ansible role opx mac

ansible-role-opx-mac

This role facilitates the configuration of an media access control (MAC). It supports the configuration of physical devices in your network. This role is abstracted for dellos9 and dellos10.

The ansible-role-opx-mac role requires an SSH connection for connectivity to an OpenSwitch OPX device. You can use any of the built-in OS connection variables or the provider dictionary.

Installation

ansible-galaxy install open-switch.ansible-role-opx-mac

Role variables

• Role is abstracted using the ansible_net_os_name variable that can take dellos9 or dellos10 values
• If dellos_cfg_generate is set to true, the variable generates the role configuration commands in a file
• Any role variable with a corresponding state variable set to absent negates the configuration of that variable
• Setting an empty value for any variable negates the corresponding configuration
• Variables and values are case-sensitive

ansible-role-opx-mac keys

Key	Type	Description	Support
type	string (required): mac	Configures the L2 (MAC) type	dellos9, dellos10
name	string (required)	Configures the name	dellos9, dellos10
description	string	Configures the description	dellos9, dellos10
state	string: absent,present*	Deletes the MAC address if set to absent	dellos9, dellos10

NOTE: Asterisk (*) denotes the default value if none is specified.

Connection variables

Ansible OpenSwitch OPX roles require connection information to establish communication with the nodes in inventory. This information can exist in the Ansible group_vars or host_vars directories, or in the playbook itself.

Key	Required	Choices	Description
host	yes		Specifies the hostname or address for connecting to the remote device over the specified transport variable (destination address for the transport)
port	no		Specifies the port used to build the connection to the remote device; if unspecified, the value defaults to 22
username	no		Specifies the username that authenticates the CLI login for connection to the remote device; if value is unspecified, the ANSIBLE_NET_USERNAME environment variable value is used
password	no		Specifies the password that authenticates the connection to the remote device; if value is unspecified, the ANSIBLE_NET_PASSWORD environment variable value is used
authorize	no	yes, no*	Instructs the module to enter privileged mode on the remote device before sending any commands; if value is unspecified, the ANSIBLE_NET_AUTHORIZE environment variable value is used, and the device attempts to execute all commands in non-privileged mode
auth_pass	no		Specifies the password to use if required to enter privileged mode on the remote device; if authorize is set to no, this key is not applicable; if value is unspecified, the ANSIBLE_NET_AUTH_PASS environment variable value is used
transport	yes	cli*	Specifies the transport connection to use when connecting to the remote device; key supports connectivity to the device over CLI (SSH)
provider	no		Passes all connection arguments as a dictionary object; all constraints (such as required or choices) must be met either by individual arguments or values in this dictionary

NOTE: Asterisk (*) denotes the default value if none is specified.

Dependencies

The ansible-role-opx-acl role is built on modules included in the core Ansible code. These modules were added in Ansible version 2.2.0.

Example playbook

This example uses the ansible-role-opx-mac role to configure different types of ACLs (standard and extended) for both IPv4 and IPv6 and assigns the access-class to the line terminals. The example creates a hosts file with the switch details and corresponding variables. The hosts file should define the ansible_net_os_name variable with the corresponding OS name.

When dellos_cfg_generate is set to true, it generates the configuration commands as a .part file in the build_dir path. By default it is set to false. It writes a simple playbook that only references the ansible-role-opx-mac role.

Sample hosts file

leaf1 ansible_host= <ip_address> ansible_net_os_name= <OS name(dellos9, dellos10)>

Sample host_vars/leaf1

hostname: leaf1
provider:
  host: "{{ hostname }}"
  username: xxxxx 
  password: xxxxx
  authorize: yes
  auth_pass: xxxxx 
  transport: cli
build_dir: ../temp/opx
opx_acl:
  - type: mac
    name: ssh-only
    description: mac
    entries:
      - number: 5
        permit: true
        protocol: tcp
        source: any
        src_condition: ack
        destination: any
        dest_condition: eq 22
        other_options: count
        state: present
    state: present

Simple playbook to setup system - leaf.yaml

- hosts: leaf1
  roles:
     - { role: open-switch.ansible-role-opx-mac, when: ansible_net_os_name is defined and ansible_net_os_name == "openswitch" }

Run

ansible-playbook -i hosts leaf.yaml