ansible / ansible.builtin / v2.5.15 / module / ce_acl_advance Manages advanced ACL configuration on HUAWEI CloudEngine switches. | "added in version" 2.4 of ansible.builtin" Authors: wangdezhuang (@CloudEngine-Ansible) preview | supported by communityansible.builtin.ce_acl_advance (v2.5.15) — module
pip
Install with pip install ansible==2.5.15
Manages advanced ACL configurations on HUAWEI CloudEngine switches.
- name: CloudEngine advance acl test hosts: cloudengine connection: local gather_facts: no vars: cli: host: "{{ inventory_hostname }}" port: "{{ ansible_ssh_port }}" username: "{{ username }}" password: "{{ password }}" transport: cli tasks: - name: "Config ACL" ce_acl_advance: state: present acl_name: 3200 provider: "{{ cli }}" - name: "Undo ACL" ce_acl_advance: state: delete_acl acl_name: 3200 provider: "{{ cli }}" - name: "Config ACL advance rule" ce_acl_advance: state: present acl_name: test rule_name: test_rule rule_id: 111 rule_action: permit protocol: tcp source_ip: 10.10.10.10 src_mask: 24 frag_type: fragment provider: "{{ cli }}" - name: "Undo ACL advance rule" ce_acl_advance: state: absent acl_name: test rule_name: test_rule rule_id: 111 rule_action: permit protocol: tcp source_ip: 10.10.10.10 src_mask: 24 frag_type: fragment provider: "{{ cli }}"
tos: default: null description: - ToS value on which data packet filtering is based. The value is an integer ranging from 0 to 15. required: false dscp: default: null description: - Differentiated Services Code Point. The value is an integer ranging from 0 to 63. required: false state: choices: - present - absent - delete_acl default: present description: - Specify desired state of the resource. required: false acl_num: default: null description: - ACL number. The value is an integer ranging from 3000 to 3999. required: false dest_ip: default: null description: - Destination IP address. The value is a string of 0 to 255 characters.The default value is 0.0.0.0. The value is in dotted decimal notation. required: false rule_id: default: null description: - ID of a basic ACL rule in configuration mode. The value is an integer ranging from 0 to 4294967294. required: false acl_name: description: - ACL number or name. For a numbered rule group, the value ranging from 3000 to 3999 indicates a advance ACL. For a named rule group, the value is a string of 1 to 32 case-sensitive characters starting with a letter, spaces not supported. required: true acl_step: default: null description: - ACL step. The value is an integer ranging from 1 to 20. The default value is 5. required: false log_flag: choices: - 'true' - 'false' default: false description: - Flag of logging matched data packets. required: false protocol: choices: - ip - icmp - igmp - ipinip - tcp - udp - gre - ospf default: null description: - Protocol type. required: false src_mask: default: null description: - Source IP address mask. The value is an integer ranging from 1 to 32. required: false syn_flag: default: null description: - TCP flag value. The value is an integer ranging from 0 to 63. required: false vrf_name: default: null description: - VPN instance name. The value is a string of 1 to 31 characters.The default value is _public_. required: false dest_mask: default: null description: - Destination IP address mask. The value is an integer ranging from 1 to 32. required: false frag_type: choices: - fragment - clear_fragment default: null description: - Type of packet fragmentation. required: false icmp_code: default: null description: - ICMP message code. Data packets can be filtered based on the ICMP message code. The value is an integer ranging from 0 to 255. required: false icmp_name: choices: - unconfiged - echo - echo-reply - fragmentneed-DFset - host-redirect - host-tos-redirect - host-unreachable - information-reply - information-request - net-redirect - net-tos-redirect - net-unreachable - parameter-problem - port-unreachable - protocol-unreachable - reassembly-timeout - source-quench - source-route-failed - timestamp-reply - timestamp-request - ttl-exceeded - address-mask-reply - address-mask-request - custom default: null description: - ICMP name. required: false icmp_type: default: null description: - ICMP type. This parameter is available only when the packet protocol is ICMP. The value is an integer ranging from 0 to 255. required: false igmp_type: choices: - host-query - mrouter-adver - mrouter-solic - mrouter-termi - mtrace-resp - mtrace-route - v1host-report - v2host-report - v2leave-group - v3host-report default: null description: - Internet Group Management Protocol. required: false rule_name: default: null description: - Name of a basic ACL rule. The value is a string of 1 to 32 characters. required: false source_ip: default: null description: - Source IP address. The value is a string of 0 to 255 characters.The default value is 0.0.0.0. The value is in dotted decimal notation. required: false precedence: default: null description: - Data packets can be filtered based on the priority field. The value is an integer ranging from 0 to 7. required: false time_range: default: null description: - Name of a time range in which an ACL rule takes effect. required: false established: choices: - 'true' - 'false' default: false description: - Match established connections. required: false rule_action: choices: - permit - deny default: null description: - Matching mode of basic ACL rules. required: false src_port_op: choices: - lt - eq - gt - range default: null description: - Range type of the source port. required: false ttl_expired: choices: - 'true' - 'false' default: false description: - Whether TTL Expired is matched, with the TTL value of 1. required: false dest_port_op: choices: - lt - eq - gt - range default: null description: - Range type of the destination port. required: false src_port_end: default: null description: - End port number of the source port. The value is an integer ranging from 0 to 65535. required: false dest_port_end: default: null description: - End port number of the destination port. The value is an integer ranging from 0 to 65535. required: false src_pool_name: default: null description: - Name of a source pool. The value is a string of 1 to 32 characters. required: false tcp_flag_mask: default: null description: - TCP flag mask value. The value is an integer ranging from 0 to 63. required: false dest_pool_name: default: null description: - Name of a destination pool. The value is a string of 1 to 32 characters. required: false src_port_begin: default: null description: - Start port number of the source port. The value is an integer ranging from 0 to 65535. required: false acl_description: default: null description: - ACL description. The value is a string of 1 to 127 characters. required: false dest_port_begin: default: null description: - Start port number of the destination port. The value is an integer ranging from 0 to 65535. required: false rule_description: default: null description: - Description about an ACL rule. required: false src_port_pool_name: default: null description: - Name of a source port pool. The value is a string of 1 to 32 characters. required: false dest_port_pool_name: default: null description: - Name of a destination port pool. The value is a string of 1 to 32 characters. required: false
changed: description: check to see if a change was made on the device returned: always sample: true type: boolean end_state: description: k/v pairs of aaa params after module execution returned: always sample: {} type: dict existing: description: k/v pairs of existing aaa server returned: always sample: aclNumOrName: test aclType: Advance type: dict proposed: description: k/v pairs of parameters passed into module returned: always sample: acl_name: test state: delete_acl type: dict updates: description: command sent to the device returned: always sample: - undo acl name test type: list