Documentation

ce_acl_interface - Manages applying ACLs to interfaces on HUAWEI CloudEngine switches.

New in version 2.4.

Synopsis

  • Manages applying ACLs to interfaces on HUAWEI CloudEngine switches.

Options

parameter required default choices comments
acl_name
 yes
ACL number or name. For a numbered rule group, the value ranging from 2000 to 4999. For a named rule group, the value is a string of 1 to 32 case-sensitive characters starting with a letter, spaces not supported.
direction
 yes
  • inbound
  • outbound
Direction ACL to be applied in on the interface.
interface
 yes
Interface name. Only support interface full name, such as "40GE2/0/1".
state
 no present
  • present
  • absent
Determines whether the config should be present or not on the device.

Examples

- name: CloudEngine acl interface test
  hosts: cloudengine
  connection: local
  gather_facts: no
  vars:
    cli:
      host: "{{ inventory_hostname }}"
      port: "{{ ansible_ssh_port }}"
      username: "{{ username }}"
      password: "{{ password }}"
      transport: cli

  tasks:

  - name: "Apply acl to interface"
    ce_acl_interface:
      state: present
      acl_name: 2000
      interface: 40GE1/0/1
      direction: outbound
      provider: "{{ cli }}"

  - name: "Undo acl from interface"
    ce_acl_interface:
      state: absent
      acl_name: 2000
      interface: 40GE1/0/1
      direction: outbound
      provider: "{{ cli }}"

Return Values

Common return values are documented here Return Values, the following are the fields unique to this module:

name description returned type sample
changed
check to see if a change was made on the device
 always boolean True
end_state
k/v pairs of aaa params after module execution
 always dict {'acl interface': ['traffic-filter acl lb inbound', 'traffic-filter acl 2000 outbound']}
existing
k/v pairs of existing aaa server
 always dict {'acl interface': 'traffic-filter acl lb inbound'}
proposed
k/v pairs of parameters passed into module
 always dict {'interface': '40GE2/0/1', 'direction': 'outbound', 'state': 'present', 'acl_name': '2000'}
updates
command sent to the device
 always list ['interface 40ge2/0/1', 'traffic-filter acl 2000 outbound']


Status

This module is flagged as preview which means that it is not guaranteed to have a backwards compatible interface.

For help in developing on modules, should you be so inclined, please read Community Information & Contributing, Testing Ansible and Developing Modules.