�
�Udac @ s i d d 6d g d 6d d 6Z d Z d Z d Z d d
l m Z m Z d d l m Z m Z d d l m Z d d
l
m Z i d d 6d d 6d d 6d d 6Z
d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z e d k re � n d S( s 1.1t metadata_versiont previewt statust networkt supported_bysu
---
module: nxos_hsrp
extends_documentation_fragment: nxos
version_added: "2.2"
short_description: Manages HSRP configuration on NX-OS switches.
description:
- Manages HSRP configuration on NX-OS switches.
author:
- Jason Edelman (@jedelman8)
- Gabriele Gerbino (@GGabriele)
notes:
- Tested against NXOSv 7.3.(0)D1(1) on VIRL
- HSRP feature needs to be enabled first on the system.
- SVIs must exist before using this module.
- Interface must be a L3 port before using this module.
- HSRP cannot be configured on loopback interfaces.
- MD5 authentication is only possible with HSRPv2 while it is ignored if
HSRPv1 is used instead, while it will not raise any error. Here we allow
MD5 authentication only with HSRPv2 in order to enforce better practice.
options:
group:
description:
- HSRP group number.
required: true
interface:
description:
- Full name of interface that is being managed for HSRP.
required: true
version:
description:
- HSRP version.
default: 1
choices: ['1','2']
priority:
description:
- HSRP priority or keyword 'default'.
preempt:
description:
- Enable/Disable preempt.
choices: ['enabled', 'disabled']
vip:
description:
- HSRP virtual IP address or keyword 'default'
auth_string:
description:
- Authentication string. If this needs to be hidden(for md5 type), the string
should be 7 followed by the key string. Otherwise, it can be 0 followed by
key string or just key string (for backward compatibility). For text type,
this should be just be a key string. if this is 'default', authentication
is removed.
auth_type:
description:
- Authentication type.
choices: ['text','md5']
state:
description:
- Specify desired state of the resource.
choices: ['present','absent']
default: 'present'
s�
- name: Ensure HSRP is configured with following params on a SVI
nxos_hsrp:
group: 10
vip: 10.1.1.1
priority: 150
interface: vlan10
preempt: enabled
host: 68.170.147.165
- name: Ensure HSRP is configured with following params on a SVI
with clear text authentication
nxos_hsrp:
group: 10
vip: 10.1.1.1
priority: 150
interface: vlan10
preempt: enabled
host: 68.170.147.165
auth_type: text
auth_string: CISCO
- name: Ensure HSRP is configured with md5 authentication and clear
authentication string
nxos_hsrp:
group: 10
vip: 10.1.1.1
priority: 150
interface: vlan10
preempt: enabled
host: 68.170.147.165
auth_type: md5
auth_string: "0 1234"
- name: Ensure HSRP is configured with md5 authentication and hidden
authentication string
nxos_hsrp:
group: 10
vip: 10.1.1.1
priority: 150
interface: vlan10
preempt: enabled
host: 68.170.147.165
auth_type: md5
auth_string: "7 1234"
- name: Remove HSRP config for given interface, group, and VIP
nxos_hsrp:
group: 10
interface: vlan10
vip: 10.1.1.1
host: 68.170.147.165
state: absent
s�
commands:
description: commands sent to the device
returned: always
type: list
sample: ["interface vlan10", "hsrp version 2", "hsrp 30", "ip 10.30.1.1"]
i����( t load_configt run_commands( t get_capabilitiest nxos_argument_spec( t get_interface_type( t
AnsibleModulet vipt 100t priorityt textt auth_typet ciscot auth_stringc C se i } xX | D]P } | j | � } | r
| j | � } | rP t | � | | <q] | | | <q
q
W| S( N( t gett str( t key_mapt tablet new_dictt keyt new_keyt value( ( sJ /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_hsrp.pyt
apply_key_map� s
c C s� d j | � } i } d } y t | | g � d } Wn t k
rI d SX| d k r� | d d } t | j d d � � } | d
k s� | d k r� d } q� n | d
k r� d } n | S( Ns show interface {0} | jsont unknowni t ethernett portchannelt TABLE_interfacet
ROW_interfacet eth_modet layer3t accesst trunkt layer2t svi( R R ( t formatR t
IndexErrort NoneR R ( t interfacet intf_typet modulet commandt modet bodyt interface_table( ( sJ /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_hsrp.pyt get_interface_mode� s
c
C s� d j | � } i } i d d 6d d 6d d 6d d 6d
d 6d d
6d d 6d d 6d d 6} ye t | | g � d } | d d } d | k r� | d =n d t | � k r� t | | | � } n Wn t t t t f k
r� i SXt | t � r� | g } n x� | D]� } t
| | � } | d j � | d <| d d k rHd | d <n | d d k red | d <n | d d k r�| d d k r�d | d <q�d | d <n | d | k r| SqW| S( Ns show hsrp group {0} all | jsonR) t sh_if_indext groupt sh_group_numt versiont sh_group_versionR
t sh_cfg_priot preemptt
sh_preemptR t sh_vipR t sh_authentication_typet auth_enct sh_keystring_attrR t sh_authentication_datai t TABLE_grp_detailt ROW_grp_details
unknown enum:t v1t 1t v2t 2t md5t hiddent 7t 0( R& R R t get_hsrp_group_unknown_enumt AttributeErrorR' t TypeErrort KeyErrort
isinstancet dictR t lower(
R2 R) R+ R, t hsrpt hsrp_keyR. t
hsrp_tablet
hsrp_groupt parsed_hsrp( ( sJ /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_hsrp.pyt get_hsrp_group� sJ
c C sg d | d k rc i d d 6| j d � d d 6} t | | � d } d | k rV d n d
| d <n | S( sW Some older NXOS images fail to set the attr values when using structured output and
instead set the values to <unknown enum>. This fallback method is a workaround that
uses an unstructured (text) request to query the device a second time.
'sh_preempt' is currently the only attr affected. Add checks for other attrs as needed.
s
unknown enum:R8 R t outputt |i R, s may preemptt enabledt disabled( t splitR ( R+ R, RQ t cmdt out( ( sJ /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_hsrp.pyRH � s
! c C s" d j | � d j | � g } | S( Ns
interface {0}s no hsrp {0}( R& ( R2 R) t commands( ( sJ /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_hsrp.pyt get_commands_remove_hsrp� s c
C s� g } i d d 6d d 6d d 6d d 6} | j d d � } | j d d � } | j d d � } | j d d � } | r� | d k r� d | d <q� | d
k r� d | d <q� n | r| d k r� | r� | j d � t j d � k r� d
| d <q| d =qd j | d � | d <n | ry| d k r_| rU| j d � t j d � k rUd | d <qv| d =qyd j | d � | d <n xp | D]h }
| j |
d � j | � } | r�| d k r�|
d k r�| j d | � q�| j | � n d } q�W| j d d � } | j d d � }
| j d d � } | s.|
r�| sA| d } n |
sT| d }
n |
d k r�| d k r�d j | |
� } | j | � q�| d k r�d j |
� } | j | � q�q�| r�| j d � t j d � k r�| j d � q�n | r | r | j d d j | d � � n | j d d � } | r�| d k rMd } n | d k rbd } n | j d | � | j d d! j | � � n | r�| d j d" � s�| j d d! j | � � q�n | S(# Ns hsrp {group}R2 s
{priority}R
s {preempt}R7 s {vip}R RW RX s
no preemptt defaults no prioritys priority {0}s no ips ip {0}t DNEi R R R; RD s% authentication md5 key-string {0} {1}R s authentication text {0}s no authentications hsrp {0}R4 RC s hsrp version 2RA s hsrp version 1s
interface {0}R) ( R R( t PARAM_TO_DEFAULT_KEYMAPR& t insertt appendt
startswith( t deltaR) t argst existingR\ t config_argsR7 R2 R R
R R, R R R; R4 ( ( sJ /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_hsrp.pyt get_commands_config_hsrp� s�
$
$
$
c C s� d j | � } y` t | | g d t �d } d | j � k rD d S| j d � } | d j d � rj t St SWn t k
r� d SXd S( Ns show run interface {0}t check_rci t invalidR_ s
i����R) ( R& R t FalseRN RY Rc t TrueRK ( R) R+ R, R. t raw_list( ( sJ /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_hsrp.pyt
is_defaultO s
c C s> d j | � } d | j � k r: | j d d d | � n d S( Nt s invalid ip addresst msgs+ Invalid VIP. Possible duplicate IP address.R ( t joinRN t fail_json( R. R R+ t new_body( ( sJ /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_hsrp.pyt validate_config` s c C s� t d t d t d d � d t d t � d t d d d g d
d d t � d t d d d t � d t d d d d
d g d t � d t d d d t � d t d d d g d t � d t d d d t � d t d d d g d t d
d � � } | j t � t d | d t � } t � } t d t d | � } | j d j � } | j d } | j d } | j d } | j d } | j d } | j d }
| j d } | j d } d }
d } | rI| j
� } t | � d k r�| d }
| d } n/ t | � d k r | d } n | j d d � |
d k rI|
d! k rI| j d d" � qIn t
| � } | j d# d$ � } t | � } | d% k r�| d& k r�t | | � d' k r�| j d d( d | � n | d) k r�| j d d* d | � q�n t | | | � } | d+ k r| j d d, d | � n | s$| rF| o-| sF| j d d- � qFn t d | d | d | d | d |
d | d | d. |
� } t d/ � | j � D� � } t | | | � } | j d d � d k r�| d d k rF| j d d0 � qFn[ | j d d � rF| rF| d d k rF| d d k rF| d k rF| j d d1 � qFn g } | d k r�t t | j � � j | j � � � } | r�t | | | | � } | j | � q�n4 | d k r�| r�t | | � } | j | � q�n | r�| j r | j | � q�t | | � | d& k rW| d k rW| j d d2 � t | | � } t | |
| � n t | d <d3 | k r�| j d � q�n | | d4 <| j | � d S(5 NR2 t requiredt typeR R) R4 t choicesRA RC R^ R
R7 RX RW R R R RD R t statet absentt presentt
argument_spect supports_check_modet changedt warningsRG i i i Rp s Invalid auth_stringRF s( Invalid auth_string, only 0 or 7 allowedt network_apit nxapiR t cliconfR_ s3 That interface does not exist yet. Create it first.t loopbacks' Loopback interfaces don't support HSRP.R$ s> That interface is a layer2 port.
Make it a layer 3 port first.sD When using auth parameters, you need BOTH auth_type AND auth_string.R; c s s- | ]# \ } } | d k r | | f Vq d S( N( R( ( t .0t kt v( ( sJ /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_hsrp.pys <genexpr>� s s2 It's recommended to use HSRP v2 when auth_type=md5sI Existing auth_type is md5. It's recommended to use HSRP v2 when using md5s config tt configureR\ ( RM Rl Rk t updateR R
t listt paramsRN R( RY t lenRr R R R Rn R0 t itemsRT t sett
differenceRh t extendR] t
check_modet exit_jsonR Ra R Rt t pop( R{ R+ R~ t resultsR) R2 R4 Rx R
R7 R R t auth_full_stringR; R t kstrt device_infoR R* R- Re t proposedRf R\ Rd R, R. ( ( sJ /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_hsrp.pyt maing s� !!$
$
t __main__N( t ANSIBLE_METADATAt
DOCUMENTATIONt EXAMPLESt RETURNt& ansible.module_utils.network.nxos.nxosR R R R R t ansible.module_utils.basicR
R( R` R R0 RT RH R] Rh Rn Rt R� t __name__( ( ( sJ /usr/lib/python2.7/site-packages/ansible/modules/network/nxos/nxos_hsrp.pyt <module> s2
>7
3
V w
Anons79 File Manager Version 1.0, Coded By Anons79
Email: [email protected]
Anons79 Mini Shell