# Test code for the Meraki SSID module # Copyright: (c) 2018, Kevin Breit (@kbreit) # GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt) --- - block: - name: Test an API key is provided fail: msg: Please define an API key when: auth_key is not defined - name: Create test network meraki_network: auth_key: '{{auth_key}}' state: present org_name: '{{test_org_name}}' net_name: TestNetSSID type: wireless register: test_net - debug: msg: '{{test_net}}' - name: Query all SSIDs meraki_ssid: auth_key: '{{auth_key}}' state: query org_name: '{{test_org_name}}' net_name: TestNetSSID delegate_to: localhost register: query_all - name: Enable and name SSID meraki_ssid: auth_key: '{{auth_key}}' state: present org_name: '{{test_org_name}}' net_name: TestNetSSID name: AnsibleSSID enabled: true delegate_to: localhost register: enable_name_ssid - debug: msg: '{{ enable_name_ssid }}' - assert: that: - query_all.data | length == 15 - query_all.data.0.name == 'TestNetSSID WiFi' - enable_name_ssid.data.name == 'AnsibleSSID' - name: Check for idempotency meraki_ssid: auth_key: '{{auth_key}}' state: present org_name: '{{test_org_name}}' net_name: TestNetSSID name: AnsibleSSID enabled: true delegate_to: localhost register: enable_name_ssid_idempotent - debug: msg: '{{ enable_name_ssid_idempotent }}' - assert: that: - enable_name_ssid_idempotent.changed == False - enable_name_ssid_idempotent.data is defined - name: Query one SSIDs meraki_ssid: auth_key: '{{auth_key}}' state: query org_name: '{{test_org_name}}' net_name: TestNetSSID name: AnsibleSSID delegate_to: localhost register: query_one - debug: msg: '{{query_one}}' - assert: that: - query_one.data.name == 'AnsibleSSID' - name: Query one SSID with number meraki_ssid: auth_key: '{{auth_key}}' state: query org_name: '{{test_org_name}}' net_name: TestNetSSID number: 1 delegate_to: localhost register: query_one_number - debug: msg: '{{query_one_number}}' - assert: that: - query_one_number.data.name == 'AnsibleSSID' - name: Disable SSID without specifying number meraki_ssid: auth_key: '{{auth_key}}' state: present org_name: '{{test_org_name}}' net_name: TestNetSSID name: AnsibleSSID enabled: false delegate_to: localhost register: disable_ssid - debug: msg: '{{ disable_ssid.data.enabled }}' - assert: that: - disable_ssid.data.enabled == False - name: Enable SSID with number meraki_ssid: auth_key: '{{auth_key}}' state: present org_name: '{{test_org_name}}' net_name: TestNetSSID number: 1 enabled: true delegate_to: localhost register: enable_ssid_number - debug: msg: '{{ enable_ssid_number.data.enabled }}' - assert: that: - enable_ssid_number.data.enabled == True - name: Set VLAN arg spec meraki_ssid: auth_key: '{{auth_key}}' state: present org_name: '{{test_org_name}}' net_name: TestNetSSID number: 1 use_vlan_tagging: yes ip_assignment_mode: Bridge mode default_vlan_id: 1 ap_tags_vlan_ids: - tags: wifi vlan_id: 2 delegate_to: localhost register: set_vlan_arg - debug: var: set_vlan_arg - assert: that: set_vlan_arg is changed - name: Set VLAN arg spec meraki_ssid: auth_key: '{{auth_key}}' state: present org_name: '{{test_org_name}}' net_name: TestNetSSID number: 1 use_vlan_tagging: yes ip_assignment_mode: Bridge mode default_vlan_id: 1 ap_tags_vlan_ids: - tags: wifi vlan_id: 2 delegate_to: localhost register: set_vlan_arg_idempotent - debug: var: set_vlan_arg_idempotent - assert: that: set_vlan_arg_idempotent is not changed - name: Set PSK meraki_ssid: auth_key: '{{auth_key}}' state: present org_name: '{{test_org_name}}' net_name: TestNetSSID name: AnsibleSSID auth_mode: psk psk: abc1234567890 encryption_mode: wpa delegate_to: localhost register: psk - debug: msg: '{{ psk }}' - assert: that: - psk.data.auth_mode == 'psk' - psk.data.encryption_mode == 'wpa' - psk.data.wpa_encryption_mode == 'WPA2 only' - name: Set PSK with idempotency meraki_ssid: auth_key: '{{auth_key}}' state: present org_name: '{{test_org_name}}' net_name: TestNetSSID name: AnsibleSSID auth_mode: psk psk: abc1234567890 encryption_mode: wpa delegate_to: localhost register: psk_idempotent - debug: msg: '{{ psk_idempotent }}' - assert: that: - psk_idempotent is not changed - name: Enable click-through splash page meraki_ssid: auth_key: '{{auth_key}}' state: present org_name: '{{test_org_name}}' net_name: TestNetSSID name: AnsibleSSID splash_page: Click-through splash page delegate_to: localhost register: splash_click - debug: msg: '{{ splash_click }}' - assert: that: - splash_click.data.splash_page == 'Click-through splash page' - name: Configure RADIUS servers meraki_ssid: auth_key: '{{auth_key}}' state: present org_name: '{{test_org_name}}' net_name: TestNetSSID name: AnsibleSSID auth_mode: open-with-radius radius_servers: - host: 192.0.1.200 port: 1234 secret: abc98765 delegate_to: localhost register: set_radius_server - debug: msg: '{{ set_radius_server }}' - assert: that: - set_radius_server.data.radius_servers.0.host == '192.0.1.200' - name: Configure RADIUS servers with idempotency meraki_ssid: auth_key: '{{auth_key}}' state: present org_name: '{{test_org_name}}' net_name: TestNetSSID name: AnsibleSSID auth_mode: open-with-radius radius_servers: - host: 192.0.1.200 port: 1234 secret: abc98765 delegate_to: localhost register: set_radius_server_idempotent - debug: var: set_radius_server_idempotent - assert: that: - set_radius_server_idempotent is not changed ################# # Error testing # ################# - name: Set PSK with wrong mode meraki_ssid: auth_key: '{{auth_key}}' state: present org_name: '{{test_org_name}}' net_name: TestNetSSID name: AnsibleSSID auth_mode: open psk: abc1234 delegate_to: localhost register: psk_invalid ignore_errors: yes - debug: msg: '{{ psk_invalid }}' - assert: that: - psk_invalid.msg == 'PSK is only allowed when auth_mode is set to psk' - name: Set PSK with invalid encryption mode meraki_ssid: auth_key: '{{auth_key}}' state: present org_name: '{{test_org_name}}' net_name: TestNetSSID name: AnsibleSSID auth_mode: psk psk: abc1234 encryption_mode: eap delegate_to: localhost register: psk_invalid_mode ignore_errors: yes - debug: msg: '{{ psk_invalid_mode }}' - assert: that: - psk_invalid_mode.msg == 'PSK requires encryption_mode be set to wpa' - name: Error for PSK and RADIUS servers meraki_ssid: auth_key: '{{auth_key}}' state: present org_name: '{{test_org_name}}' net_name: TestNetSSID name: AnsibleSSID auth_mode: psk radius_servers: - host: 192.0.1.200 port: 1234 secret: abc98765 delegate_to: localhost register: err_radius_server_psk ignore_errors: yes - debug: var: err_radius_server_psk - assert: that: - 'err_radius_server_psk.msg == "radius_servers requires auth_mode to be open-with-radius or 8021x-radius"' - name: Set VLAN arg without default VLAN error meraki_ssid: auth_key: '{{auth_key}}' state: present org_name: '{{test_org_name}}' net_name: TestNetSSID number: 1 use_vlan_tagging: yes ip_assignment_mode: Bridge mode ap_tags_vlan_ids: - tags: wifi vlan_id: 2 delegate_to: localhost register: set_vlan_arg_err ignore_errors: yes - debug: var: set_vlan_arg_err - assert: that: - 'set_vlan_arg_err.msg == "default_vlan_id is required when use_vlan_tagging is True"' always: - name: Delete SSID meraki_ssid: auth_key: '{{auth_key}}' state: absent org_name: '{{test_org_name}}' net_name: TestNetSSID name: AnsibleSSID delegate_to: localhost register: delete_ssid - debug: msg: '{{ delete_ssid }}' - assert: that: - delete_ssid.data.name == 'Unconfigured SSID 2' - name: Delete test network meraki_network: auth_key: '{{auth_key}}' state: absent org_name: '{{test_org_name}}' net_name: TestNetSSID register: delete_net - debug: msg: '{{delete_net}}'