01e4c41be4
* nxos_integration_tests: Removing obsolete provider parameter * nxos: removing support for local-nxapi plugin * nxos: removing LocalNxapi plugin implementation * nxos_nxapi: removing local plugin usage * REVERT - nxos: removing LocalNxapi plugin implementation * Addressing yamllint issues * Removing the condition on the debug messages * Restoring changes done to nxos_nxapi* tests * Retaining timeout of 500 on nxos_smoke test * Some cleanup * Addressing latest comments * Restoring the nxos_smoke and removing timeout from nxos_config and nxos_rollback
230 lines
3.8 KiB
YAML
230 lines
3.8 KiB
YAML
---
|
|
- debug: msg="START connection={{ ansible_connection }} nxos_acl sanity test"
|
|
|
|
- set_fact: time_range="ans-range"
|
|
when: platform is not search('N35|N5K|N6K')
|
|
|
|
- name: "Setup: Cleanup possibly existing acl."
|
|
nxos_acl: &remove
|
|
name: TEST_ACL
|
|
seq: 10
|
|
state: delete_acl
|
|
ignore_errors: yes
|
|
|
|
- name: "Configure ACE10"
|
|
nxos_acl: &conf10
|
|
name: TEST_ACL
|
|
seq: 10
|
|
action: permit
|
|
proto: tcp
|
|
src: 192.0.2.1/24
|
|
src_port_op: range
|
|
src_port1: 1900
|
|
src_port2: 1910
|
|
ack: 'enable'
|
|
dscp: 'af43'
|
|
dest: any
|
|
dest_port_op: neq
|
|
dest_port1: 1899
|
|
urg: 'enable'
|
|
psh: 'enable'
|
|
established: 'enable'
|
|
log: 'enable'
|
|
fin: 'enable'
|
|
rst: 'enable'
|
|
syn: 'enable'
|
|
time_range: "{{time_range|default(omit)}}"
|
|
state: present
|
|
register: result
|
|
|
|
- assert: &true
|
|
that:
|
|
- "result.changed == true"
|
|
|
|
- name: "Check Idempotence"
|
|
nxos_acl: *conf10
|
|
register: result
|
|
|
|
- assert: &false
|
|
that:
|
|
- "result.changed == false"
|
|
|
|
- name: "Change ACE10"
|
|
nxos_acl: &chg10
|
|
name: TEST_ACL
|
|
seq: 10
|
|
action: deny
|
|
proto: tcp
|
|
src: 192.0.2.1/24
|
|
src_port_op: range
|
|
src_port1: 1900
|
|
src_port2: 1910
|
|
ack: 'enable'
|
|
dscp: 'af43'
|
|
dest: any
|
|
dest_port_op: neq
|
|
dest_port1: 1899
|
|
urg: 'enable'
|
|
psh: 'enable'
|
|
established: 'enable'
|
|
log: 'enable'
|
|
fin: 'enable'
|
|
rst: 'enable'
|
|
syn: 'enable'
|
|
time_range: "{{time_range|default(omit)}}"
|
|
state: present
|
|
register: result
|
|
|
|
- assert: *true
|
|
|
|
- name: "Check Idempotence"
|
|
nxos_acl: *chg10
|
|
register: result
|
|
|
|
- assert: *false
|
|
|
|
- name: "ace remark"
|
|
nxos_acl: &remark
|
|
name: TEST_ACL
|
|
seq: 20
|
|
action: remark
|
|
remark: test_remark
|
|
state: present
|
|
register: result
|
|
|
|
- assert: *true
|
|
|
|
- name: "Check Idempotence"
|
|
nxos_acl: *remark
|
|
register: result
|
|
|
|
- assert: *false
|
|
|
|
- name: "change remark"
|
|
nxos_acl: &chgremark
|
|
name: TEST_ACL
|
|
seq: 20
|
|
action: remark
|
|
remark: changed_remark
|
|
state: present
|
|
register: result
|
|
|
|
- assert: *true
|
|
|
|
- name: "Check Idempotence"
|
|
nxos_acl: *chgremark
|
|
register: result
|
|
|
|
- assert: *false
|
|
|
|
- name: "ace 30"
|
|
nxos_acl: &ace30
|
|
name: TEST_ACL
|
|
seq: 30
|
|
action: deny
|
|
proto: 24
|
|
src: any
|
|
dest: any
|
|
fragments: enable
|
|
precedence: network
|
|
state: present
|
|
register: result
|
|
|
|
- assert: *true
|
|
|
|
- name: "Check Idempotence"
|
|
nxos_acl: *ace30
|
|
register: result
|
|
|
|
- assert: *false
|
|
|
|
- name: "change ace 30 options"
|
|
nxos_acl: &chgace30opt
|
|
name: TEST_ACL
|
|
seq: 30
|
|
action: deny
|
|
proto: 24
|
|
src: any
|
|
dest: any
|
|
precedence: network
|
|
state: present
|
|
register: result
|
|
|
|
- assert: *true
|
|
|
|
- name: "Check Idempotence"
|
|
nxos_acl: *chgace30opt
|
|
register: result
|
|
|
|
- assert: *false
|
|
|
|
- name: "ace 40"
|
|
nxos_acl: &ace40
|
|
name: TEST_ACL
|
|
seq: 40
|
|
action: permit
|
|
proto: udp
|
|
src: any
|
|
src_port_op: neq
|
|
src_port1: 1200
|
|
dest: any
|
|
precedence: network
|
|
state: present
|
|
register: result
|
|
|
|
- assert: *true
|
|
|
|
- name: "Check Idempotence"
|
|
nxos_acl: *ace40
|
|
register: result
|
|
|
|
- assert: *false
|
|
|
|
- name: "change ace 40"
|
|
nxos_acl: &chgace40
|
|
name: TEST_ACL
|
|
seq: 40
|
|
action: permit
|
|
proto: udp
|
|
src: any
|
|
dest: any
|
|
precedence: network
|
|
state: present
|
|
register: result
|
|
|
|
- assert: *true
|
|
|
|
- name: "Check Idempotence"
|
|
nxos_acl: *chgace40
|
|
register: result
|
|
|
|
- assert: *false
|
|
|
|
- name: "remove ace 30"
|
|
nxos_acl: &remace30
|
|
name: TEST_ACL
|
|
seq: 30
|
|
state: absent
|
|
register: result
|
|
|
|
- assert: *true
|
|
|
|
- name: "Check Idempotence"
|
|
nxos_acl: *remace30
|
|
register: result
|
|
|
|
- assert: *false
|
|
|
|
- name: "Remove ACL"
|
|
nxos_acl: *remove
|
|
register: result
|
|
|
|
- assert: *true
|
|
|
|
- name: "Check Idempotence"
|
|
nxos_acl: *remove
|
|
register: result
|
|
|
|
- assert: *false
|
|
|
|
- debug: msg="END connection={{ ansible_connection }} nxos_acl sanity test"
|