ansible.builtin.asa_og (v2.9.27) — module

Install Ansible via pip

Install with pip install ansible==2.9.27

Description

This module allows you to create and update object-group network/service on Cisco ASA device.

Usage examples

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

---
- name: configure network object-group
  asa_og:
    name: ansible_test_0
    group_type: network-object
    state: present
    description: ansible_test object-group description
    host_ip:
      - 8.8.8.8
      - 8.8.4.4
    ip_mask:
      - 10.0.0.0 255.255.255.0
      - 192.168.0.0 255.255.0.0
    group_object:
      - awx_lon
      - awx_ams

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

- name: configure port-object object-group
  asa_og:
    name: ansible_test_1
    group_type: port-object
    state: replace
    description: ansible_test object-group description
    protocol: tcp-udp
    port_eq:
      - 1025
      - kerberos
    port_range:
      - 1025 5201
      - 0 1024

Scanned by Steampunk Spotter

• Success
  Steampunk Spotter scan finished with no errors, warnings or hints.

- name: configure service-object object-group
  asa_og:
    name: ansible_test_2
    group_type: service-object
    state: absent
    description: ansible_test object-group description
    service_cfg:
      - tcp destination eq 8080
      - tcp destination eq www

Inputs

    
name:
    description:
    - Name of the object group.
    required: true

state:
    choices:
    - present
    - absent
    - replace
    default: present
    description:
    - Manage the state of the resource.

host_ip:
    description:
    - The host IP address for object-group network.
    type: list

ip_mask:
    description:
    - The IP address and mask for network object-group.
    type: list

port_eq:
    description:
    - The single port for port-object.

protocol:
    choices:
    - udp
    - tcp
    - tcp-udp
    description:
    - The protocol for object-group service with port-object.

group_type:
    choices:
    - network-object
    - service-object
    - port-object
    description:
    - The object group type.
    required: true

port_range:
    description:
    - The port range for port-object.

description:
    description:
    - The description for the object-group.

service_cfg:
    description:
    - The service-object configuration protocol, direction, range or port.

group_object:
    description:
    - The group-object for network object-group.
    type: list

Outputs

commands:
  description: command sent to the device
  returned: always
  sample:
  - object-group network ansible_test_0
  - description ansible_test object-group description
  - network-object host 8.8.8.8
  - network-object host 8.8.4.4
  - network-object 10.0.0.0 255.255.255.0
  - network-object 192.168.0.0 255.255.0.0
  - network-object 192.168.0.0 255.255.0.0
  - group-object awx_lon
  - group-object awx_ams
  type: list