sushma_alethea.test.icx_aaa_authentication (1.0.0) — module

Configures AAA authentication in Ruckus ICX 7000 series switches

Authors: Ruckus Wireless (@Commscope)

Install collection

Install with ansible-galaxy collection install sushma_alethea.test:==1.0.0


Add to requirements.yml

  collections:
    - name: sushma_alethea.test
      version: 1.0.0

Description

Configures AAA authentication in Ruckus ICX 7000 series switches.

Usage examples

  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: configure aaa authentication dot1x and enable
  community.network.icx_aaa_authentication:
    dot1x:
      primary_method: none
      state: present
    enable:
      primary_method: radius
      backup_method_list:
        - enable
        - line
      state: present
  • Success
    Steampunk Spotter scan finished with no errors, warnings or hints.
- name: disable aaa authentication for web-server
  community.network.icx_aaa_authentication:
    web-server:
      primary_method: tacacs+
      backup_method_list: 
        - radius
        - none
      state: absent

Inputs

    
dot1x:
    default: null
    description: Enables 802.1X and MAC authentication.
    suboptions:
      backup_method1:
        choices:
        - none
        description: Backup authentication method if primary method fails.
        type: str
      primary_method:
        choices:
        - radius
        - none
        description: Primary authentication method.
        required: true
        type: str
      state:
        choices:
        - present
        - absent
        default: present
        description: Specifies whether to configure or remove authentication.
        type: str
    type: dict

login:
    default: null
    description: Configures the AAA authentication method for securing access to the Privileged
      EXEC level and global configuration levels of the CLI. Only one of metod-list or
      implicit-user should be provided.
    suboptions:
      backup_method_list:
        choices:
        - enable
        - line
        - local
        - radius
        - tacacs
        - tacacs+
        - none
        description: Backup authentication method if primary method fails.
        elements: str
        type: list
      primary_method:
        choices:
        - enable
        - line
        - local
        - radius
        - tacacs
        - tacacs+
        - none
        description: Primary authentication method.
        type: str
      privilege_mode:
        default: false
        description: Configures the device to enter the privileged EXEC mode after a successful
          login through Telnet or SSH..
        type: bool
      state:
        choices:
        - present
        - absent
        default: present
        description: Specifies whether to configure or remove the authentication method.
        type: str
    type: dict

enable:
    default: null
    description: Configures the AAA authentication method for securing access to the Privileged
      EXEC level and global configuration levels of the CLI. Only one of method-list or
      implicit-user should be provided. If the configured primary authentication fails
      due to an error, the device tries the backup authentication methods in the order
      they appear in the list.
    suboptions:
      backup_method_list:
        choices:
        - enable
        - line
        - local
        - radius
        - tacacs
        - tacacs+
        - none
        description: Backup authentication method if primary method fails.
        elements: str
        type: list
      implicit_user:
        default: false
        description: Configures the device to prompt only for a password when a user attempts
          to gain Super User access to the Privileged EXEC and global configuration levels
          of the CLI.
        type: bool
      primary_method:
        choices:
        - enable
        - line
        - local
        - radius
        - tacacs
        - tacacs+
        - none
        description: Primary authentication method.
        type: str
      state:
        choices:
        - present
        - absent
        default: present
        description: Specifies whether to configure or remove the authentication method.
        type: str
    type: dict

web_server:
    default: null
    description: Configures the AAA authentication method to access the device through
      the Web Management Interface.
    suboptions:
      backup_method_list:
        choices:
        - enable
        - line
        - local
        - radius
        - tacacs
        - tacacs+
        - none
        description: Backup authentication method if primary method fails.
        elements: str
        type: list
      primary_method:
        choices:
        - enable
        - line
        - local
        - radius
        - tacacs
        - tacacs+
        - none
        description: Primary authentication method.
        required: true
        type: str
      state:
        choices:
        - present
        - absent
        default: present
        description: Specifies whether to configure or remove the authentication method.
        type: str
    type: dict

snmp_server:
    default: null
    description: Configures the AAA authentication method for SNMP server access.
    suboptions:
      backup_method_list:
        choices:
        - enable
        - line
        - local
        - radius
        - tacacs
        - tacacs+
        - none
        description: Backup authentication method if primary method fails.
        elements: str
        type: list
      primary_method:
        choices:
        - enable
        - line
        - local
        - radius
        - tacacs
        - tacacs+
        - none
        description: Primary authentication method.
        required: true
        type: str
      state:
        choices:
        - present
        - absent
        default: present
        description: Specifies whether to configure or remove the authentication method.
        type: str
    type: dict