Vh!8ddlmZmZmZeZdZdZdZddl Z ddl m Z ddl m Z mZmZddlmZd Zd Zd Zd Zd ZdZdZdZdZdZedk(reyy))absolute_importdivisionprint_functiona module: nxos_nxapi extends_documentation_fragment: - cisco.nxos.nxos author: Peter Sprygada (@privateip) short_description: Manage NXAPI configuration on an NXOS device. notes: - Limited Support for Cisco MDS description: - Configures the NXAPI feature on devices running Cisco NXOS. The NXAPI feature is absent from the configuration by default. Since this module manages the NXAPI feature it only supports the use of the C(Cli) transport. version_added: 1.0.0 options: http_port: description: - Configure the port with which the HTTP server will listen on for requests. By default, NXAPI will bind the HTTP service to the standard HTTP port 80. This argument accepts valid port values in the range of 1 to 65535. required: false default: 80 type: int http: description: - Controls the operating state of the HTTP protocol as one of the underlying transports for NXAPI. By default, NXAPI will enable the HTTP transport when the feature is first configured. To disable the use of the HTTP transport, set the value of this argument to False. required: false default: true type: bool aliases: - enable_http https_port: description: - Configure the port with which the HTTPS server will listen on for requests. By default, NXAPI will bind the HTTPS service to the standard HTTPS port 443. This argument accepts valid port values in the range of 1 to 65535. required: false default: 443 type: int https: description: - Controls the operating state of the HTTPS protocol as one of the underlying transports for NXAPI. By default, NXAPI will disable the HTTPS transport when the feature is first configured. To enable the use of the HTTPS transport, set the value of this argument to True. required: false default: false type: bool aliases: - enable_https sandbox: description: - The NXAPI feature provides a web base UI for developers for entering commands. This feature is initially disabled when the NXAPI feature is configured for the first time. When the C(sandbox) argument is set to True, the developer sandbox URL will accept requests and when the value is set to False, the sandbox URL is unavailable. This is supported on NX-OS 7K series. required: false type: bool aliases: - enable_sandbox state: description: - The C(state) argument controls whether or not the NXAPI feature is configured on the remote device. When the value is C(present) the NXAPI feature configuration is present in the device running-config. When the values is C(absent) the feature configuration is removed from the running-config. choices: - present - absent required: false default: present type: str ssl_strong_ciphers: description: - Controls the use of whether strong or weak ciphers are configured. By default, this feature is disabled and weak ciphers are configured. To enable the use of strong ciphers, set the value of this argument to True. required: false default: false type: bool tlsv1_0: description: - Controls the use of the Transport Layer Security version 1.0 is configured. By default, this feature is enabled. To disable the use of TLSV1.0, set the value of this argument to True. required: false default: true type: bool tlsv1_1: description: - Controls the use of the Transport Layer Security version 1.1 is configured. By default, this feature is disabled. To enable the use of TLSV1.1, set the value of this argument to True. required: false default: false type: bool tlsv1_2: description: - Controls the use of the Transport Layer Security version 1.2 is configured. By default, this feature is disabled. To enable the use of TLSV1.2, set the value of this argument to True. required: false default: false type: bool an - name: Enable NXAPI access with default configuration cisco.nxos.nxos_nxapi: state: present - name: Enable NXAPI with no HTTP, HTTPS at port 9443 and sandbox disabled cisco.nxos.nxos_nxapi: enable_http: false https_port: 9443 https: true enable_sandbox: false - name: remove NXAPI configuration cisco.nxos.nxos_nxapi: state: absent z updates: description: - Returns the list of commands that need to be pushed into the remote device to satisfy the arguments returned: always type: list sample: ['no feature nxapi'] N) AnsibleModule)get_capabilities load_config run_commands)Versionc|jdd}|dk(r|jd|dd}d|vr!|jdr|jd |jd }|d k(r!d |jd <|jd n%|dk(r d|jd <|jddD]B}|j|d|j|cxkrdkr,n|jd|zD|S)N network_apinxapiz)module not supported over nxapi transport)msg device_infonetwork_os_platform7KsandboxzEsandbox or enable_sandbox is supported on NX-OS 7K series of switchesstatestartedpresentzhstate=started is deprecated and will be removed in a a future release. Please use state=present insteadstoppedabsentzgstate=stopped is deprecated and will be removed in a a future release. Please use state=absent instead) http_port https_portiz%s must be between 1 and 65535)get fail_jsonparamsappend)modulewarnings capabilitiesr os_platformrkeys i/home/dcms/DCMS/lib/python3.12/site-packages/ansible_collections/cisco/nxos/plugins/modules/nxos_nxapi.py check_argsr%s""=':KgHI}-.CDK ;6==#;W   MM' "E !* g B  ) !) g A +M ==  ) c*3e3  %E%K LM Ocnt}t}d}d}|jd} | r0| jd}|r|dd}| jd}|r|dd}fd} | drddk(rdgS|jd n ddk(r|Sd D]|} | d z} | | r6j| d ur d | z|| <nd| dj| || <| | sOj| duscd| dj| || <~| drd|d<ds d|dz|d<|r|r|dk(s|dk(rt |dk\r| drd|d<ddurd|d<d} d}ddddj D]\\}}| |r(j|dus"dj ||g}6j|dusJdj | |g} ^t|d kDr+d!dj || gz|d"<n|jd#|j|j|S)$Nrnetwork_os_versionrctj|duxr#j|j|k7S)N)r)xhavewants r$ needs_updatez)map_obj_to_commands..needs_updates0xx{$&GDHHQK488A;,FGr&rrno feature nxapiz feature nxapi)httphttps_portFz no nxapi %sznxapi z port Tr nxapi sandboxzno %sN9KN3Kz9.2ssl_strong_ciphersznxapi ssl ciphers weakzno nxapi ssl ciphers weakzTLSv1.2zTLSv1.1TLSv1)tlsv1_2tlsv1_1tlsv1_0 rznxapi ssl protocols%s ssl_protocolszos_version and/or os_platform keys from platform capabilities are not available. Any NXAPI SSL optional arguments will be ignored) listdictrrr itemsjoinlenextendvalues)r-r,rr r! send_commandscommandsr" os_versionrr. parameter port_paramhave_ssl_protocolswant_ssl_protocolsr#values`` r$map_obj_to_commandsrMsFMvHKJ""=1K __%9: #BQJ!oo&;< %bq/KHG =H $&' '_- g( "& (  "xx "e+&3i&?#,HHZ('#  #(;t(C$#HY "I-I")HY,?"?HY z 5 K5$8gj>QUZ>Z011I-.,-55PH12!# !# $$"eg O U  $xx},-0XX7I56Q-R*XXc]d*),3Eu2M)N& O%&*,CHH02DEF-)  ? *+ r&cdg}d}|D]E}tj||tj}|s+t|j d}n|du|dS)Nznxapi http port (\d+)r)r0rresearchMintgroup)datahttp_resrregexmatchs r$ parse_httprY s^()HI %rtt, EKKN+I   T) BBr&cdg}d}|D]E}tj||tj}|s+t|j d}n|du|dS)Nznxapi https port (\d+)r)r1rrO)rU https_resrrWrXs r$ parse_httpsr\-s^*+IJ %rtt, U[[^,J    t+: FFr&c|jdDcgc]}tjd|s|}}d}|r |ddk(rd}d|iScc}w)N z .*sandbox.*Frr3Tr)splitrPrQ)rUitemrrLs r$ parse_sandboxra:sT $ 4 0TBIInd4StTGT E71:0 u  Us AAcdg}d}|D]<}tj||tj}|s+|jd}nd|dk(iS)Nz(\w+) nxapi ssl ciphers weakrr6no)rPrQrRrT)rU ciphers_resrLrWrXs r$parse_ssl_strong_ciphersreBsX23K E %rtt, KKNE   !%4- 00r&ctjd|tjdu}tjd|tjdu}tjd|tjdu}|||dS)Nz(? deprecaterr%rrrorM check_moder exit_json) r}rr warning_msgr!r-r,rFresults r$mainr}sB =/ EE2.N+&%HUC0./f=9y(.CDVU;&$/&%0&%0 MD QFvHVKOOKbbK <V#F+Lvx. V $D V $D"4vxNHH( KF   ) yFvr&__main__) __future__rrrrw __metaclass__ DOCUMENTATIONEXAMPLESRETURNrPansible.module_utils.basicrEansible_collections.cisco.nxos.plugins.module_utils.network.nxos.nxosrrr Lansible_collections.cisco.nxos.plugins.module_utils.network.nxos.utils.utilsr r%rMrYr\rarergrorrr__name__rr&r$rs$A@ k Z "  4 aDPf C G 1H*"'T zFr&