cisco.catalystcenter.switches_configs_deployed_security_info module -- Information module for Switches Configs Deployed Security

Note

This module is part of the cisco.catalystcenter collection (version 2.11.0).

To install it, use: ansible-galaxy collection install cisco.catalystcenter. You need further requirements to be able to use this module, see Requirements for details.

To use it in a playbook, specify: cisco.catalystcenter.switches_configs_deployed_security_info.

New in cisco.catalystcenter 2.11.0

Synopsis

  • Get Switches Configs Deployed Security by id. - > Returns deployed configuration entries for the specified security feature on the switch. The device config learning must have enabled for the switch using the API /dna/campus/api/v1/switches/configs/deployed/enable.

Note

This module has a corresponding action plugin.

Requirements

The below requirements are needed on the host that executes this module.

  • catalystcentersdk >= 3.2.3.0.0

  • python >= 3.12

Parameters

Parameter

Comments

catalystcenter_debug

aliases: dnac_debug

boolean

Flag for Cisco Catalyst Center SDK to enable debugging.

Choices:

catalystcenter_host

aliases: dnac_host

string / required

The Cisco Catalyst Center hostname.

catalystcenter_password

aliases: dnac_password

string

The Cisco Catalyst Center password to authenticate.

catalystcenter_port

aliases: dnac_port, catalystcenter_api_port

integer

The Cisco Catalyst Center port.

Default: :ansible-option-default:`443`

catalystcenter_username

aliases: dnac_username, user

string

The Cisco Catalyst Center username to authenticate.

Default: :ansible-option-default:`"admin"`

catalystcenter_verify

aliases: dnac_verify

boolean

Flag to enable or disable SSL certificate verification.

Choices:

catalystcenter_version

aliases: dnac_version

string

Informs the SDK which version of Cisco Catalyst Center to use.

Default: :ansible-option-default:`"3.1.6.0"`

feature

string

Feature path parameter. Name of the feature to retrieve security configuration for. The API /api/v1/switches/{id}/configs/supported/security can be used to get the list of features supported on a device.

headers

dictionary

Additional headers.

id

string

Id path parameter. Network device id of the switch. The Network device id can be identified from the GET network device API /dna/intent/api/v1/network-device response.

limit

integer

Limit query parameter. The number of records to show for this page.

offset

integer

Offset query parameter. The first record to show for this page; the first record is numbered 1.

validate_response_schema

boolean

Flag for Cisco Catalyst Center SDK to enable the validation of request bodies against a JSON schema.

Choices:

Notes

Note

  • SDK Method used are wired.Wired.get_deployed_security_configurations,

  • Paths used are get /dna/campus/api/v1/switches/{id}/configs/deployed/security/{feature},

  • Supports check_mode

  • The plugin runs on the control node and does not use any ansible connection plugins,

  • but instead uses the embedded connection manager from Cisco CATALYST SDK

  • Requires Python >= 3.10, matching the controller Python versions supported by the collection's minimum ansible-core version (see the collection README for the current ansible-core / Python compatibility range)

See Also

See also

Cisco Catalyst Center documentation for Wired GetDeployedSecurityConfigurations

Complete reference of the GetDeployedSecurityConfigurations API.

Examples

---
- name: Get Switches Configs Deployed Security by id
  cisco.catalystcenter.switches_configs_deployed_security_info:
    catalystcenter_host: "{{catalystcenter_host}}"
    catalystcenter_username: "{{catalystcenter_username}}"
    catalystcenter_password: "{{catalystcenter_password}}"
    catalystcenter_verify: "{{catalystcenter_verify}}"
    catalystcenter_port: "{{catalystcenter_port}}"
    catalystcenter_version: "{{catalystcenter_version}}"
    catalystcenter_debug: "{{catalystcenter_debug}}"
    headers: "{{my_headers | from_json}}"
    offset: 1
    limit: 0
    id: string
    feature: string
  register: result

Return Values

Common return values are documented here, the following are the fields unique to this module:

Key

Description

catalystcenter_response

dictionary

A dictionary or list with the response returned by the Cisco Catalyst Center Python SDK

Returned: always

Sample: :ansible-rv-sample-value:`{"response": {"arpInspectionConfig": {"items": [{"configType": "string", "vlanId": 0}]}, "ctsConfig": {"items": [{"authorizationList": "string", "configType": "string", "ctsSgt": 0, "defaultSxpPassword": "string", "enforcementVlans": "string", "ipSgtMappings": {"configType": "string", "items": [{"configType": "string", "hostOrSubnetIpAddress": "string", "sgt": 0}]}, "ipVrfSgtMappings": {"configType": "string", "items": [{"configType": "string", "ipAddress": "string", "sgt": 0, "vrfName": "string"}]}, "isRoleBasedEnforcementEnabled": true, "isSxpEnabled": true, "roleBasedPermissions": {"configType": "string", "items": [{"configType": "string", "destinationSgtRanges": {"configType": "string", "items": [{"configType": "string", "destinationSgt": 0, "ipv4RoleBasedAclName": "string", "ipv6RoleBasedAclName": "string"}]}, "sourceSgtRange": 0}]}, "sxpIpV4Peers": {"configType": "string", "items": [{"configType": "string", "ipV4Address": "string", "localDeviceMode": "string", "maximumHoldTime": 0, "minimumHoldTime": 0, "mode": "string", "passwordType": "string", "sourceIpv4Address": "string"}]}}]}, "deviceTrackingConfig": {"items": [{"configType": "string", "deviceTrackingPolicy": {"configType": "string", "items": [{"addressCountLimit": 0, "configType": "string", "deviceRole": "string", "isDestinationGleanLogOnly": true, "isPrefixGleanEnabled": true, "isProtocolArpEnabled": true, "isProtocolDhcp4Enabled": true, "isProtocolDhcp6Enabled": true, "isProtocolNdpEnabled": true, "isSecurityLevelGleanEnabled": true, "isTrackingEnabled": true, "isTrustedPortEnabled": true, "policyName": "string"}]}, "fallbackSourceIpv4Address": "string", "fallbackSourceIpv4Mask": "string", "isAutoSourceEnabled": true, "isFallbackSourceOverrideEnabled": true, "isLoggingTheftEnabled": true, "isTrackingEnabled": true, "maxBindingEntries": 0}]}, "deviceTrackingVlanConfig": {"items": [{"configType": "string", "deviceTrackingPolicy": "string", "isDeviceTrackingEnabled": true, "vlanId": "string"}]}, "dhcpSnoopingConfig": {"items": [{"configType": "string", "databaseTimeout": 0, "databaseUrl": "string", "dhcpSnoopingVlans": {"configType": "string", "items": [{"configType": "string", "vlanId": 0}]}, "isDhcpSnoopingEnabled": true, "isGleanEnabled": true, "isSnoopingInfoOptionEnabled": true, "isSnoopingOptionAllowUntrustedEnabled": true, "writeDelay": 0}]}, "dot1xConfig": {"items": [{"configType": "string", "dot1xCredentials": {"configType": "string", "items": [{"configType": "string", "password": "string", "passwordType": "string", "profileName": "string", "username": "string"}]}, "isDot1xEnabled": true, "isLoggingVerboseEnabled": true}]}, "ipV4ExtendedAccessListConfig": {"items": [{"accessListSequenceRules": {"configType": "string", "items": [{"action": "string", "configType": "string", "destinationEndRange": "string", "destinationIpV4Address": "string", "destinationIpV4Subnet": "string", "destinationStartRange": "string", "destinationType": "string", "destinationValue": "string", "destinationWildcard": "string", "isDestinationAnyEnabled": true, "isLoggingEnabled": true, "isSourceAnyEnabled": true, "matchDscp": "string", "protocol": "string", "sequence": 0, "sourceEndRange": "string", "sourceIpV4Address": "string", "sourceIpV4Subnet": "string", "sourceStartRange": "string", "sourceType": "string", "sourceValue": "string", "sourceWildcard": "string"}]}, "aclName": "string", "configType": "string"}]}, "ipV4RoleBasedAccessListConfig": {"items": [{"accessListSequenceRules": {"configType": "string", "items": [{"action": "string", "configType": "string", "isLoggingEnabled": true, "protocol": "string", "sequence": 0}]}, "aclName": "string", "configType": "string"}]}, "ipV4StandardAccessListConfig": {"items": [{"accessListSequenceRules": {"configType": "string", "items": [{"configType": "string", "isDenyAnyEnabled": true, "isDenyLogEnabled": true, "isPermitAnyEnabled": true, "isPermitLogEnabled": true, "sequence": 0, "sourceHostIpV4Address": "string", "sourceIpV4Address": "string", "sourceWildcard": "string", "subnetHostIpV4Address": "string", "subnetIpV4Address": "string", "subnetWildcard": "string"}]}, "aclName": "string", "configType": "string"}]}, "ipV6AccessListConfig": {"items": [{"accessListSequenceRules": {"configType": "string", "items": [{"action": "string", "configType": "string", "destinationEndRange": "string", "destinationIpV6Address": "string", "destinationNetworkAddress": "string", "destinationNetworkWildcard": "string", "destinationPrefix": "string", "destinationStartRange": "string", "destinationType": "string", "destinationValue": "string", "isDestinationAnyEnabled": true, "isEstablishedEnabled": true, "isLoggingEnabled": true, "isSourceAnyEnabled": true, "matchDscp": "string", "protocol": "string", "sequence": 0, "sourceEndRange": "string", "sourceIpV6Address": "string", "sourceNetworkAddress": "string", "sourceNetworkWildcard": "string", "sourcePrefix": "string", "sourceStartRange": "string", "sourceType": "string", "sourceValue": "string"}]}, "aclName": "string", "configType": "string"}]}, "ipV6RoleBasedAccessListConfig": {"items": [{"accessListSequenceRules": {"configType": "string", "items": [{"action": "string", "configType": "string", "isLogEnabled": true, "protocolType": "string", "protocolValue": "string", "sequence": 0}]}, "aclName": "string", "configType": "string"}]}, "macExtendedAccessListConfig": {"items": [{"accessListExtendedEntries": {"configType": "string", "items": [{"action": "string", "configType": "string", "values": "string"}]}, "aclName": "string", "configType": "string"}]}}, "version": "string"}`

Authors

  • Bryan Vargas (@bvargasre)