Vh(<ddlmZmZmZeZdZdZdZddl m Z ddl m Z m Z mZmZddd d d Zd Zd ZdZdZdZdZdZdZdZedk(reyy))absolute_importdivisionprint_functiona module: nxos_hsrp extends_documentation_fragment: - cisco.nxos.nxos short_description: Manages HSRP configuration on NX-OS switches. description: - Manages HSRP configuration on NX-OS switches. version_added: 1.0.0 author: - Jason Edelman (@jedelman8) - Gabriele Gerbino (@GGabriele) notes: - Tested against NXOSv 7.3.(0)D1(1) on VIRL - Unsupported for Cisco MDS - HSRP feature needs to be enabled first on the system. - SVIs must exist before using this module. - Interface must be a L3 port before using this module. - HSRP cannot be configured on loopback interfaces. - MD5 authentication is only possible with HSRPv2 while it is ignored if HSRPv1 is used instead, while it will not raise any error. Here we allow MD5 authentication only with HSRPv2 in order to enforce better practice. options: group: description: - HSRP group number. required: true type: str interface: description: - Full name of interface that is being managed for HSRP. required: true type: str version: description: - HSRP version. default: '1' choices: - '1' - '2' type: str priority: description: - HSRP priority or keyword 'default'. type: str preempt: description: - Enable/Disable preempt. choices: - enabled - disabled type: str vip: description: - HSRP virtual IP address or keyword 'default' type: str auth_string: description: - Authentication string. If this needs to be hidden(for md5 type), the string should be 7 followed by the key string. Otherwise, it can be 0 followed by key string or just key string (for backward compatibility). For text type, this should be just be a key string. if this is 'default', authentication is removed. type: str auth_type: description: - Authentication type. choices: - text - md5 type: str state: description: - Specify desired state of the resource. choices: - present - absent default: present type: str aW - name: Ensure HSRP is configured with following params on a SVI cisco.nxos.nxos_hsrp: group: 10 vip: 10.1.1.1 priority: 150 interface: vlan10 preempt: enabled - name: Ensure HSRP is configured with following params on a SVI with clear text authentication cisco.nxos.nxos_hsrp: group: 10 vip: 10.1.1.1 priority: 150 interface: vlan10 preempt: enabled auth_type: text auth_string: CISCO - name: Ensure HSRP is configured with md5 authentication and clear authentication string cisco.nxos.nxos_hsrp: group: 10 vip: 10.1.1.1 priority: 150 interface: vlan10 preempt: enabled auth_type: md5 auth_string: 0 1234 - name: Ensure HSRP is configured with md5 authentication and hidden authentication string cisco.nxos.nxos_hsrp: group: 10 vip: 10.1.1.1 priority: 150 interface: vlan10 preempt: enabled auth_type: md5 auth_string: 7 1234 - name: Remove HSRP config for given interface, group, and VIP cisco.nxos.nxos_hsrp: group: 10 interface: vlan10 vip: 10.1.1.1 state: absent z commands: description: commands sent to the device returned: always type: list sample: ["interface vlan10", "hsrp version 2", "hsrp 30", "ip 10.30.1.1"] ) AnsibleModule)get_capabilitiesget_interface_type load_config run_commandsN100textcisco)vippriority auth_type auth_stringci}|D]=}|j|}|s|j|}|rt|||<9|||<?|SN)getstr)key_maptablenew_dictkeynew_keyvalues h/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/cisco/nxos/plugins/modules/nxos_hsrp.py apply_key_maprsVH*++c" IIcNE$'J!$)!* Ocdj|}i}d} t||gd}|dvr1|dd}t|j dd}|d k(s|d k(rd }|S|d k(rd}|S#t$rYywxYw) Nzshow interface {0} | jsonunknownr)ethernet portchannelTABLE_interface ROW_interfaceeth_modelayer3accesstrunklayer2svi)formatr IndexErrorrr) interface intf_typemodulecommandmodebodyinterface_tables rget_interface_moder4s)00;GI DFWI.q1//01/B?&&z8<= 8 twD K e  K sA%% A10A1c dj|}i}dddddddd d d } t||gd }|d d}d|vr|d=dt|vr t|||}t|tr|g}|D]f}t||} | dj| d<| ddk(rd| d<n | ddk(rd| d<| ddk(r| d dk(rd| d <nd| d <| d|k(sd| cS|S#tt t tf$ricYSwxYw)Nzshow hsrp group {0} all | jsonr-groupversionrpreemptrrauth_encr) sh_if_index sh_group_numsh_group_version sh_cfg_prio sh_preemptsh_vipsh_authentication_typesh_keystring_attrsh_authentication_datarTABLE_grp_detailROW_grp_detailrA unknown enum:v11v22md5hidden70) r+r rget_hsrp_group_unknown_enumAttributeErrorr, TypeErrorKeyError isinstancedictrlower) r6r-r/r0hsrphsrp_keyr2 hsrp_table hsrp_group parsed_hsrps rget_hsrp_grouprZsj.55e? j 0,- c*o -4VWjQJ*d# \   #Hj9 #.{#;#A#A#C K y !T )%(K "  #t +%(K " { #u ,:&(2*- J'*- J' { #y 0 #& K3 J 8 < s9CC87C8cvd|dvr1d|jddd}t||d}d|vrdnd |d<|S) aWSome older NXOS images fail to set the attr values when using structured output and instead set the values to . This fallback method is a workaround that uses an unstructured (text) request to query the device a second time. 'sh_preempt' is currently the only attr affected. Add checks for other attrs as needed. rEr>r |r)outputr0z may preemptenableddisabled)splitr )r/r0rWcmdouts rrNrNsS *\22GMM#,>q,AB63'*1>#1E9J < rcJdj|dj|g}|S)N interface {0}z no hsrp {0})r+)r6r-commandss rget_commands_remove_hsrprfs'&&y1=3G3G3NOH Orcg}ddddd}|jdd}|jdd}|jdd}|jd d} |r|d k(rd|d<n |d k(rd |d<| rO| d k(r3|r-|jd tjd k7rd|d <n|d =ndj|d |d <|rO|d k(r3|r-|jdtjdk7rd|d<n|d=ndj|d|d<|D]V} |j| djd$i|} | r.| dk7r)| dk(r|jd| n|j | d} X|jdd} |jdd} |jdd}| s| r| s|d} n| s|d} | d k7rQ| dk(r$dj|| } |j | nb| dk(r]dj| } |j | n:|r8|jdtjdk7r|j d|r&|s$|jddj|d|jdd}|rB|dk(rd} n|d k(rd!} |jd |jdd"j||r5|dj d#s!|jdd"j||S)%Nz hsrp {group}z {priority}z {preempt}z{vip})r6rr8rr8r6rrr^r_z no preemptdefaultz no priorityz priority {0}zno ipzip {0}DNErrrr9rJz%authentication md5 key-string {0} {1}r zauthentication text {0}zno authenticationzhsrp {0}r7rIzhsrp version 2rGzhsrp version 1rdr-)rPARAM_TO_DEFAULT_KEYMAPr+insertappend startswith)deltar-argsexistingre config_argsr8r6rrrr0rrr9r7s rget_commands_config_hsrprs s H   Kii 4(G IIgt $E ))E4 CyyT*H i (E)   "+E)  y HLL48O8S8ST^8__$1j!*% . 5 5eJ6G HE*  ) HLL/3J3N3Nu3UU&e %L#??5<8E%L4+//#u-44=u= w%'g~7+( +t,I))M40KyyT*HK[)I}-K ) #E!AHHS^_(f$3::;G(HLL7;R;V;V< 34:,,T'];<ii 4(G c>&G ^&G7#?11)<={%%k2 OOA55i@ A Orcdj|} t||gdd}d|jvry|jd}|dj d ry y#t $rYywxYw) Nzshow run interface {0}F)check_rcrinvalidri r-T)r+r rTr`rnrQ)r-r/r0r2raw_lists r is_defaultrzasu&--i8G FWI>qA  $zz$'H|&&{3 s$A%A A+*A+crdj|}d|jvr|jd|yy)Nzinvalid ip addressz+Invalid VIP. Possible duplicate IP address.)msgr)joinrT fail_json)r2rr/new_bodys rvalidate_configrrs8wwt}Hx~~//JPST0rcDttddtdtddgddtdd tdd d gd tdd td dgdtdd tddgdd }t|d}t}td|}|jdj }|jd}|jd}|jd}|jd}|jd} |jd} |jd} |jd} d} d}| rk| j }t |d k(r |d!} |d"}n&t |d"k(r|d!}n|jd#$| dk7r| d%k7r|jd&$t|}|jd'd(}t|}|d)k7r?|d*k(r:t||d+k(r|jd,|-|d.k(r|jd/|-t|||}|d0k(r|jd1|-| s|r| r|s|jd2$t|||| | | || 3}td4|jD}t|||}|jdddk(r|ddk(rN|jd5$n;|jdds)|r'|ddk(r|ddk(r|dk(r|jd6$g}|dk(ratt|jj!|j}|rDt#||||}|j%|n$|dk(r|rt'||}|j%||rz|j(r|j*d;i|n[t-|||d*k(r0|dk(r+|j/d!d7t1||}t3|| |d|d8<d9|vr|j5d!||d:<|j*d;i|y)That interface is a layer2 port. Make it a layer 3 port first.zDWhen using auth parameters, you need BOTH auth_type AND auth_string.)r6r7rr8rrrr9c30K|]\}}| ||fywrrj).0kvs r zmain..sEtq!q}QFEs  z2It's recommended to use HSRP v2 when auth_type=md5zIExisting auth_type is md5. It's recommended to use HSRP v2 when using md5zconfig tr configurererj)rSrlistparamsrTr`lenrrrrrzr4itemsrZset differencersextendrf check_mode exit_jsonr rlr rpop)rr/rresultsr-r6r7rrr8rrauth_full_stringr9rkstr device_inforr.r1rpproposedrqreror0r2s rmainrxsKDu-%c3ZuE551%*i)@5Q ee ,?ee4Hi05)T MD QFvH584G k*002I MM' "EmmI&G MM' "E}}Z(HmmI&G -- C k*I}}]3HK%%' t9>AwHq'K Y!^q'K   !6  7 s?x3   !K  L"6*K//-9K"9-IJ;)#; i (E 1   L#    "   =#   iF ;D xT  Kk   ]     DEtzz|EEHeY7H||K&%/ I # %   !X  Y \\+t , Y 3 &8K+@E+IuXaOa   b  H S)*55hnn6FGH .uixPG OOG $ (  .ui@G OOG $    F   'w '  )i'EY,>:.#FH5c62!%GI h& Q"GJFwr__main__) __future__rrrr __metaclass__ DOCUMENTATIONEXAMPLESRETURNansible.module_utils.basicrEansible_collections.cisco.nxos.plugins.module_utils.network.nxos.nxosrrr r rkrr4rZrNrfrsrzrr__name__rjrrrs@@ M ^/ b 5   &0f  Up"U ~ B zFr