Vh..ddlmZmZmZeZdZdZdZddl Z ddl Z ddl m Z ddl mZddlmZdd lmZdd lmZdd lmZmZd Zd ZddddddZdZdZdZdZdZdZ dZ!d(dZ"dZ#dZ$dZ%dZ&d Z'd!Z(d"Z)d#Z*d$Z+d%Z,d&Z-e.d'k(re-yy)))absolute_importdivisionprint_functiona module: ios_vrf author: Peter Sprygada (@privateip) short_description: Module to configure VRF definitions. description: - This module provides declarative management of VRF definitions on Cisco IOS devices. It allows playbooks to manage individual or the entire VRF collection. It also supports purging VRF definitions from the configuration that are not explicitly defined. version_added: 1.0.0 extends_documentation_fragment: - cisco.ios.ios notes: - Tested against Cisco IOSXE Version 17.3 on CML. - This module works with connection C(network_cli). See U(https://docs.ansible.com/ansible/latest/network/user_guide/platform_ios.html) options: vrfs: description: - The set of VRF definition objects to be configured on the remote IOS device. Ths list entries can either be the VRF name or a hash of VRF definitions and attributes. This argument is mutually exclusive with the C(name) argument. type: list elements: raw name: description: - The name of the VRF definition to be managed on the remote IOS device. The VRF definition name is an ASCII string name used to uniquely identify the VRF. This argument is mutually exclusive with the C(vrfs) argument type: str description: description: - Provides a short description of the VRF definition in the current active configuration. The VRF definition value accepts alphanumeric characters used to provide additional information about the VRF. type: str address_family: description: - The list of address families with MDT parameters to be configured on the remote IOS device. type: list suboptions: afi: description: Address family identifier. type: str choices: ["ipv4", "ipv6"] mdt: description: MDT parameters. type: dict suboptions: auto_discovery: description: Auto-discovery parameters. type: dict suboptions: vxlan: description: Vxlan parameters. type: dict suboptions: enable: description: Enable VXLAN. type: bool inter_as: description: Enable inter-as. type: bool default: description: Parameters for default option. type: dict suboptions: vxlan_mcast_group: description: VXLAN multicast group value. type: str data: description: Parameters for data option. type: dict suboptions: vxlan_mcast_group: description: VXLAN multicast group value. type: str threshold: description: Threshold value. type: int overlay: description: Parameters for overlay option. type: dict suboptions: use_bgp: description: parameters for BGP option. type: dict suboptions: enable: description: Enable use BGP. type: bool spt_only: description: Enable SPT only. type: bool elements: dict rd: description: - The router-distinguisher value uniquely identifies the VRF to routing processes on the remote IOS system. The RD value takes the form of C(A:B) where C(A) and C(B) are both numeric values. type: str interfaces: description: - Identifies the set of interfaces that should be configured in the VRF. Interfaces must be routed interfaces in order to be placed into a VRF. type: list elements: str associated_interfaces: description: - This is a intent option and checks the operational state of the for given vrf C(name) for associated interfaces. If the value in the C(associated_interfaces) does not match with the operational state of vrf interfaces on device it will result in failure. type: list elements: str delay: description: - Time in seconds to wait before checking for the operational state on remote device. default: 10 type: int purge: description: - Instructs the module to consider the VRF definition absolute. It will remove any previously configured VRFs on the device. default: false type: bool state: description: - Configures the state of the VRF definition as it relates to the device operational configuration. When set to I(present), the VRF should be configured in the device active configuration and when set to I(absent) the VRF should not be in the device active configuration default: present choices: - present - absent type: str route_both: description: - Adds an export and import list of extended route target communities to the VRF. type: list elements: str route_export: description: - Adds an export list of extended route target communities to the VRF. type: list elements: str route_import: description: - Adds an import list of extended route target communities to the VRF. type: list elements: str route_both_ipv4: description: - Adds an export and import list of extended route target communities in address-family configuration submode to the VRF. type: list elements: str route_export_ipv4: description: - Adds an export list of extended route target communities in address-family configuration submode to the VRF. type: list elements: str route_import_ipv4: description: - Adds an import list of extended route target communities in address-family configuration submode to the VRF. type: list elements: str route_both_ipv6: description: - Adds an export and import list of extended route target communities in address-family configuration submode to the VRF. type: list elements: str route_export_ipv6: description: - Adds an export list of extended route target communities in address-family configuration submode to the VRF. type: list elements: str route_import_ipv6: description: - Adds an import list of extended route target communities in address-family configuration submode to the VRF. type: list elements: str aP - name: Configure a vrf named management cisco.ios.ios_vrf: name: management description: oob mgmt vrf interfaces: - Management1 - name: Remove a vrf named test cisco.ios.ios_vrf: name: test state: absent - name: Configure set of VRFs and purge any others cisco.ios.ios_vrf: vrfs: - red - blue - green purge: true - name: Creates a list of import RTs for the VRF with the same parameters cisco.ios.ios_vrf: name: test_import rd: 1:100 route_import: - 1:100 - 3:100 - name: Creates a list of import RTs in address-family configuration submode for the VRF with the same parameters cisco.ios.ios_vrf: name: test_import_ipv4 rd: 1:100 route_import_ipv4: - 1:100 - 3:100 - name: Creates a list of import RTs in address-family configuration submode for the VRF with the same parameters cisco.ios.ios_vrf: name: test_import_ipv6 rd: 1:100 route_import_ipv6: - 1:100 - 3:100 - name: Creates a list of export RTs for the VRF with the same parameters cisco.ios.ios_vrf: name: test_export rd: 1:100 route_export: - 1:100 - 3:100 - name: Creates a list of export RTs in address-family configuration submode for the VRF with the same parameters cisco.ios.ios_vrf: name: test_export_ipv4 rd: 1:100 route_export_ipv4: - 1:100 - 3:100 - name: Creates a list of export RTs in address-family configuration submode for the VRF with the same parameters cisco.ios.ios_vrf: name: test_export_ipv6 rd: 1:100 route_export_ipv6: - 1:100 - 3:100 - name: Creates a list of import and export route targets for the VRF with the same parameters cisco.ios.ios_vrf: name: test_both rd: 1:100 route_both: - 1:100 - 3:100 - name: Creates a list of import and export route targets in address-family configuration submode for the VRF with the same parameters cisco.ios.ios_vrf: name: test_both_ipv4 rd: 1:100 route_both_ipv4: - 1:100 - 3:100 - name: Creates a list of import and export route targets in address-family configuration submode for the VRF with the same parameters cisco.ios.ios_vrf: name: test_both_ipv6 rd: 1:100 route_both_ipv6: - 1:100 - 3:100 a1 commands: description: The list of configuration mode commands to send to the device returned: always type: list sample: - vrf definition ansible - description management vrf - rd: 1:100 start: description: The time the job started returned: always type: str sample: "2016-11-16 10:38:15.126146" end: description: The time the job ended returned: always type: str sample: "2016-11-16 10:38:25.595612" delta: description: The time elapsed to perform all operations returned: always type: str sample: "0:00:10.469466" N)partial) AnsibleModule) exec_command) iteritems) NetworkConfig) get_config load_configc|jjdry|jjdry|jjdry|jjdry|jjd ry|jjd ry |jjd ry y)NETethernetVLsviLOloopbackMG managementMAPO portchannelNVnveunknown)upper startswith) interfaces e/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/cisco/ios/plugins/modules/ios_vrf.pyget_interface_typer ls##D)   % %d +   % %d +   % %d +   % %d +   % %d +   % %d +c^d|z|vr|jd|zg|j|y)Nvrf definition %s)extendappend)namecmdcommandss radd_command_to_vrfr)s0T!1,t345 OOCr!zmdt auto-discovery zmdt default vxlan zmdt data vxlan zmdt data threshold z mdt overlay )auto_discoverydefault data_mcastdata_thresholdoverlayc|djD]\}}t|}|dvr||dz}t|||)|dk(r|t|z}t|||J|dk(r7|ddr|dz}|dj dr|d zd z}t||||d k(s|d dr|d z}|d j dr|d zdz}t|||y)Nmdt)r+r,vxlan_mcast_groupr-r*vxlanenableinter_as zinter-asr.use_bgpzuse-bgpspt_onlyzspt-only)itemsKEY_TO_COMMAND_MAPr)strget)afi_dictvrf_namer(keyvaluer's radd_mdt_commandsr@s uo++-8 U % + +122C xh 7 $ $E "C xh 7 $ $W~h'GmW~!!*-Ci*, xh 7 I Y)IoY##J/Ci*, xh 7)8r!c  t}|D]-}|\}}d}|ddk(r|jd|dz,|jds|jd|dzgt |j j Dcgc]+\}}|jds|jdr|r|-c}}d k7} t |j j Dcgc]+\}}|jd s|jdr|r|-c}}d k7} | r|jd d g| r|jd d g|||drd|dz} t|d| ||||drd|dz} t|d| ||||dr|dD]} d| z} t|d| ||||dr|dD]} d| z} t|d| ||||drCd } t|d| ||dD]} d| z} t|d| |d} t|d| ||||drCd } t|d| ||dD]} d| z} t|d| |d} t|d| ||||drCd } t|d| ||dD]} d| z} t|d| |d} t|d| ||||drCd } t|d| ||dD]} d| z} t|d| |d} t|d| ||||dr|dD]} | di}| djdi}|r d|vr d|di| dd <d!|vr |d!| dd"<| dj D][\}}tfd#|jdiDi}|| d|jdi|sI|j||i]|sd$tz} t|d| |td|i|d|t|dd||d%t|jd%gj|d%D]}|jd&|zd'|dzg t|d%j|jd%gD]}t!|}t#d(|)}|d&|zj$}d*j'|}|jd&|zd+|dzgt)j*d,|t(j,}|s|j|j/0|Scc}}wcc}}w)-Nct|jtr|tjtr]|jxrJ|jjk7xr%tfd|jD S|jxr#|jjk7S)Nc3DK|]}|jvyw)N)r;).0elemhavexs r z.needs_update..sL 3Ls ) isinstancer;listall)wantrFrGs ``r needs_updatez)map_obj_to_commands..needs_updates$((1+t,DHHQK1NHHQKM txx{2ML LLL 88A;=488A;$((1+#= =r!stateabsentno vrf definition %sr&r#_ipv6_bothr_ipv4address-family ipv4exitaddress-family ipv6 descriptionzdescription %srdzrd %s route_importzroute-target import %s route_exportzroute-target export %sroute_import_ipv4zexit-address-familyroute_export_ipv4route_import_ipv6route_export_ipv6address_familyafir0datar1r, thresholdr-c34K|]}|dk(s |yw)r`N)rDir`s rrHz&map_obj_to_commands..sVqahRUoVs address-family interfacesz interface %szno vrf forwarding %sindentcontents zvrf forwarding %sz ip address .+)rJr%r;r$lenparamsr8endswithr)popnextupdater:r@set differencer r childrenjoinresearchMgroup)updatesmoduler(rrrLrFrMkvipv6ipv4r'routewant_mdtaf_dict data_dictkey_invalue_inhave_mdtintfcfg configobjru intf_configmatchr`s @rmap_obj_to_commandsrs=vH}3 d > =H $ OO2T&\A B xx OO04<?@ A%+MM$7$7$9 AqJJw/1::g3FA %+MM$7$7$9 AqJJw/1::g3FA !6 ?@!6 ?@ dM 2"T-%88C tF|S( ; dD )DJ&C tF|S( ; dN 3n- @.6"4<h? @ dN 3n- @.6"4<h? @ d$7 8'C tF|S( ;12 @.6"4<h? @(C tF|S( ; d$7 8'C tF|S( ;12 @.6"4<h? @(C tF|S( ; d$7 8'C tF|S( ;12 @.6"4<h? @(C tF|S( ; d$7 8'C tF|S( ;12 @.6"4<h? @(C tF|S( ; d$4 5 !12 Vuo$UO//; *i7/;N1O9 5#i/.+:.+)globalrrrX) rwcompilerJrrparse_export_ipv4parse_import_ipv4parse_export_ipv6parse_import_ipv6rx groupdictr;r$) rr&r_ rd_patternr export_match import_matchexexrdimimrds r parse_bothrTs4O,JfGLL!#It4 #It4 6 !(D9 (D9 6 !(D9 (D9   LB$$R(D>>#''-D" L!((,~~'++D14<.2'.AGNND6*t.2'.AGNND6*t  L L Nr!c|d|z} |d}dj|j}tjd|tj}|S#t $rYywxYw)Nr#rTrlrrvrurwrryrrr&rsubcfgrs rrrob '$. /C *+6??+**=vrttL    AA AAc|d|z} |d}dj|j}tjd|tj}|S#t $rYywxYw)Nr#rTrlrrrs rrrzrrc|d|z} |d}dj|j}tjd|tj}|S#t $rYywxYw)Nr#rVrlrrrs rrrrrc|d|z} |d}dj|j}tjd|tj}|S#t $rYywxYw)Nr#rVrlrrrs rrrrrc |d|z}g}dD]}i} |d|z}dj|j}tjd}tjd}tjd} tjd } tjd } |j D] } | j } |j| } | r| j}|jd ij|d ijd d|dr5|jd ij|d ijdd|j| } | r6| j}|jdijd|d| j| } | r7| j}|jdijd|d:| j| } | r.| j}|jdt|d| j| } | s| j}|jdijdijd d|ds|jdijdijdd |j||d|S#t$rd}YwxYw)Nr#)rrrfrlzD^mdt +auto\-discovery +(?P