fb630c926a
* fix nxos_facts ipv6 error
* time_range not supported for N35
(cherry picked from commit db43fe6a76)
66 lines
1.4 KiB
YAML
66 lines
1.4 KiB
YAML
---
|
|
- debug: msg="START connection={{ ansible_connection }} nxos_acl sanity test"
|
|
- debug: msg="Using provider={{ connection.transport }}"
|
|
when: ansible_connection == "local"
|
|
|
|
- set_fact: time_range="ans-range"
|
|
when: not (platform is match("N5K")) and not (platform is match("N35"))
|
|
|
|
- name: "Setup: Cleanup possibly existing acl."
|
|
nxos_acl: &remove
|
|
name: TEST_ACL
|
|
seq: 10
|
|
state: absent
|
|
provider: "{{ connection }}"
|
|
ignore_errors: yes
|
|
|
|
- name: "Configure ACL"
|
|
nxos_acl: &configure
|
|
name: TEST_ACL
|
|
seq: 10
|
|
action: permit
|
|
proto: tcp
|
|
src: 1.1.1.1/24
|
|
src_port_op: range
|
|
src_port1: 1900
|
|
src_port2: 1910
|
|
ack: 'enable'
|
|
dscp: 'af43'
|
|
dest: any
|
|
urg: 'enable'
|
|
psh: 'enable'
|
|
established: 'enable'
|
|
log: 'enable'
|
|
fin: 'enable'
|
|
rst: 'enable'
|
|
syn: 'enable'
|
|
time_range: "{{time_range|default(omit)}}"
|
|
state: present
|
|
provider: "{{ connection }}"
|
|
register: result
|
|
|
|
- assert: &true
|
|
that:
|
|
- "result.changed == true"
|
|
|
|
- name: "Check Idempotence"
|
|
nxos_acl: *configure
|
|
register: result
|
|
|
|
- assert: &false
|
|
that:
|
|
- "result.changed == false"
|
|
|
|
- name: "Remove ACL"
|
|
nxos_acl: *remove
|
|
register: result
|
|
|
|
- assert: *true
|
|
|
|
- name: "Check Idempotence"
|
|
nxos_acl: *remove
|
|
register: result
|
|
|
|
- assert: *false
|
|
|
|
- debug: msg="END connection={{ ansible_connection }} nxos_acl sanity test"
|