.. Document meta :orphan: .. |antsibull-internal-nbsp| unicode:: 0xA0 :trim: .. role:: ansible-attribute-support-label .. role:: ansible-attribute-support-property .. role:: ansible-attribute-support-full .. role:: ansible-attribute-support-partial .. role:: ansible-attribute-support-none .. role:: ansible-attribute-support-na .. role:: ansible-option-type .. role:: ansible-option-elements .. role:: ansible-option-required .. role:: ansible-option-versionadded .. role:: ansible-option-aliases .. role:: ansible-option-choices .. role:: ansible-option-choices-default-mark .. role:: ansible-option-default-bold .. role:: ansible-option-configuration .. role:: ansible-option-returned-bold .. role:: ansible-option-sample-bold .. Anchors .. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module: .. Anchors: short name for ansible.builtin .. Anchors: aliases .. Title cisco.catalystcenter.switches_configs_intended_security_update module -- Resource module for Switches Configs Intended Security Update ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ .. Collection note .. note:: This module is part of the `cisco.catalystcenter collection `_ (version 2.12.0). To install it, use: :code:`ansible-galaxy collection install cisco.catalystcenter`. You need further requirements to be able to use this module, see :ref:`Requirements ` for details. To use it in a playbook, specify: :code:`cisco.catalystcenter.switches_configs_intended_security_update`. .. version_added .. rst-class:: ansible-version-added New in cisco.catalystcenter 2.11.0 .. contents:: :local: :depth: 1 .. Deprecated Synopsis -------- .. Description - Manage operation update of the resource Switches Configs Intended Security Update. - \> This API updates the configurations for an intended feature on a switch. Updates to other intended features can be done over several iterations. Once all the updates to intended features are complete, they can be deployed to a device using the API /api/v1/switches/{id}/configs/intended/deploy. When the intended features are deployed, they are applied on top of the existing configurations on the device. Any existing configurations on the device which are not included in the intended features, are retained on the device. .. note:: This module has a corresponding :ref:`action plugin `. .. Aliases .. Requirements .. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module_requirements: Requirements ------------ The below requirements are needed on the host that executes this module. - catalystcentersdk \>= 3.2.3.0.0 - python \>= 3.12 .. Options Parameters ---------- .. rst-class:: ansible-option-table .. list-table:: :width: 100% :widths: auto :header-rows: 1 * - Parameter - Comments * - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-arpinspectionconfig: .. rst-class:: ansible-option-title **arpInspectionConfig** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
This feature for configuring ARP Inspection protocol on the device, which monitors and validates ARP packets to prevent ARP spoofing and ensure network security. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-arpinspectionconfig/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
List of arp inspection config feature entries. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-arpinspectionconfig/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of network functionality under a feature. Config type ARP\_INSPECTION\_VLAN\_CONFIG is for configuring ARP Inspection settings for specific VLANs. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-arpinspectionconfig/items/vlanid: .. rst-class:: ansible-option-title **vlanId** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
ARP Inspection VLAN. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-catalystcenter_debug: .. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dnac_debug: .. rst-class:: ansible-option-title **catalystcenter_debug** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-aliases:`aliases: dnac_debug` .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Flag for Cisco Catalyst Center SDK to enable debugging. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-catalystcenter_host: .. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dnac_host: .. rst-class:: ansible-option-title **catalystcenter_host** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-aliases:`aliases: dnac_host` .. rst-class:: ansible-option-type-line :ansible-option-type:`string` / :ansible-option-required:`required` .. raw:: html
- .. raw:: html
The Cisco Catalyst Center hostname. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-catalystcenter_password: .. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dnac_password: .. rst-class:: ansible-option-title **catalystcenter_password** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-aliases:`aliases: dnac_password` .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
The Cisco Catalyst Center password to authenticate. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-catalystcenter_api_port: .. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-catalystcenter_port: .. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dnac_port: .. rst-class:: ansible-option-title **catalystcenter_port** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-aliases:`aliases: dnac_port, catalystcenter_api_port` .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
The Cisco Catalyst Center port. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`443` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-catalystcenter_username: .. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dnac_username: .. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-user: .. rst-class:: ansible-option-title **catalystcenter_username** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-aliases:`aliases: dnac_username, user` .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
The Cisco Catalyst Center username to authenticate. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`"admin"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-catalystcenter_verify: .. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dnac_verify: .. rst-class:: ansible-option-title **catalystcenter_verify** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-aliases:`aliases: dnac_verify` .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Flag to enable or disable SSL certificate verification. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-catalystcenter_version: .. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dnac_version: .. rst-class:: ansible-option-title **catalystcenter_version** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-aliases:`aliases: dnac_version` .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Informs the SDK which version of Cisco Catalyst Center to use. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`"3.1.6.0"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig: .. rst-class:: ansible-option-title **ctsConfig** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
This feature is for configuring CTS. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
List of cts config feature entries. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/authorizationlist: .. rst-class:: ansible-option-title **authorizationList** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Authorization list for Cisco TrustSec policies. This list defines which policies are applied for TrustSec authorization decisions on the device. Unconfigure Value - use "" to unconfigure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of network functionality under a feature. Config type CTS\_CONFIG is for configuring centralized traffic shaping and generation parameters. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/ctssgt: .. rst-class:: ansible-option-title **ctsSgt** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Security Group Tag (SGT) value for TrustSec. Used to classify endpoints for policy enforcement. Unconfigure Value - use 0 to unconfigure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/defaultsxppassword: .. rst-class:: ansible-option-title **defaultSxpPassword** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Default password for SXP connections. Used for authentication when no peer-specific password is set. Unconfigure Value - use "" to unconfigure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/enforcementvlans: .. rst-class:: ansible-option-title **enforcementVlans** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
List of VLANs for Cisco TrustSec enforcement. Specifies which VLANs are subject to TrustSec security policies for segmentation and access control. Unconfigure Value - use "" to unconfigure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/ipsgtmappings: .. rst-class:: ansible-option-title **ipSgtMappings** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Define mappings between IP addresses and SGTs. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/ipsgtmappings/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Security Group Tag (SGT) mapping configuration for Cisco TrustSec (CTS) to manage security group tag mappings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/ipsgtmappings/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
Switches Configs Intended Security Update's items. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/ipsgtmappings/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of network functionality under a feature. Config type SGT\_MAP\_CONFIG is for configuring the security group tag mapping within the network. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/ipsgtmappings/items/hostorsubnetipaddress: .. rst-class:: ansible-option-title **hostOrSubnetIpAddress** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
IPv4/IPv6 Host Address. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/ipsgtmappings/items/sgt: .. rst-class:: ansible-option-title **sgt** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Security Group Tag (SGT) value for VRF mapping. Assigns a security group to endpoints within a VRF. Unconfigure Value - use 0 to unconfigure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/ipvrfsgtmappings: .. rst-class:: ansible-option-title **ipVrfSgtMappings** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Per-VRF IP-to-SGT mapping configuration for Cisco TrustSec. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/ipvrfsgtmappings/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Security Group Tag (SGT) mapping list configuration for Cisco TrustSec (CTS) to manage security group tag mappings in lists. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/ipvrfsgtmappings/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
Switches Configs Intended Security Update's items. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/ipvrfsgtmappings/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Config type SGT\_MAP\_LIST\_GEN is for configuring Security Group Tag (SGT) Mapping lists which are used to define and apply security policies within network devices. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/ipvrfsgtmappings/items/ipaddress: .. rst-class:: ansible-option-title **ipAddress** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
IPv4/IPv6 Host Address. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/ipvrfsgtmappings/items/sgt: .. rst-class:: ansible-option-title **sgt** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Security Group Tag (SGT) value for mapping. Assigns a security group to the specified IP address for TrustSec access control. Unconfigure Value - use 0 to unconfigure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/ipvrfsgtmappings/items/vrfname: .. rst-class:: ansible-option-title **vrfName** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Select VPN Routing/Forwarding instance for the binding. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/isrolebasedenforcementenabled: .. rst-class:: ansible-option-title **isRoleBasedEnforcementEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enables enforcement-only mode for Cisco TrustSec role-based policies. When enabled, the device enforces policies but does not perform authorization checks. Unconfigure Value - use false to revert to default settings. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/issxpenabled: .. rst-class:: ansible-option-title **isSxpEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable CTS SXP support. Unconfigure Value - use false to revert to default settings. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/rolebasedpermissions: .. rst-class:: ansible-option-title **roleBasedPermissions** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Configure IP or SGT ranges for role-based enforcement. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/rolebasedpermissions/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Role-based permissions configuration for Cisco TrustSec (CTS) to manage security group tag ranges. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/rolebasedpermissions/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
Switches Configs Intended Security Update's items. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/rolebasedpermissions/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
The generation and management of continuous time series ranges within network features. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/rolebasedpermissions/items/destinationsgtranges: .. rst-class:: ansible-option-title **destinationSgtRanges** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Map source and destination ranges for CTS role-based enforcement. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/rolebasedpermissions/items/destinationsgtranges/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Role-based range configuration for Cisco TrustSec (CTS) to manage security group tag ranges. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/rolebasedpermissions/items/destinationsgtranges/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
Switches Configs Intended Security Update's items. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/rolebasedpermissions/items/destinationsgtranges/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Configuring access control policies based on role-based IP range mappings within the network. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/rolebasedpermissions/items/destinationsgtranges/items/destinationsgt: .. rst-class:: ansible-option-title **destinationSgt** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Destination SGT range for Cisco TrustSec permissions. Sets the range of SGTs that are allowed as destinations for specific TrustSec policies. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/rolebasedpermissions/items/destinationsgtranges/items/ipv4rolebasedaclname: .. rst-class:: ansible-option-title **ipv4RoleBasedAclName** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
ACL name for permissions between SGT ranges. Specifies the access control list used to permit or deny traffic between defined SGT ranges. Derived From - The available IPv4 role-based ACL names include IPv4 Role-Based Access List configurations from the current profile and the device. Unconfigure Value - use "" to unconfigure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/rolebasedpermissions/items/destinationsgtranges/items/ipv6rolebasedaclname: .. rst-class:: ansible-option-title **ipv6RoleBasedAclName** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
IPv6 ACL name for permissions between SGT ranges. Defines the IPv6 access control list for traffic between specified SGT ranges. Derived From - The available IPv6 role-based ACL names include IPv6 Role-Based Access List configurations from the current profile and the device. Unconfigure Value - use "" to unconfigure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/rolebasedpermissions/items/sourcesgtrange: .. rst-class:: ansible-option-title **sourceSgtRange** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Source SGT range for Cisco TrustSec permissions. Defines the range of Security Group Tags (SGTs) that are allowed as sources for specific policies. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/sxpipv4peers: .. rst-class:: ansible-option-title **sxpIpV4Peers** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Configure SXP IPv4 settings without a VRF. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/sxpipv4peers/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
SXP IPv4 Peer configuration. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/sxpipv4peers/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
Switches Configs Intended Security Update's items. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/sxpipv4peers/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
ConfigType CTS\_SXP\_IPV4\_NO\_VRF\_GEN is for configuring SXP connections for IPv4 without VRF support. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/sxpipv4peers/items/ipv4address: .. rst-class:: ansible-option-title **ipV4Address** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
IPv4 address of the SXP peer. Specifies the remote peer for SXP connections. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/sxpipv4peers/items/localdevicemode: .. rst-class:: ansible-option-title **localDeviceMode** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Additional options for SXP peer connection. Allows customization of SXP peer behavior. Unconfigure Value - use SPEAKER to revert to default settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/sxpipv4peers/items/maximumholdtime: .. rst-class:: ansible-option-title **maximumHoldTime** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Maximum time in seconds before SXP peer connection times out. Controls how long the peer connection can remain idle. Unconfigure Value - use 0 to revert to default settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/sxpipv4peers/items/minimumholdtime: .. rst-class:: ansible-option-title **minimumHoldTime** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Hold time in seconds for SXP peer connection. Determines how long the connection remains active without updates. Unconfigure Value - use 0 to revert to default settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/sxpipv4peers/items/mode: .. rst-class:: ansible-option-title **mode** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Mode for SXP peer connection (speaker, listener, both, none). Defines the role of the peer in SXP communication. Unconfigure Value - use "" to unconfigure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/sxpipv4peers/items/passwordtype: .. rst-class:: ansible-option-title **passwordType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Password for SXP peer connection. Used to authenticate SXP peers. Unconfigure Value - use "" to unconfigure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ctsconfig/items/sxpipv4peers/items/sourceipv4address: .. rst-class:: ansible-option-title **sourceIpv4Address** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Source interface for SXP peer connection. Specifies which interface initiates the SXP connection. Unconfigure Value - use "" to unconfigure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig: .. rst-class:: ansible-option-title **deviceTrackingConfig** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
This feature is for configuring Device Tracking Settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
List of device tracking config feature entries. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of network functionality under a feature. Config type DEVICE\_TRACKING is for configuring the tracking and management of device connectivity and location data within a network. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/devicetrackingpolicy: .. rst-class:: ansible-option-title **deviceTrackingPolicy** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Configure policies for Device Tracking. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/devicetrackingpolicy/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Device tracking policy configuration type. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/devicetrackingpolicy/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
Switches Configs Intended Security Update's items. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/devicetrackingpolicy/items/addresscountlimit: .. rst-class:: ansible-option-title **addressCountLimit** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Maximum number of addresses allowed per device on an interface. This restricts the number of IP addresses a single device can use on a port. Unconfigure Value - use 0 to unconfigure. Supported IOS-XE versions - This property is viewable only (read-only) on Cisco switches running IOS version earlier than 17.18.1. Since IOS version 17.18.1 or later, configuration for this property is supported. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/devicetrackingpolicy/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of network functionality under a feature. Config type INET\_ADDRESS is for configuring IP addresses related to device tracking within the defined network environment. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/devicetrackingpolicy/items/devicerole: .. rst-class:: ansible-option-title **deviceRole** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Configuration for device roles in device tracking policies. This allows you to define and assign roles to tracked devices for policy enforcement. Supported IOS-XE versions - This property is viewable only (read-only) on Cisco switches running IOS version earlier than 17.15.1. Since IOS version 17.15.1 or later, configuration for this property is supported. Unconfigure Value - use NODE to revert to default settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/devicetrackingpolicy/items/isdestinationgleanlogonly: .. rst-class:: ansible-option-title **isDestinationGleanLogOnly** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enables logging only for destination glean events without taking action. Use this to monitor glean events for analysis without enforcing policies. Unconfigure Value - use false to unconfigure. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/devicetrackingpolicy/items/isprefixgleanenabled: .. rst-class:: ansible-option-title **isPrefixGleanEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enables gleaning of device prefixes for tracking. This helps in identifying devices by their network prefixes for more granular tracking. Unconfigure Value - use false to unconfigure. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/devicetrackingpolicy/items/isprotocolarpenabled: .. rst-class:: ansible-option-title **isProtocolArpEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enables device tracking for ARP protocol. This allows the system to track devices using ARP messages for IPv4 address resolution. Unconfigure Value - use true to revert to default settings. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/devicetrackingpolicy/items/isprotocoldhcp4enabled: .. rst-class:: ansible-option-title **isProtocolDhcp4Enabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enables device tracking for DHCPv4 protocol. This allows tracking of devices that obtain IPv4 addresses via DHCP. Unconfigure Value - use true to revert to default settings. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/devicetrackingpolicy/items/isprotocoldhcp6enabled: .. rst-class:: ansible-option-title **isProtocolDhcp6Enabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enables device tracking for DHCPv6 protocol. This allows tracking of devices that obtain IPv6 addresses via DHCPv6. Unconfigure Value - use true to revert to default settings. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/devicetrackingpolicy/items/isprotocolndpenabled: .. rst-class:: ansible-option-title **isProtocolNdpEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enables device tracking for IPv6 Neighbor Discovery Protocol (NDP). This helps track IPv6 devices using NDP messages. Unconfigure Value - use true to revert to default settings. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/devicetrackingpolicy/items/issecuritylevelgleanenabled: .. rst-class:: ansible-option-title **isSecurityLevelGleanEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Security level for gleaned device tracking entries. Set the security level for entries learned via gleaning to control access and monitoring. Unconfigure Value - use false to revert to default settings. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/devicetrackingpolicy/items/istrackingenabled: .. rst-class:: ansible-option-title **isTrackingEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enables or disables device tracking on the interface. When enabled, the interface will track connected devices for security and management. Unconfigure Value - use false to revert to default settings. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/devicetrackingpolicy/items/istrustedportenabled: .. rst-class:: ansible-option-title **isTrustedPortEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Marks the port as trusted for device tracking. Trusted ports are exempt from certain security checks and restrictions. Unconfigure Value - use false to revert to default settings. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/devicetrackingpolicy/items/policyname: .. rst-class:: ansible-option-title **policyName** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Policy name or identifier for device tracking. Use this to reference and apply specific device tracking policies to interfaces. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/fallbacksourceipv4address: .. rst-class:: ansible-option-title **fallbackSourceIpv4Address** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
IPv4 address used as fallback for auto source in device tracking. This address is used if automatic learning fails. Unconfigure Value - use "" to unconfigure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/fallbacksourceipv4mask: .. rst-class:: ansible-option-title **fallbackSourceIpv4Mask** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Subnet mask for fallback IPv4 auto source. Defines the network mask for the fallback address. Unconfigure Value - use "" to unconfigure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/isautosourceenabled: .. rst-class:: ansible-option-title **isAutoSourceEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enables automatic source address learning for device tracking. This allows the system to automatically learn source addresses for tracked devices. Unconfigure Value - use false to unconfigure. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/isfallbacksourceoverrideenabled: .. rst-class:: ansible-option-title **isFallbackSourceOverrideEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Overrides default fallback behavior for auto source. Use this to customize how fallback addresses are handled. Unconfigure Value - use false to unconfigure. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/isloggingtheftenabled: .. rst-class:: ansible-option-title **isLoggingTheftEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enables logging of device theft events detected by device tracking. This helps in security monitoring by recording suspected theft incidents. Unconfigure Value - use false to unconfigure. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/istrackingenabled: .. rst-class:: ansible-option-title **isTrackingEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enables or disables device tracking globally. When enabled, device tracking features are active across the system. Unconfigure Value - use false to unconfigure. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingconfig/items/maxbindingentries: .. rst-class:: ansible-option-title **maxBindingEntries** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Maximum number of device tracking entries allowed per interface. This limits how many devices can be tracked on a single interface to prevent resource exhaustion. Unconfigure Value - use 0 to unconfigure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingvlanconfig: .. rst-class:: ansible-option-title **deviceTrackingVlanConfig** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
This feature is for configuring Device Tracking Vlan Settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingvlanconfig/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
List of device tracking vlan config feature entries. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingvlanconfig/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of network functionality under a feature. Config type DEVICE\_TRACKING\_VLAN is for configuring VLAN-based device tracking to monitor and manage devices connected to a network. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingvlanconfig/items/devicetrackingpolicy: .. rst-class:: ansible-option-title **deviceTrackingPolicy** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Configure policies for Device Tracking. Derived From - The available policy names include Device Tracking Policy configurations from the current profile and the device. Unconfigure Value - use "" to unconfigure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingvlanconfig/items/isdevicetrackingenabled: .. rst-class:: ansible-option-title **isDeviceTrackingEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable device tracking for the VLAN. Unconfigure Value - use false to unconfigure. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-devicetrackingvlanconfig/items/vlanid: .. rst-class:: ansible-option-title **vlanId** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
VLAN ID for configuration entry. Enter the VLAN identifier to apply specific configuration settings to that VLAN. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dhcpsnoopingconfig: .. rst-class:: ansible-option-title **dhcpSnoopingConfig** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
This feature is for configuring DHCP Snooping. DHCP Snooping is a security feature that acts as a firewall between untrusted hosts and trusted DHCP servers. It helps to prevent malicious or malformed DHCP traffic and ensures that only valid DHCP servers can assign IP addresses. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dhcpsnoopingconfig/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
List of dhcp snooping config feature entries. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dhcpsnoopingconfig/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of network functionality under a feature. Config type DHCP\_SNOOPING\_CONFIG is for configuring DHCP Snooping settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dhcpsnoopingconfig/items/databasetimeout: .. rst-class:: ansible-option-title **databaseTimeout** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Timeout value in seconds for DHCP snooping database entries. Set how long DHCP snooping records are kept before being removed. Unconfigure Value - use 300 to revert to default settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dhcpsnoopingconfig/items/databaseurl: .. rst-class:: ansible-option-title **databaseUrl** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
URL for DHCP snooping database storage. Specify the location where DHCP snooping data is stored for auditing and monitoring. Unconfigure Value - use "" to unconfigure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dhcpsnoopingconfig/items/dhcpsnoopingvlans: .. rst-class:: ansible-option-title **dhcpSnoopingVlans** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Configure VLANs for DHCP snooping. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dhcpsnoopingconfig/items/dhcpsnoopingvlans/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Configure DHCP Snooping settings for specific VLANs. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dhcpsnoopingconfig/items/dhcpsnoopingvlans/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
Switches Configs Intended Security Update's items. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dhcpsnoopingconfig/items/isdhcpsnoopingenabled: .. rst-class:: ansible-option-title **isDhcpSnoopingEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
DHCP Snooping. Unconfigure Value - use false to unconfigure. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dhcpsnoopingconfig/items/isgleanenabled: .. rst-class:: ansible-option-title **isGleanEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enables gleaning of DHCP snooping information. When enabled, additional DHCP data is collected for enhanced security and troubleshooting. Unconfigure Value - use false to revert to default settings. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dhcpsnoopingconfig/items/issnoopinginfooptionenabled: .. rst-class:: ansible-option-title **isSnoopingInfoOptionEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Option for DHCP snooping information. Specify which DHCP options should be monitored and recorded by snooping. Unconfigure Value - use true to revert to default settings. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dhcpsnoopingconfig/items/issnoopingoptionallowuntrustedenabled: .. rst-class:: ansible-option-title **isSnoopingOptionAllowUntrustedEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Allows untrusted DHCP snooping information options. Enable this to accept DHCP options from untrusted sources for flexibility in network design. Unconfigure Value - use false to unconfigure. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dhcpsnoopingconfig/items/writedelay: .. rst-class:: ansible-option-title **writeDelay** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Write delay in seconds for DHCP snooping database updates. Set how frequently changes are written to the snooping database. Unconfigure Value - use 300 to revert to default settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dot1xconfig: .. rst-class:: ansible-option-title **dot1xConfig** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
This feature is for configuring 802.1x. IEEE 802.1x is a standard which facilitates access control between a client and a server. Before services can be provided to a client by a Local Access Network (LAN) or switch, the client connected to the switch port has to be authenticated by the authentication server which runs Remote Authentication Dial-In User Service (RADIUS). 802.1x authentication restricts unauthorized clients from connecting to a LAN through publicly-accessible ports. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dot1xconfig/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
List of dot1x config feature entries. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dot1xconfig/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Setting global parameters for IEEE 802 authentication across the network infrastructure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dot1xconfig/items/dot1xcredentials: .. rst-class:: ansible-option-title **dot1xCredentials** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Configure Dot1x Credentials. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dot1xconfig/items/dot1xcredentials/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Dot1xCredentials. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dot1xconfig/items/dot1xcredentials/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
Switches Configs Intended Security Update's items. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dot1xconfig/items/dot1xcredentials/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Configuring credentials for 802.1X authentication, including username, password, and encryption type. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dot1xconfig/items/dot1xcredentials/items/password: .. rst-class:: ansible-option-title **password** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Secret password used for 802.1X authentication credentials. This password is used for secure network access authentication. Unconfigure Value - use "" to unconfigure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dot1xconfig/items/dot1xcredentials/items/passwordtype: .. rst-class:: ansible-option-title **passwordType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of password for 802.1X credentials (clear or encrypted). Choose between clear text or encrypted password storage for security. Unconfigure Value - use "" to unconfigure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dot1xconfig/items/dot1xcredentials/items/profilename: .. rst-class:: ansible-option-title **profileName** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Profile name for 802.1X authentication credentials. Use this to organize and manage different authentication profiles. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dot1xconfig/items/dot1xcredentials/items/username: .. rst-class:: ansible-option-title **username** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Username for 802.1X authentication credentials. This username is used for network access authentication. Unconfigure Value - use "" to unconfigure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dot1xconfig/items/isdot1xenabled: .. rst-class:: ansible-option-title **isDot1xEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enables system-wide 802.1X authentication control. This activates 802.1X authentication across all interfaces on the device. Unconfigure Value - use false to revert to default settings. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-dot1xconfig/items/isloggingverboseenabled: .. rst-class:: ansible-option-title **isLoggingVerboseEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enables verbose logging for 802.1X authentication events. When enabled, detailed logs are generated for troubleshooting and auditing. Unconfigure Value - use false to revert to default settings. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-feature: .. rst-class:: ansible-option-title **feature** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Feature path parameter. Name of the feature to configure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-id: .. rst-class:: ansible-option-title **id** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Id path parameter. Network device id of the switch. The Network device id can be identified from the GET network device API /dna/intent/api/v1/network-device response. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig: .. rst-class:: ansible-option-title **ipV4ExtendedAccessListConfig** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
This feature is for configuring IP Access List Extended settings. It allows defining extended access control lists for more granular traffic control. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
List of ip v4 extended access list config feature entries. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules: .. rst-class:: ansible-option-title **accessListSequenceRules** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Sequence rule list for the IPv4 extended access-list. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of network functionality under a feature. Config type IPV4\_ROLE\_BASED\_ACCESS\_LIST\_RULES is for configuring IP ACL List Sequence Rule settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
Switches Configs Intended Security Update's items. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/action: .. rst-class:: ansible-option-title **action** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Action for the extended access-list rule (permit or deny). This determines whether matching traffic is allowed or blocked by the access-list. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of network functionality under a feature. Config type IPV4\_EXTENDED\_ACCESS\_LIST\_RULE is for configuring IP Standard Access List Sequence Rule settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/destinationendrange: .. rst-class:: ansible-option-title **destinationEndRange** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
End range for destination port in ACL rules, enhancing traffic control and security. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/destinationipv4address: .. rst-class:: ansible-option-title **destinationIpV4Address** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Destination host IP address for the extended access-list rule. This allows you to specify a single host as the destination for filtering. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/destinationipv4subnet: .. rst-class:: ansible-option-title **destinationIpV4Subnet** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Destination IPv4 address for the extended access-list rule. This specifies the target address for traffic filtering. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/destinationstartrange: .. rst-class:: ansible-option-title **destinationStartRange** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Start range for destination port in ACL rules, enhancing traffic control and security. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/destinationtype: .. rst-class:: ansible-option-title **destinationType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Defines the type of destination port for ACL rules, enhancing traffic control and security. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/destinationvalue: .. rst-class:: ansible-option-title **destinationValue** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Destination value for the ACL rule, such as port numbers or protocol types. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/destinationwildcard: .. rst-class:: ansible-option-title **destinationWildcard** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Subnet mask for the destination IPv4 address in the extended access-list rule. This defines the network portion of the destination address for matching. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/isdestinationanyenabled: .. rst-class:: ansible-option-title **isDestinationAnyEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Matches any destination IP address in the extended access-list rule. This allows the rule to apply to all possible destination addresses. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/isloggingenabled: .. rst-class:: ansible-option-title **isLoggingEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enables logging for the extended access-list rule. When enabled, matching traffic will be logged for monitoring and troubleshooting. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/issourceanyenabled: .. rst-class:: ansible-option-title **isSourceAnyEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Matches any IP address in the extended access-list rule. Use this to create rules that apply to all IP addresses, regardless of source or destination. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/matchdscp: .. rst-class:: ansible-option-title **matchDscp** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Differentiated Services Code Point (DSCP) value for QoS matching in the extended access-list rule. Use this to filter or prioritize traffic based on QoS markings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/protocol: .. rst-class:: ansible-option-title **protocol** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Protocol matched by the extended access-list rule (e.g. Tcp, udp, icmp). This allows filtering based on network protocol type. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/sequence: .. rst-class:: ansible-option-title **sequence** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Sequence number for the extended access-list rule. This determines the order in which rules are evaluated and applied. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/sourceendrange: .. rst-class:: ansible-option-title **sourceEndRange** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
End range for source port in ACL rules, enhancing traffic control and security. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/sourceipv4address: .. rst-class:: ansible-option-title **sourceIpV4Address** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Host IP address for the extended access-list rule. This is used to match traffic to or from a specific host. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/sourceipv4subnet: .. rst-class:: ansible-option-title **sourceIpV4Subnet** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
IPv4 address for the extended access-list rule. Use this to match traffic based on a specific IPv4 address. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/sourcestartrange: .. rst-class:: ansible-option-title **sourceStartRange** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Start range for source port in ACL rules, enhancing traffic control and security. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/sourcetype: .. rst-class:: ansible-option-title **sourceType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Defines the type of source port for ACL rules, enhancing traffic control and security. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/sourcevalue: .. rst-class:: ansible-option-title **sourceValue** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Source value for the ACL rule, such as port numbers or protocol types. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/accesslistsequencerules/items/sourcewildcard: .. rst-class:: ansible-option-title **sourceWildcard** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Subnet mask for the IPv4 address in the extended access-list rule. This helps define which addresses are matched by the rule. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/aclname: .. rst-class:: ansible-option-title **aclName** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Name of the extended access-list. Assigning a name helps with identification, management, and referencing the access-list in configurations. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4extendedaccesslistconfig/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of network functionality under a feature. Config type IPV4\_EXTENDED\_ACCESS\_LIST\_CONFIG is for configuring IP Access List Extended settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4rolebasedaccesslistconfig: .. rst-class:: ansible-option-title **ipV4RoleBasedAccessListConfig** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
This feature is for configuring IP ACL Role Based settings. It allows defining access control lists based on roles to enhance network security. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4rolebasedaccesslistconfig/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
List of ip v4 role based access list config feature entries. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4rolebasedaccesslistconfig/items/accesslistsequencerules: .. rst-class:: ansible-option-title **accessListSequenceRules** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Sequence rule list for the IPv4 role-based access-list. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4rolebasedaccesslistconfig/items/accesslistsequencerules/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of network functionality under a feature. Config type IPV4\_ROLE\_BASED\_ACCESS\_LIST\_RULES is for configuring IP ACL List Sequence Rule settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4rolebasedaccesslistconfig/items/accesslistsequencerules/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
Switches Configs Intended Security Update's items. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4rolebasedaccesslistconfig/items/accesslistsequencerules/items/action: .. rst-class:: ansible-option-title **action** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Action for the role-based access-list rule (permit or deny). This determines whether matching traffic is allowed or blocked by the role-based access-list. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4rolebasedaccesslistconfig/items/accesslistsequencerules/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of network functionality under a feature. Config type IPV4\_ROLE\_BASED\_ACCESS\_LIST\_RULE is for configuring IP ACL List Sequence Rule settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4rolebasedaccesslistconfig/items/accesslistsequencerules/items/isloggingenabled: .. rst-class:: ansible-option-title **isLoggingEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enables logging for the role-based access-list rule. When enabled, matching traffic will be logged for monitoring and auditing. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4rolebasedaccesslistconfig/items/accesslistsequencerules/items/protocol: .. rst-class:: ansible-option-title **protocol** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Protocol matched by the role-based access-list rule (e.g. Tcp, udp, icmp). This allows filtering based on protocol type for role-based access control. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4rolebasedaccesslistconfig/items/accesslistsequencerules/items/sequence: .. rst-class:: ansible-option-title **sequence** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Sequence number for the role-based access-list rule, used to determine rule order. This value controls the evaluation order of rules within a role-based ACL, affecting which rule is matched first. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4rolebasedaccesslistconfig/items/aclname: .. rst-class:: ansible-option-title **aclName** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Name of the role-based access-list, used for identification and management. Assign a unique name to easily reference and manage the ACL in configurations and policies. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4rolebasedaccesslistconfig/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of network functionality under a feature. Config type IPV4\_ROLE\_BASED\_ACCESS\_LIST\_CONFIG is for configuring IP ACL Role Based settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4standardaccesslistconfig: .. rst-class:: ansible-option-title **ipV4StandardAccessListConfig** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
This feature is for configuring IP Access List Standard settings. It allows defining standard access control lists for basic traffic control. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4standardaccesslistconfig/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
List of ip v4 standard access list config feature entries. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4standardaccesslistconfig/items/accesslistsequencerules: .. rst-class:: ansible-option-title **accessListSequenceRules** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Sequence rule list for the IPv4 standard access-list. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4standardaccesslistconfig/items/accesslistsequencerules/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of network functionality under a feature. Config type IPV4\_ROLE\_BASED\_ACCESS\_LIST\_RULES is for configuring IP ACL List Sequence Rule settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4standardaccesslistconfig/items/accesslistsequencerules/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
Switches Configs Intended Security Update's items. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4standardaccesslistconfig/items/accesslistsequencerules/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Configuration type for the access list sequence rule. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4standardaccesslistconfig/items/accesslistsequencerules/items/isdenyanyenabled: .. rst-class:: ansible-option-title **isDenyAnyEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Denies any IP address in the standard access-list rule. Use this to block all traffic regardless of source address, providing a catch-all deny rule. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4standardaccesslistconfig/items/accesslistsequencerules/items/isdenylogenabled: .. rst-class:: ansible-option-title **isDenyLogEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enables logging for denied packets in the standard access-list rule. When enabled, all denied traffic will be recorded for monitoring and troubleshooting. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4standardaccesslistconfig/items/accesslistsequencerules/items/ispermitanyenabled: .. rst-class:: ansible-option-title **isPermitAnyEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Permits any IP address in the standard access-list rule. Use this to allow all traffic regardless of source address, providing a catch-all permit rule. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4standardaccesslistconfig/items/accesslistsequencerules/items/ispermitlogenabled: .. rst-class:: ansible-option-title **isPermitLogEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enables logging for permitted packets in the standard access-list rule. When enabled, all allowed traffic will be recorded for monitoring and auditing. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4standardaccesslistconfig/items/accesslistsequencerules/items/sequence: .. rst-class:: ansible-option-title **sequence** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Sequence number for the standard access-list rule, used to determine rule order. This value controls the evaluation order of rules within a standard ACL, affecting which rule is matched first. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4standardaccesslistconfig/items/accesslistsequencerules/items/sourcehostipv4address: .. rst-class:: ansible-option-title **sourceHostIpV4Address** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Host IPv4 address to permit in the standard access-list rule. Use this to allow traffic from a specific source IP address. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4standardaccesslistconfig/items/accesslistsequencerules/items/sourceipv4address: .. rst-class:: ansible-option-title **sourceIpV4Address** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
IPv4 address prefix to deny in the standard access-list rule. Specify a network or subnet to block traffic from a range of addresses. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4standardaccesslistconfig/items/accesslistsequencerules/items/sourcewildcard: .. rst-class:: ansible-option-title **sourceWildcard** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Subnet mask for the denied IPv4 address in the standard access-list rule. Use this to define the network portion of addresses to be denied. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4standardaccesslistconfig/items/accesslistsequencerules/items/subnethostipv4address: .. rst-class:: ansible-option-title **subnetHostIpV4Address** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Host IPv4 address to deny in the standard access-list rule. Use this to block traffic from a specific source IP address. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4standardaccesslistconfig/items/accesslistsequencerules/items/subnetipv4address: .. rst-class:: ansible-option-title **subnetIpV4Address** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
IPv4 address prefix to permit in the standard access-list rule. Specify a network or subnet to allow traffic from a range of addresses. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4standardaccesslistconfig/items/accesslistsequencerules/items/subnetwildcard: .. rst-class:: ansible-option-title **subnetWildcard** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Subnet mask for the permitted IPv4 address in the standard access-list rule. Use this to define the network portion of addresses to be permitted. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4standardaccesslistconfig/items/aclname: .. rst-class:: ansible-option-title **aclName** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Name of the standard access-list, used for identification and management. Assign a unique name to easily reference and manage the ACL in configurations and policies. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv4standardaccesslistconfig/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of network functionality under a feature. Config type IPV4\_STANDARD\_ACCESS\_LIST\_CONFIG is for configuring IP Access List Standard settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6accesslistconfig: .. rst-class:: ansible-option-title **ipV6AccessListConfig** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
This feature is for configuring IP Named ACL settings. It allows defining named access control lists for easier management and configuration. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6accesslistconfig/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
List of ip v6 access list config feature entries. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6accesslistconfig/items/accesslistsequencerules: .. rst-class:: ansible-option-title **accessListSequenceRules** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Sequence rule list for the IPv6 access-list. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6accesslistconfig/items/accesslistsequencerules/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
IPv6 Access List Sequence Rule configuration type. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6accesslistconfig/items/accesslistsequencerules/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
Switches Configs Intended Security Update's items. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6accesslistconfig/items/aclname: .. rst-class:: ansible-option-title **aclName** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Name of the IPv6 access-list. Assign a unique name to identify and manage the access-list in IPv6 security and traffic policies. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6accesslistconfig/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Configuration type for the named ACL. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6rolebasedaccesslistconfig: .. rst-class:: ansible-option-title **ipV6RoleBasedAccessListConfig** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
This feature is for configuring IPv6 Acc List Role Seq Rule Gen settings. It allows defining role-based access control lists for easier management and configuration. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6rolebasedaccesslistconfig/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
List of ip v6 role based access list config feature entries. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6rolebasedaccesslistconfig/items/accesslistsequencerules: .. rst-class:: ansible-option-title **accessListSequenceRules** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Sequence rule list for the IPv6 role-based access-list. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6rolebasedaccesslistconfig/items/accesslistsequencerules/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
IPv6 Role-based Access List Sequence Rule configuration type. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6rolebasedaccesslistconfig/items/accesslistsequencerules/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
Switches Configs Intended Security Update's items. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6rolebasedaccesslistconfig/items/accesslistsequencerules/items/action: .. rst-class:: ansible-option-title **action** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Action for the role-based IPv6 access-list rule (permit or deny). This setting controls whether matching IPv6 traffic is allowed or blocked based on user roles. Or deny. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6rolebasedaccesslistconfig/items/accesslistsequencerules/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of network functionality under a feature. Config type IPV6\_ROLE\_BASED\_ACCESS\_LIST\_RULE is for configuring the sequence of access control rules in an IPv6 role-based access list. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6rolebasedaccesslistconfig/items/accesslistsequencerules/items/islogenabled: .. rst-class:: ansible-option-title **isLogEnabled** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enables logging for the role-based IPv6 access-list rule. When enabled, matching traffic is recorded for monitoring, auditing, and troubleshooting. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6rolebasedaccesslistconfig/items/accesslistsequencerules/items/protocoltype: .. rst-class:: ansible-option-title **protocolType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Protocol type for the IPv6 role-based access list rule, such as TCP, UDP, or ICMP. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6rolebasedaccesslistconfig/items/accesslistsequencerules/items/protocolvalue: .. rst-class:: ansible-option-title **protocolValue** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Protocol value for the IPv6 role-based access list rule, such as TCP port numbers or ICMP types. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6rolebasedaccesslistconfig/items/accesslistsequencerules/items/sequence: .. rst-class:: ansible-option-title **sequence** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Sequence number for the role-based IPv6 access-list rule. This value determines the order of rule evaluation, impacting which rule is applied first for role-based IPv6 filtering. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6rolebasedaccesslistconfig/items/aclname: .. rst-class:: ansible-option-title **aclName** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Name of the role-based IPv6 access-list. Assign a unique name to reference and manage role-based IPv6 access policies. It from others for simplified management and configuration. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-ipv6rolebasedaccesslistconfig/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of network functionality under a feature. Config type IPV6\_ROLE\_BASED\_ACCESS\_LIST\_CONFIG is for configuring sequential rule generation for IPv6 access list role assignments. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-macextendedaccesslistconfig: .. rst-class:: ansible-option-title **macExtendedAccessListConfig** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
This feature is for configuring MAC Acc List Extended Gen settings. It allows defining extended MAC access control lists for easier management and configuration. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-macextendedaccesslistconfig/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
List of mac extended access list config feature entries. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-macextendedaccesslistconfig/items/accesslistextendedentries: .. rst-class:: ansible-option-title **accessListExtendedEntries** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Extended entry list for the MAC access-list. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-macextendedaccesslistconfig/items/accesslistextendedentries/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Mac Access List Extended configuration type. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-macextendedaccesslistconfig/items/accesslistextendedentries/items: .. rst-class:: ansible-option-title **items** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
Switches Configs Intended Security Update's items. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-macextendedaccesslistconfig/items/accesslistextendedentries/items/action: .. rst-class:: ansible-option-title **action** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Action for the extended MAC access-list entry (permit or deny). This determines whether matching MAC traffic is allowed or blocked by the access-list. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-macextendedaccesslistconfig/items/accesslistextendedentries/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of network functionality under a feature. Config type MAC\_ACCESS\_LIST\_EXTENDED\_ENTRY is for configuring detailed access control rules that specify which packets are permitted or denied based on criteria such as source and destination IP addresses, protocol types, and port numbers. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-macextendedaccesslistconfig/items/accesslistextendedentries/items/values: .. rst-class:: ansible-option-title **values** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Values for the extended MAC access-list entry. Specify MAC addresses or other criteria to match traffic for filtering or monitoring. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-macextendedaccesslistconfig/items/aclname: .. rst-class:: ansible-option-title **aclName** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Identifier for the extended MAC access-list. Assign a unique ID to reference and manage the MAC access-list for security policies. It from others for simplified management and configuration. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-macextendedaccesslistconfig/items/configtype: .. rst-class:: ansible-option-title **configType** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Type of network functionality under a feature. Config type MAC\_ACCESS\_LIST\_EXTENDED\_CONFIG is for configuring extended MAC address accessibility options for enhanced network control. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__parameter-validate_response_schema: .. rst-class:: ansible-option-title **validate_response_schema** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Flag for Cisco Catalyst Center SDK to enable the validation of request bodies against a JSON schema. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
.. Attributes .. Notes Notes ----- .. note:: - SDK Method used are wired.Wired.update\_intended\_security\_configurations, - Paths used are put /dna/campus/api/v1/switches/{id}/configs/intended/security/{feature}, - Does not support \ :literal:`check\_mode`\ - The plugin runs on the control node and does not use any ansible connection plugins, - but instead uses the embedded connection manager from Cisco CATALYST SDK - Requires Python \>= 3.10, matching the controller Python versions supported by the collection's minimum ansible-core version (see the collection README for the current ansible-core / Python compatibility range) .. Seealso See Also -------- .. seealso:: `Cisco Catalyst Center documentation for Wired UpdateIntendedSecurityConfigurations `_ Complete reference of the UpdateIntendedSecurityConfigurations API. .. Examples Examples -------- .. code-block:: yaml+jinja --- - name: Update by id cisco.catalystcenter.switches_configs_intended_security_update: catalystcenter_host: "{{catalystcenter_host}}" catalystcenter_username: "{{catalystcenter_username}}" catalystcenter_password: "{{catalystcenter_password}}" catalystcenter_verify: "{{catalystcenter_verify}}" catalystcenter_port: "{{catalystcenter_port}}" catalystcenter_version: "{{catalystcenter_version}}" catalystcenter_debug: "{{catalystcenter_debug}}" arpInspectionConfig: items: - configType: string vlanId: 0 ctsConfig: items: - authorizationList: string configType: string ctsSgt: 0 defaultSxpPassword: string enforcementVlans: string ipSgtMappings: configType: string items: - configType: string hostOrSubnetIpAddress: string sgt: 0 ipVrfSgtMappings: configType: string items: - configType: string ipAddress: string sgt: 0 vrfName: string isRoleBasedEnforcementEnabled: true isSxpEnabled: true roleBasedPermissions: configType: string items: - configType: string destinationSgtRanges: configType: string items: - configType: string destinationSgt: 0 ipv4RoleBasedAclName: string ipv6RoleBasedAclName: string sourceSgtRange: 0 sxpIpV4Peers: configType: string items: - configType: string ipV4Address: string localDeviceMode: string maximumHoldTime: 0 minimumHoldTime: 0 mode: string passwordType: string sourceIpv4Address: string deviceTrackingConfig: items: - configType: string deviceTrackingPolicy: configType: string items: - addressCountLimit: 0 configType: string deviceRole: string isDestinationGleanLogOnly: true isPrefixGleanEnabled: true isProtocolArpEnabled: true isProtocolDhcp4Enabled: true isProtocolDhcp6Enabled: true isProtocolNdpEnabled: true isSecurityLevelGleanEnabled: true isTrackingEnabled: true isTrustedPortEnabled: true policyName: string fallbackSourceIpv4Address: string fallbackSourceIpv4Mask: string isAutoSourceEnabled: true isFallbackSourceOverrideEnabled: true isLoggingTheftEnabled: true isTrackingEnabled: true maxBindingEntries: 0 deviceTrackingVlanConfig: items: - configType: string deviceTrackingPolicy: string isDeviceTrackingEnabled: true vlanId: string dhcpSnoopingConfig: items: - configType: string databaseTimeout: 0 databaseUrl: string dhcpSnoopingVlans: configType: string items: - configType: string vlanId: 0 isDhcpSnoopingEnabled: true isGleanEnabled: true isSnoopingInfoOptionEnabled: true isSnoopingOptionAllowUntrustedEnabled: true writeDelay: 0 dot1xConfig: items: - configType: string dot1xCredentials: configType: string items: - configType: string password: string passwordType: string profileName: string username: string isDot1xEnabled: true isLoggingVerboseEnabled: true feature: string id: string ipV4ExtendedAccessListConfig: items: - accessListSequenceRules: configType: string items: - action: string configType: string destinationEndRange: string destinationIpV4Address: string destinationIpV4Subnet: string destinationStartRange: string destinationType: string destinationValue: string destinationWildcard: string isDestinationAnyEnabled: true isLoggingEnabled: true isSourceAnyEnabled: true matchDscp: string protocol: string sequence: 0 sourceEndRange: string sourceIpV4Address: string sourceIpV4Subnet: string sourceStartRange: string sourceType: string sourceValue: string sourceWildcard: string aclName: string configType: string ipV4RoleBasedAccessListConfig: items: - accessListSequenceRules: configType: string items: - action: string configType: string isLoggingEnabled: true protocol: string sequence: 0 aclName: string configType: string ipV4StandardAccessListConfig: items: - accessListSequenceRules: configType: string items: - configType: string isDenyAnyEnabled: true isDenyLogEnabled: true isPermitAnyEnabled: true isPermitLogEnabled: true sequence: 0 sourceHostIpV4Address: string sourceIpV4Address: string sourceWildcard: string subnetHostIpV4Address: string subnetIpV4Address: string subnetWildcard: string aclName: string configType: string ipV6AccessListConfig: items: - accessListSequenceRules: configType: string items: - action: string configType: string destinationEndRange: string destinationIpV6Address: string destinationNetworkAddress: string destinationNetworkWildcard: string destinationPrefix: string destinationStartRange: string destinationType: string destinationValue: string isDestinationAnyEnabled: true isEstablishedEnabled: true isLoggingEnabled: true isSourceAnyEnabled: true matchDscp: string protocol: string sequence: 0 sourceEndRange: string sourceIpV6Address: string sourceNetworkAddress: string sourceNetworkWildcard: string sourcePrefix: string sourceStartRange: string sourceType: string sourceValue: string aclName: string configType: string ipV6RoleBasedAccessListConfig: items: - accessListSequenceRules: configType: string items: - action: string configType: string isLogEnabled: true protocolType: string protocolValue: string sequence: 0 aclName: string configType: string macExtendedAccessListConfig: items: - accessListExtendedEntries: configType: string items: - action: string configType: string values: string aclName: string configType: string .. Facts .. Return values Return Values ------------- Common return values are documented :ref:`here `, the following are the fields unique to this module: .. rst-class:: ansible-option-table .. list-table:: :width: 100% :widths: auto :header-rows: 1 * - Key - Description * - .. raw:: html
.. _ansible_collections.cisco.catalystcenter.switches_configs_intended_security_update_module__return-catalystcenter_response: .. rst-class:: ansible-option-title **catalystcenter_response** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
A dictionary or list with the response returned by the Cisco Catalyst Center Python SDK .. rst-class:: ansible-option-line :ansible-option-returned-bold:`Returned:` always .. rst-class:: ansible-option-line .. rst-class:: ansible-option-sample :ansible-option-sample-bold:`Sample:` :ansible-rv-sample-value:`{"response": {"taskId": "string", "url": "string"}, "version": "string"}` .. raw:: html
.. Status (Presently only deprecated) .. Authors Authors ~~~~~~~ - Bryan Vargas (@bvargasre) .. Extra links Collection links ~~~~~~~~~~~~~~~~ .. raw:: html .. Parsing errors