choices: ['any', 'eq', 'gt', 'lt', 'neq', 'range']
src_port1:
description:
- Port/protocol and also first (lower) port when using range
operand.
src_port2:
description:
- Second (end) port when using range operand.
dest:
description:
- Destination ip and mask using IP/MASK notation and supports the
keyword 'any'.
dest_port_op:
description:
- Destination port operands such as eq, neq, gt, lt, range.
choices: ['any', 'eq', 'gt', 'lt', 'neq', 'range']
dest_port1:
description:
- Port/protocol and also first (lower) port when using range
operand.
dest_port2:
description:
- Second (end) port when using range operand.
log:
description:
- Log matches against this entry.
choices: ['enable']
urg:
description:
- Match on the URG bit.
choices: ['enable']
ack:
description:
- Match on the ACK bit.
choices: ['enable']
psh:
description:
- Match on the PSH bit.
choices: ['enable']
rst:
description:
- Match on the RST bit.
choices: ['enable']
syn:
description:
- Match on the SYN bit.
choices: ['enable']
fin:
description:
- Match on the FIN bit.
choices: ['enable']
established:
description:
- Match established connections.
choices: ['enable']
fragments:
description:
- Check non-initial fragments.
choices: ['enable']
time_range:
description:
- Name of time-range to apply.
precedence:
description:
- Match packets with given precedence.
choices: ['critical', 'flash', 'flash-override', 'immediate',
'internet', 'network', 'priority', 'routine']
dscp:
description:
- Match packets with given dscp value.
choices: ['af11', 'af12', 'af13', 'af21', 'af22', 'af23','af31','af32',
'af33', 'af41', 'af42', 'af43', 'cs1', 'cs2', 'cs3', 'cs4',
'cs5', 'cs6', 'cs7', 'default', 'ef']
state:
description:
- Specify desired state of the resource.
default: present
choices: ['present','absent','delete_acl']
s�
# configure ACL ANSIBLE
- nxos_acl:
name: ANSIBLE
seq: 10
action: permit
proto: tcp
src: 192.0.2.1/24
dest: any
state: present
s�
commands:
description: commands sent to the device
returned: always
type: list
sample: ["ip access-list ANSIBLE", "10 permit tcp 192.0.2.1/24 any"]
i����( t load_configt run_commands( t nxos_argument_spect
check_args( t
AnsibleModulec C s, | d 7} | g } t | | d | �} | S( Ns | jsont check_rc( R ( t commandt moduleR
t cmdst body( ( sI /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_acl.pyt execute_show_command� s
c C s4 d } g } i } i } t | | d t �} d t | � k rI i g f S| rn | d rn | d d d } n
i g f St | t � r� | j d � | k r� | } q� n0 x- | D]% } | j d � | k r� | } Pq� q� Wy! | d d }
| j d � } Wn" t k
r i i d
d 6g f SXt |
t � r9|
g }
n x�|
D]�} i } i }
| j d � } | | d
<t | j d � � | d <| r�| | d <d | d <n�| j d � | d <t | j d | j d | j d � � � � | d <| j d | j d � � | d <| j d � | d <| j d � | d <| j d � | d <| j d | j d � � | d <| j d � | d <| j d! � | d" <| j d# � | d$ <| j d% � |
d% <| j d& � |
d& <| j d' � |
d' <| j d( � |
d( <| j d) � |
d) <| j d* � |
d* <| j d+ � |
d+ <| j d, � |
d, <| j d- � |
d. <| j d/ � |
d0 <| j d1 � |
d1 <| j d2 � |
d3 <i } x- | j � D] \ } } | r�| | | <q�q�Wi } x3 |
j � D]% \ } } | d k r�| | | <q�q�W| | d4 <| j d � | k rt | � } n | j
| � q@W| | f S(5 Ns show ip access-listR
s Structured output unsupportedi t TABLE_ip_ipv6_mact ROW_ip_ipv6_mact acl_namet TABLE_seqnot ROW_seqnot
no_entriest aclt remarkt namet seqnot seqt actiont
permitdenyt protot proto_strt ipt src_anyt
src_ip_prefixt srct src_port_opt
src_port1_numt src_port1t
src_port2_numt src_port2t dest_anyt dest_ip_prefixt destt dest_port_opt dest_port1_numt
dest_port1t dest_port2_numt
dest_port2t logt urgt ackt psht rstt synt fint establishedt dscp_strt dscpt precedence_strt
precedencet fragmentst timeranget
time_ranget options( R t Falset reprt
isinstancet dictt gett KeyErrort strt itemst Nonet append( R R t
seq_numberR t new_aclt savemet acl_bodyR t all_acl_bodyR t acl_entriest eacht tempR? R t keept keyt valuet options_no_null( ( sI /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_acl.pyt get_acl� s�
1
c C sA d | } | d k r/ | d | d | 7} n | d | 7} | S( Nt t range( ( t operandt srcp1t sprcp2t sub_entry( ( sI /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_acl.pyt _acl_operand s
c C sA | j d � } | j d � } | j d � } | j d � } | j d � } | j d � } | j d � } | j d � } | j d � } | j d
� }
| j d � } | j d � } | | | g }
| s/| d
d
j |
� } | r� | t | | | � 7} n | d
| 7} |
r=| t |
| | � 7} q=n | d | } | S( NR R R R R" R# R% R' R* R+ R- R/ RW s remark ( RD t joinR] ( t proposedR R R R R" R# R% R' R* R+ R- R/ t ace_start_entriest ace( ( sI /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_acl.pyt config_core_acl s, c
C s� d d d d d d d d d d g
} d
d d g } | j d
� re | j d
� | d <| j d
� n d } xk | j � D]] \ } } | | k r� | d k r� | d | 7} q� qx | | k rx | d | d | 7} qx qx W| r� | j � } | Sd S( NR3 R1 R0 R2 R5 R7 R4 R6 R< R9 R; s
time-rangeR> t t enableRW ( RD t popRG t strip( R? t ENABLE_ONLYt OTHERR t optionRT ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_acl.pyt config_acl_options< s" c C sG g } x: | D]2 } t | t � r2 | j | � q
| j | � q
W| S( N( RB t listt extendRI ( t
command_listst flat_command_listR ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_acl.pyt flatten_listT s
c K s} t d t d t d d � d t d t d d � d t d t d d d d
g � d t d t d d � d t d t d d � d t d t d d � d
t d t � d t d t d d � d t d t d d � d t d t d d � d t d t � d t d t d d � d t d t d d � d t d t d d g � d t d t d d g � d t d t d d g � d t d t d d g � d t d t d d g � d t d t d d g � d t d t d d g � d t d t d d g � d t d t d d g � d t d t � d t d t d d d! d" d# d$ d% d& d' g � d( t d t d d) d* d+ d, d- d. d/ d0 d1 d2 d3 d4 d5 d6 d7 d8 d9 d: d; d< d= g � d> t d d? d@ dA g d< d@ � � } | j t � t dB | dC t � } t � } t | | � t dD t dE | � } | j d> } | j d } | j d } | j d( } | j d } | j d } | j d }
| j d } | d k rx| rx| j dF dG � n d d d d d d g } d d g } | d@ k r�| r�| r�| r�q~x� | D]2 }
| j |
d k r�| j dF dH dI | � q�q�Wn� | d? k rIxr | D]2 }
| j |
d k r| j dF dJ dI | � qqWn5 | dA k r~| j d d k r~| j dF dK � q~n | r�| r�| j dF dL � n d d d d d d d d d( d d d g � d d d d d d
d d d d d d d g
� t � f dM � | j j � D� � } t � f dN � | j j � D� � } i } | j | � | j | � i } t | |
| � \ } } | r�| j
dO � } | j dO � n g } i } i } | j
d � s�t t | j � � j | j � � � } | st t | j � � j | j � � � } n | } | r.| } q�t t | j � � j | j � � � } | s�t t | j � � j | j � � � } n | } n' t t | j � � j | j � � � } | d@ k r@| s�| r�| r�| j dP j | � g � n | rt | � } | dQ t | � 7} n t | � } | g } | j | � q�n{ | d? k rq| r�| j dP j | � g � q�nJ | dA k r�| r�| dR j
dS � dT k r�| j dU j |
� g � q�n g } | rbg } | dY k r�dV j |
� g } | j dR | � n t | � } | j r,| j dD t dW | � qbt | | � t | dD <dX | k rb| j dR � qbn | | dW <| j | � d S(Z NR t requiredt typeRF R R t choicesR t permitt denyR R" R# R% R' R* R+ R- R/ R0 Rd R1 R2 R3 R4 R5 R< R6 R7 R> R; t criticalt flashs flash-overridet immediatet internetR t priorityt routineR9 t af11t af12t af13t af21t af22t af23t af31t af32t af33t af41t af42t af43t cs1t cs2t cs3t cs4t cs5t cs6t cs7t defaultt eft statet absentt presentt
delete_aclt
argument_spect supports_check_modet changedt warningst msgs3 when state is action, remark param is also requireds# req'd params when state is present:t paramss# require params when state is absents) param name req'd when state is delete_acls2 only one of the params dscp/precedence are allowedc 3 s9 | ]/ \ } } | � k r | d k r | | f Vq d S( N( RH ( t .0t paramRT ( t CORE( sI /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_acl.pys <genexpr>� s c 3 s9 | ]/ \ } } | � k r | d k r | | f Vq d S( N( RH ( R� R� RT ( t
OPTIONS_NAMES( sI /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_acl.pys <genexpr>� s R? s no {0}RW i R R s no ip access-list {0}s ip access-list {0}t commandst configure( R� R� ( RC R@ t Truet updateR R Rk R R� t fail_jsonRH RG RV RD Re t sett
differenceRI t formatRb Rj t insertRo t
check_modet exit_jsonR ( R� R R� t resultsR� R R R9 R; R R t REQUIREDt ABSENTRP t
proposed_coret proposed_optionsR_ t existing_optionst
existing_coreR R� t
delta_coret
delta_optionst dcoret doptionst myacl_strR R
t preface( ( R� R� sI /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_acl.pyt main^ s" !
t __main__N( t ANSIBLE_METADATAt
DOCUMENTATIONt EXAMPLESt RETURNt& ansible.module_utils.network.nxos.nxosR R R R t ansible.module_utils.basicR R� R RV R] Rb Rj Ro R� t __name__( ( ( sI /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_acl.pyt <module> s"
� [
�
Anons79 File Manager Version 1.0, Coded By Anons79
Email: [email protected]
Anons79 Mini Shell