.. Document meta :orphan: .. |antsibull-internal-nbsp| unicode:: 0xA0 :trim: .. role:: ansible-attribute-support-label .. role:: ansible-attribute-support-property .. role:: ansible-attribute-support-full .. role:: ansible-attribute-support-partial .. role:: ansible-attribute-support-none .. role:: ansible-attribute-support-na .. role:: ansible-option-type .. role:: ansible-option-elements .. role:: ansible-option-required .. role:: ansible-option-versionadded .. role:: ansible-option-aliases .. role:: ansible-option-choices .. role:: ansible-option-choices-default-mark .. role:: ansible-option-default-bold .. role:: ansible-option-configuration .. role:: ansible-option-returned-bold .. role:: ansible-option-sample-bold .. Anchors .. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module: .. Anchors: short name for ansible.builtin .. Anchors: aliases .. Title cisco.dnac.wired_campus_automation_workflow_manager module -- Manage wired campus automation operations in Cisco Catalyst Center ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ .. Collection note .. note:: This module is part of the `cisco.dnac collection `_ (version 6.46.0). To install it, use: :code:`ansible-galaxy collection install cisco.dnac`. You need further requirements to be able to use this module, see :ref:`Requirements ` for details. To use it in a playbook, specify: :code:`cisco.dnac.wired_campus_automation_workflow_manager`. .. version_added .. rst-class:: ansible-version-added New in cisco.dnac 6.20.0 .. contents:: :local: :depth: 1 .. Deprecated Synopsis -------- .. Description - BETA MODULE, CISCO INTERNAL USE ONLY - This module is currently in beta and is intended for Cisco internal purposes only. - It is not available for customer consumption and should not be used in production environments. - This module provides comprehensive management of Layer 2 wired network configurations in - Cisco Catalyst Center. - Configure VLANs, STP, CDP, LLDP, VTP, DHCP Snooping, IGMP/MLD Snooping, authentication, - port channels, and interface settings. - Supports both creation and updating of configurations on network devices. - Provides automated deployment of intended configurations to devices. - Includes comprehensive validation of all configuration parameters before applying changes. - Feature Support Matrix - \ :literal:`VLANs`\ - create, update, delete - \ :literal:`CDP`\ - create, update, delete - \ :literal:`LLDP`\ - create, update, delete - \ :literal:`STP`\ - create, update (delete not supported due to API limitations) - \ :literal:`VTP`\ - create, update, delete - \ :literal:`DHCP Snooping`\ - create, update, delete - \ :literal:`IGMP Snooping`\ - create, update (delete not supported due to API limitations) - \ :literal:`MLD Snooping`\ - create, update (delete not supported due to API limitations) - \ :literal:`Authentication`\ - create, update, delete - \ :literal:`Logical Ports`\ - create, update (delete not supported due to API limitations) - \ :literal:`Port Configuration`\ - create, update (delete not supported due to API limitations) - Known API Limitations & Issues - The deleted state is not supported for STP, IGMP Snooping, MLD Snooping, Port Configuration, and Logical Ports due to underlying beta API limitations. - Several known issues exist with the beta APIs that may affect functionality. - VLANs (vlanConfig) - - VLAN configuration may silently fail when VTP mode is SERVER (CSCwr00884) - VLAN name cannot be reset to empty string once set - STP (stpGlobalConfig) - - STP instance deletion does not properly remove deployed configuration (CSCwr01764) - Incorrect payload structure validation for isStpEnabled parameter (CSCwr0107) - VTP (vtpGlobalConfig) - - Domain name cannot be removed once set (expected behavior) - Configuration file name and source interface cannot be reset to empty string (CSCwr01195) - Misleading validation error when attempting to remove VTP domain name (CSCwr01131) - DHCP Snooping (dhcpSnoopingGlobalConfig) - - Global configuration not fully reset to defaults after intent deletion (CSCwr01309) - Agent URL, proxy bridge VLANs, and snooping VLANs cannot be reset using empty strings (CSCwr01255, CSCwr01321, CSCwr01327) - IGMP/MLD Snooping (igmpSnoopingGlobalConfig, mldSnoopingGlobalConfig) - - Querier address does not reset to default on intent deletion (CSCwr01879) - MLD snooping rejects empty querier address in update operations (CSCwr06296) - Logical Ports (portchannelConfig) - - Port channel configuration may fail silently without proper error response (CSCwr01895) - Optional fields incorrectly enforced as required during validation (CSCwr08060) - Port Configuration (switchportInterfaceConfig) - - Switchport configuration may silently fail during comprehensive port updates - Storm Control, Port Security, and UDLD interface configurations are not supported (available in 3.2.x release) .. Aliases .. Requirements .. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module_requirements: Requirements ------------ The below requirements are needed on the host that executes this module. - dnacentersdk \>= 2.10.1 - python \>= 3.9 .. Options Parameters ---------- .. rst-class:: ansible-option-table .. list-table:: :width: 100% :widths: auto :header-rows: 1 * - Parameter - Comments * - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config: .. rst-class:: ansible-option-title **config** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` / :ansible-option-required:`required` .. raw:: html
- .. raw:: html
List of wired campus automation configurations to be applied to network devices. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/device_collection_status_check: .. rst-class:: ansible-option-title **device_collection_status_check** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Controls whether to verify the device's collection status before applying configurations. When true, ensures the device is in "Managed" or "In Progress" state before proceeding. When false, skips the collection status check (useful for devices being onboarded). Recommended to keep as true for production environments. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/hostname: .. rst-class:: ansible-option-title **hostname** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
The hostname of the network device to configure. Used when IP address is not available or preferred. Must match the hostname registered in Catalyst Center. Either "ip\_address" or "hostname" must be provided to identify the device. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/ip_address: .. rst-class:: ansible-option-title **ip_address** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
The management IP address of the network device to configure. Must be a valid IPv4 address format. Either "ip\_address" or "hostname" must be provided to identify the device. If both are provided, ip\_address takes precedence. Example - "192.168.1.1" .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration: .. rst-class:: ansible-option-title **layer2_configuration** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Comprehensive Layer 2 configuration settings for the network device. Contains all supported Layer 2 protocols and features. Each feature is optional and can be configured independently. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/authentication: .. rst-class:: ansible-option-title **authentication** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
IEEE 802.1X authentication configuration settings. Provides port-based network access control for enhanced security. Authenticates devices before granting network access. Foundation for Identity-Based Networking Services (IBNS). .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/authentication/authentication_config_mode: .. rst-class:: ansible-option-title **authentication_config_mode** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Authentication configuration mode (legacy vs. new style). \ :literal:`LEGACY`\ - Traditional authentication manager configuration mode. \ :literal:`NEW\_STYLE`\ - Identity-Based Networking Services (IBNS) mode. NEW\_STYLE is recommended for modern authentication deployments. Affects how authentication policies are configured and applied. Once the authentication configuration mode is set, it cannot be changed. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`"LEGACY"` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`"NEW\_STYLE"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/authentication/enable_dot1x_authentication: .. rst-class:: ansible-option-title **enable_dot1x_authentication** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Globally enable or disable 802.1X authentication. When true, enables 802.1X authentication globally. When false, disables 802.1X authentication on all ports. Must be enabled before configuring per-port authentication. Equivalent to "dot1x system-auth-control" command. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/cdp: .. rst-class:: ansible-option-title **cdp** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Cisco Discovery Protocol (CDP) global configuration settings. CDP is a Cisco proprietary protocol for discovering neighboring Cisco devices. Runs over Layer 2 and provides device information like platform, capabilities, and addresses. Useful for network topology discovery and troubleshooting. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/cdp/cdp_admin_status: .. rst-class:: ansible-option-title **cdp_admin_status** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Globally enable or disable CDP on the device. When true, CDP is enabled globally (equivalent to "cdp run" command). When false, CDP is disabled globally on all interfaces. Individual interfaces can still override this setting. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/cdp/cdp_advertise_v2: .. rst-class:: ansible-option-title **cdp_advertise_v2** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable CDP version 2 advertisements. When true, sends CDP version 2 advertisements (default and recommended). When false, sends CDP version 1 advertisements (legacy compatibility). Version 2 provides additional information and error detection. Equivalent to "cdp advertise-v2" command. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/cdp/cdp_hold_time: .. rst-class:: ansible-option-title **cdp_hold_time** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Time in seconds that receiving devices should hold CDP information before discarding it. Must be between 10 and 255 seconds. Should be set higher than the timer interval to prevent information loss. Typical values are 180 seconds (3 times the default timer). Equivalent to "cdp holdtime" command. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`180` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/cdp/cdp_log_duplex_mismatch: .. rst-class:: ansible-option-title **cdp_log_duplex_mismatch** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable logging of duplex mismatches detected by CDP. When true, logs warnings when CDP detects duplex mismatches with neighbors. When false, duplex mismatch detection is disabled. Useful for identifying and troubleshooting duplex configuration issues. Equivalent to "cdp log mismatch duplex" command. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/cdp/cdp_timer: .. rst-class:: ansible-option-title **cdp_timer** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Frequency in seconds at which CDP advertisements are sent. Must be between 5 and 254 seconds. Lower values provide more current information but increase network overhead. Higher values reduce overhead but may delay topology discovery. Equivalent to "cdp timer" command. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`60` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/dhcp_snooping: .. rst-class:: ansible-option-title **dhcp_snooping** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
DHCP Snooping configuration for securing DHCP operations. Prevents rogue DHCP servers and protects against DHCP-based attacks. Maintains a binding table of legitimate DHCP assignments. Foundation for other security features like IP Source Guard. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/dhcp_snooping/dhcp_admin_status: .. rst-class:: ansible-option-title **dhcp_admin_status** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Globally enable or disable DHCP Snooping on the device. When true, enables DHCP Snooping globally. When false, disables DHCP Snooping on all VLANs. Must be enabled before configuring per-VLAN or per-interface settings. Equivalent to "ip dhcp snooping" command. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/dhcp_snooping/dhcp_snooping_database_agent_url: .. rst-class:: ansible-option-title **dhcp_snooping_database_agent_url** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
URL for storing DHCP Snooping binding database remotely. Supports TFTP, FTP, and other file transfer protocols. Provides persistence of bindings across switch reboots. Minimum 5 characters, maximum 227 characters. Format for the URL - "protocol://server\_ip/filename" The URL must start with one of the following protocol prefixes ("bootflash:", "crashinfo:", "flash:", "ftp:", "http:", "https:" "rcp:", "scp:", "sftp:", "tftp:") Examples of valid URLs tftp URL - "tftp://192.168.1.100/dhcp\_bindings.db", ftp URL - "ftp://server.example.com/backups/dhcp\_bindings.db", flash URL - "flash:dhcp\_bindings.db", bootflash URL - "bootflash:dhcp\_bindings.db" .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/dhcp_snooping/dhcp_snooping_database_timeout: .. rst-class:: ansible-option-title **dhcp_snooping_database_timeout** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Timeout in seconds for database operations. Must be between 0 and 86400 seconds (24 hours). Time to wait for database read/write operations to complete. 0 means no timeout (wait indefinitely). Should be set based on network latency and server performance. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`300` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/dhcp_snooping/dhcp_snooping_database_write_delay: .. rst-class:: ansible-option-title **dhcp_snooping_database_write_delay** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Delay in seconds between database write operations. Must be between 15 and 86400 seconds. Batches multiple binding changes to reduce I/O overhead. Lower values provide more current data but increase overhead. Should balance between data currency and performance. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`300` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/dhcp_snooping/dhcp_snooping_glean: .. rst-class:: ansible-option-title **dhcp_snooping_glean** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable DHCP gleaning for learning bindings from DHCP traffic. When true, learns DHCP bindings by monitoring DHCP acknowledgments. Useful for populating the binding table in existing networks. Should be used temporarily during initial deployment. Equivalent to "ip dhcp snooping glean" command. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/dhcp_snooping/dhcp_snooping_proxy_bridge_vlans: .. rst-class:: ansible-option-title **dhcp_snooping_proxy_bridge_vlans** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=integer` .. raw:: html
- .. raw:: html
List of VLAN IDs to enable in bridge mode for DHCP relay. Each VLAN ID must be between 1 and 4094. Enables DHCP relay functionality in bridge mode. Useful for environments with DHCP servers on different subnets. Works in conjunction with DHCP relay configuration. All VLANs specified here must also be included in "dhcp\_snooping\_vlans" list. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/dhcp_snooping/dhcp_snooping_vlans: .. rst-class:: ansible-option-title **dhcp_snooping_vlans** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=integer` .. raw:: html
- .. raw:: html
List of VLAN IDs where DHCP Snooping should be enabled. Each VLAN ID must be between 1 and 4094. Only VLANs in this list will have DHCP packets inspected. VLANs not in the list will forward DHCP packets normally. Can be configured as individual VLANs or ranges. All VLANs specified in "dhcp\_snooping\_proxy\_bridge\_vlans" must also be included in this list. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/igmp_snooping: .. rst-class:: ansible-option-title **igmp_snooping** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Internet Group Management Protocol (IGMP) Snooping configuration. Optimizes multicast traffic delivery in Layer 2 networks. Prevents unnecessary multicast flooding by learning group memberships. Essential for efficient multicast application delivery. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/igmp_snooping/enable_igmp_snooping: .. rst-class:: ansible-option-title **enable_igmp_snooping** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Globally enable or disable IGMP Snooping. When true, enables IGMP Snooping globally on the switch. When false, disables IGMP Snooping and floods all multicast traffic. When disabling IGMP snooping globally, first disable IGMP snooping on all VLANs where it is currently enabled Enabled by default on most modern switches. Equivalent to "ip igmp snooping" command. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/igmp_snooping/igmp_snooping_querier: .. rst-class:: ansible-option-title **igmp_snooping_querier** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable IGMP Querier functionality globally. When true, the switch can act as an IGMP querier. When false, relies on external queriers (routers). Required when no multicast router is present in the VLAN. Equivalent to "ip igmp snooping querier" command. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/igmp_snooping/igmp_snooping_querier_address: .. rst-class:: ansible-option-title **igmp_snooping_querier_address** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Source IP address for IGMP query messages. Must be a valid IPv4 or IPv6 address. Used when the switch acts as an IGMP querier. Should be an address reachable by all multicast receivers. Helps identify the querier in network troubleshooting. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/igmp_snooping/igmp_snooping_querier_query_interval: .. rst-class:: ansible-option-title **igmp_snooping_querier_query_interval** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Interval in seconds between IGMP general query messages. Must be between 1 and 18000 seconds. Lower values provide faster detection of membership changes. Higher values reduce network overhead but slow detection. Should be coordinated with receiver timeout settings. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`125` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/igmp_snooping/igmp_snooping_querier_version: .. rst-class:: ansible-option-title **igmp_snooping_querier_version** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
IGMP version for query messages. \ :literal:`VERSION\_1`\ - Basic join/leave functionality. \ :literal:`VERSION\_2`\ - Adds leave group messages and group-specific queries. \ :literal:`VERSION\_3`\ - Adds source-specific multicast (SSM) support. Choose based on receiver capabilities and application requirements. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`"VERSION\_1"` - :ansible-option-choices-entry-default:`"VERSION\_2"` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`"VERSION\_3"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/igmp_snooping/igmp_snooping_vlans: .. rst-class:: ansible-option-title **igmp_snooping_vlans** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
List of per-VLAN IGMP Snooping configurations. Allows customization of IGMP Snooping parameters per VLAN. Each VLAN can have different querier settings and mrouter ports. Useful for optimizing multicast delivery per network segment. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/igmp_snooping/igmp_snooping_vlans/enable_igmp_snooping: .. rst-class:: ansible-option-title **enable_igmp_snooping** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable IGMP Snooping for this specific VLAN. When true, IGMP Snooping is active for this VLAN. When false, multicast traffic is flooded in this VLAN. Overrides the global IGMP Snooping setting for this VLAN. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/igmp_snooping/igmp_snooping_vlans/igmp_snooping_immediate_leave: .. rst-class:: ansible-option-title **igmp_snooping_immediate_leave** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable immediate leave processing for IGMP in this VLAN. When true, immediately removes port from multicast group upon leave message. When false, waits for query timeout before removing port from group. Use with caution in shared media environments where multiple devices may be on same port. Provides faster leave processing for point-to-point links and single device connections. Equivalent to "ip igmp snooping immediate-leave" command per VLAN. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/igmp_snooping/igmp_snooping_vlans/igmp_snooping_mrouter_port_list: .. rst-class:: ansible-option-title **igmp_snooping_mrouter_port_list** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=string` .. raw:: html
- .. raw:: html
List of interface names that connect to multicast routers. Interfaces in this list are treated as mrouter ports. Multicast traffic is always forwarded to these ports. Format interface type and number (Example, "GigabitEthernet1/0/1"). Essential for proper multicast routing integration. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/igmp_snooping/igmp_snooping_vlans/igmp_snooping_querier: .. rst-class:: ansible-option-title **igmp_snooping_querier** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable IGMP Querier for this specific VLAN. When true, this VLAN can have its own querier. When false, relies on external queriers for this VLAN. Useful when different VLANs have different querier requirements. If any VLAN in "igmp\_snooping\_vlans" has "igmp\_snooping\_querier" set to true, this must also be true. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/igmp_snooping/igmp_snooping_vlans/igmp_snooping_querier_address: .. rst-class:: ansible-option-title **igmp_snooping_querier_address** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Source IP address for IGMP queries in this VLAN. Must be a valid IPv4 or IPv6 address. Should be an address within the VLAN's subnet. Used for VLAN-specific querier identification. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/igmp_snooping/igmp_snooping_vlans/igmp_snooping_querier_query_interval: .. rst-class:: ansible-option-title **igmp_snooping_querier_query_interval** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Query interval for this specific VLAN in seconds. Must be between 1 and 18000 seconds. Can be optimized based on VLAN's multicast traffic patterns. Lower intervals for VLANs with dynamic memberships. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/igmp_snooping/igmp_snooping_vlans/igmp_snooping_querier_version: .. rst-class:: ansible-option-title **igmp_snooping_querier_version** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
IGMP version for this VLAN's query messages. \ :literal:`VERSION\_1`\ - Basic join/leave functionality. \ :literal:`VERSION\_2`\ - Adds leave group messages and group-specific queries. \ :literal:`VERSION\_3`\ - Adds source-specific multicast (SSM) support. Can be different from the global IGMP version. Choose based on VLAN-specific application requirements. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`"VERSION\_1"` - :ansible-option-choices-entry-default:`"VERSION\_2"` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`"VERSION\_3"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/igmp_snooping/igmp_snooping_vlans/igmp_snooping_vlan_id: .. rst-class:: ansible-option-title **igmp_snooping_vlan_id** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` / :ansible-option-required:`required` .. raw:: html
- .. raw:: html
VLAN ID for this IGMP Snooping configuration. Must be between 1 and 4094. VLAN must exist before configuring IGMP Snooping. Each VLAN can have independent IGMP Snooping settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/lldp: .. rst-class:: ansible-option-title **lldp** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Link Layer Discovery Protocol (LLDP) global configuration settings. LLDP is an IEEE 802.1AB standard protocol for discovering neighboring devices. Vendor-neutral alternative to CDP, supported by multiple vendors. Provides device identification, capabilities, and management information. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/lldp/lldp_admin_status: .. rst-class:: ansible-option-title **lldp_admin_status** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Globally enable or disable LLDP on the device. When true, LLDP is enabled globally (equivalent to "lldp run" command). When false, LLDP is disabled globally on all interfaces. Individual interfaces can still override this setting. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/lldp/lldp_hold_time: .. rst-class:: ansible-option-title **lldp_hold_time** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Time in seconds that receiving devices should hold LLDP information before discarding it. Must be between 0 and 32767 seconds. Should be set higher than the timer interval to prevent information loss. A value of 0 means the information should not be aged out. Equivalent to "lldp holdtime" command. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`120` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/lldp/lldp_reinitialization_delay: .. rst-class:: ansible-option-title **lldp_reinitialization_delay** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Delay in seconds for LLDP initialization on any interface. Must be between 2 and 5 seconds. Prevents rapid enable/disable cycles during interface initialization. Provides stability during interface state changes. Equivalent to "lldp reinit" command. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`2` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/lldp/lldp_timer: .. rst-class:: ansible-option-title **lldp_timer** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Frequency in seconds at which LLDP advertisements are sent. Must be between 5 and 32767 seconds. Lower values provide more current information but increase network overhead. Higher values reduce overhead but may delay topology discovery. Equivalent to "lldp timer" command. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`30` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/logical_ports: .. rst-class:: ansible-option-title **logical_ports** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Port channel (EtherChannel) configuration for link aggregation. Combines multiple physical links into a single logical interface. Provides increased bandwidth and redundancy for critical connections. Supports LACP, PAgP, and static (manual) aggregation methods. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/logical_ports/port_channel_auto: .. rst-class:: ansible-option-title **port_channel_auto** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable automatic port channel creation (Auto-LAG). When true, enables automatic detection and creation of port channels. When false, requires manual port channel configuration. Auto-LAG can simplify configuration but may not suit all environments. Equivalent to "port-channel auto" command. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/logical_ports/port_channel_lacp_system_priority: .. rst-class:: ansible-option-title **port_channel_lacp_system_priority** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
System priority for LACP protocol negotiation. Must be between 0 and 65535. Lower values have higher priority in LACP negotiations. Used to determine which switch controls the port channel. Should be consistent across switches for predictable behavior. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`32768` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/logical_ports/port_channel_load_balancing_method: .. rst-class:: ansible-option-title **port_channel_load_balancing_method** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Method for distributing traffic across port channel members. Based on MAC addresses - "SRC\_MAC", "DST\_MAC", "SRC\_DST\_MAC". Based on IP addresses - "SRC\_IP", "DST\_IP", "SRC\_DST\_IP". Based on TCP/UDP ports - "RC\_PORT", "DST\_PORT", "SRC\_DST\_PORT". VLAN-based load balancing methods - "VLAN\_SRC\_IP", "VLAN\_DST\_IP", "VLAN\_SRC\_DST\_IP", "VLAN\_SRC\_MIXED\_IP\_PORT", "VLAN\_DST\_MIXED\_IP\_PORT", "VLAN\_SRC\_DST\_MIXED\_IP\_PORT". VLAN-based load balancing methods for port channels are only supported on Cisco Catalyst 9600 Series Switches. Choose based on traffic patterns and load balancing requirements. Mixed options combine multiple criteria for better distribution. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`"SRC\_MAC"` - :ansible-option-choices-entry:`"DST\_MAC"` - :ansible-option-choices-entry:`"SRC\_DST\_MAC"` - :ansible-option-choices-entry:`"SRC\_IP"` - :ansible-option-choices-entry:`"DST\_IP"` - :ansible-option-choices-entry-default:`"SRC\_DST\_IP"` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`"SRC\_PORT"` - :ansible-option-choices-entry:`"DST\_PORT"` - :ansible-option-choices-entry:`"SRC\_DST\_PORT"` - :ansible-option-choices-entry:`"SRC\_DST\_MIXED\_IP\_PORT"` - :ansible-option-choices-entry:`"SRC\_MIXED\_IP\_PORT"` - :ansible-option-choices-entry:`"DST\_MIXED\_IP\_PORT"` - :ansible-option-choices-entry:`"VLAN\_SRC\_IP"` - :ansible-option-choices-entry:`"VLAN\_DST\_IP"` - :ansible-option-choices-entry:`"VLAN\_SRC\_DST\_IP"` - :ansible-option-choices-entry:`"VLAN\_SRC\_MIXED\_IP\_PORT"` - :ansible-option-choices-entry:`"VLAN\_DST\_MIXED\_IP\_PORT"` - :ansible-option-choices-entry:`"VLAN\_SRC\_DST\_MIXED\_IP\_PORT"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/logical_ports/port_channels: .. rst-class:: ansible-option-title **port_channels** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
List of port channel configurations to create. Each port channel aggregates multiple physical interfaces. Supports different protocols (LACP, PAgP, static). Each port channel has unique members and configuration. Port channels can only be configured when "port\_channel\_auto" is false. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/logical_ports/port_channels/port_channel_members: .. rst-class:: ansible-option-title **port_channel_members** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` / :ansible-option-required:`required` .. raw:: html
- .. raw:: html
List of physical interfaces that belong to this port channel. All member interfaces must have compatible configuration. Includes interface names and protocol-specific parameters. Member configuration varies based on the chosen protocol. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/logical_ports/port_channels/port_channel_members/port_channel_interface_name: .. rst-class:: ansible-option-title **port_channel_interface_name** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` / :ansible-option-required:`required` .. raw:: html
- .. raw:: html
Name of the physical interface to add to the port channel. Must be a valid interface on the switch. Format interface type and number (Example, "GigabitEthernet1/0/1"). Interface must not be a member of another port channel. Interface configuration must be compatible with other members. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/logical_ports/port_channels/port_channel_members/port_channel_learn_method: .. rst-class:: ansible-option-title **port_channel_learn_method** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Learning method for PAgP protocol (PAgP only). \ :literal:`AGGREGATION\_PORT`\ - Learn on the port channel interface. \ :literal:`PHYSICAL\_PORT`\ - Learn on individual physical interfaces. Affects MAC address learning and forwarding behavior. Only applicable when using PAgP protocol. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`"AGGREGATION\_PORT"` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`"PHYSICAL\_PORT"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/logical_ports/port_channels/port_channel_members/port_channel_mode: .. rst-class:: ansible-option-title **port_channel_mode** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Port channel mode for this member interface. For "LACP" protocol \ :literal:`ACTIVE`\ - (initiates negotiation) \ :literal:`PASSIVE`\ - (responds only) For "PAgP" protocol \ :literal:`AUTO`\ - (responds only) \ :literal:`AUTO\_NON\_SILENT - (responds only, with more frequent messages`\ \ :literal:`DESIRABLE`\ - (initiates negotiation) \ :literal:`DESIRABLE\_NON\_SILENT`\ - (initiates negotiation, with more frequent messages) For "NONE" protocol \ :literal:`ON`\ - (static aggregation without negotiation) Choose based on desired negotiation behavior and protocol. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`"ACTIVE"` - :ansible-option-choices-entry:`"PASSIVE"` - :ansible-option-choices-entry:`"AUTO"` - :ansible-option-choices-entry:`"AUTO\_NON\_SILENT"` - :ansible-option-choices-entry:`"DESIRABLE"` - :ansible-option-choices-entry:`"DESIRABLE\_NON\_SILENT"` - :ansible-option-choices-entry:`"ON"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/logical_ports/port_channels/port_channel_members/port_channel_port_priority: .. rst-class:: ansible-option-title **port_channel_port_priority** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Priority for this interface in port channel selection. For "LACP" protocol - 0-65535 (lower values have higher priority). For "PAgP" protocol - 0-255 (lower values have higher priority). Used when more interfaces are available than can be active. Helps determine which interfaces carry traffic in standby scenarios. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/logical_ports/port_channels/port_channel_members/port_channel_rate: .. rst-class:: ansible-option-title **port_channel_rate** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
LACP packet transmission rate (LACP protocol only). \ :literal:`1`\ - Fast rate (1 second intervals). \ :literal:`30`\ - Normal rate (30 second intervals). Fast rate provides quicker failure detection but increases overhead. Only applicable when using LACP protocol. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`1` - :ansible-option-choices-entry-default:`30` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/logical_ports/port_channels/port_channel_min_links: .. rst-class:: ansible-option-title **port_channel_min_links** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Minimum number of active links required for port channel to be operational. Must be between 2 and 8. Port channel goes down if active links fall below this threshold. Provides guaranteed bandwidth and redundancy requirements. Should be set based on application bandwidth and availability needs. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`1` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/logical_ports/port_channels/port_channel_name: .. rst-class:: ansible-option-title **port_channel_name** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` / :ansible-option-required:`required` .. raw:: html
- .. raw:: html
Name identifier for the port channel interface. Must be between 13 and 15 characters. Format typically follows "Port-channelX" where X is the number. Must be unique within the switch configuration. Used in interface configuration and monitoring. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/logical_ports/port_channels/port_channel_protocol: .. rst-class:: ansible-option-title **port_channel_protocol** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` / :ansible-option-required:`required` .. raw:: html
- .. raw:: html
Protocol to use for this port channel. \ :literal:`LACP`\ - IEEE 802.3ad standard, recommended for most environments. \ :literal:`PAGP`\ - Cisco proprietary protocol, for Cisco-only environments. \ :literal:`NONE`\ - Static port channel without negotiation protocol. LACP provides better standards compliance and interoperability. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`"LACP"` - :ansible-option-choices-entry:`"PAGP"` - :ansible-option-choices-entry:`"NONE"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/mld_snooping: .. rst-class:: ansible-option-title **mld_snooping** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Multicast Listener Discovery (MLD) Snooping configuration for IPv6. IPv6 equivalent of IGMP Snooping for optimizing IPv6 multicast traffic. Prevents unnecessary IPv6 multicast flooding in Layer 2 networks. Essential for efficient IPv6 multicast application delivery. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/mld_snooping/enable_mld_snooping: .. rst-class:: ansible-option-title **enable_mld_snooping** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Globally enable or disable MLD Snooping. When true, enables MLD Snooping globally on the switch. When false, disables MLD Snooping and floods all IPv6 multicast traffic. Disabled by default on most switches. Equivalent to "ipv6 mld snooping" command. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/mld_snooping/mld_snooping_listener: .. rst-class:: ansible-option-title **mld_snooping_listener** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable listener message suppression for MLD. When true, suppresses duplicate listener reports to reduce overhead. When false, forwards all listener reports to queriers. Helps optimize bandwidth usage in dense IPv6 multicast environments. Equivalent to "ipv6 mld snooping listener-message-suppression" command. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/mld_snooping/mld_snooping_querier: .. rst-class:: ansible-option-title **mld_snooping_querier** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable MLD Querier functionality globally. When true, the switch can act as an MLD querier. When false, relies on external queriers (IPv6 routers). Required when no IPv6 multicast router is present in the VLAN. Equivalent to "ipv6 mld snooping querier" command. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/mld_snooping/mld_snooping_querier_address: .. rst-class:: ansible-option-title **mld_snooping_querier_address** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Source IPv6 address for MLD query messages. Querier Address must be a valid IPv6 Link-Local address. Used when the switch acts as an MLD querier. Should be an address reachable by all IPv6 multicast listeners. Helps identify the querier in network troubleshooting. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/mld_snooping/mld_snooping_querier_query_interval: .. rst-class:: ansible-option-title **mld_snooping_querier_query_interval** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Interval in seconds between MLD general query messages. Must be between 1 and 18000 seconds. Lower values provide faster detection of IPv6 membership changes. Higher values reduce network overhead but slow detection. Should be coordinated with IPv6 receiver timeout settings. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`125` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/mld_snooping/mld_snooping_querier_version: .. rst-class:: ansible-option-title **mld_snooping_querier_version** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
MLD version for query messages. \ :literal:`VERSION\_1`\ - Basic IPv6 multicast listener functionality. \ :literal:`VERSION\_2`\ - Adds source-specific multicast and enhanced features. Choose based on IPv6 application requirements and receiver capabilities. VERSION\_2" is recommended for modern IPv6 networks. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`"VERSION\_1"` - :ansible-option-choices-entry-default:`"VERSION\_2"` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/mld_snooping/mld_snooping_vlans: .. rst-class:: ansible-option-title **mld_snooping_vlans** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
List of per-VLAN MLD Snooping configurations. Allows customization of MLD Snooping parameters per VLAN. Each VLAN can have different querier settings and mrouter ports. Useful for optimizing IPv6 multicast delivery per network segment. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/mld_snooping/mld_snooping_vlans/enable_mld_snooping: .. rst-class:: ansible-option-title **enable_mld_snooping** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable MLD Snooping for this specific VLAN. When true, MLD Snooping is active for this VLAN. When false, IPv6 multicast traffic is flooded in this VLAN. Overrides the global MLD Snooping setting for this VLAN. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/mld_snooping/mld_snooping_vlans/mld_snooping_enable_immediate_leave: .. rst-class:: ansible-option-title **mld_snooping_enable_immediate_leave** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable immediate leave processing for MLDv1 in this VLAN. When true, immediately removes port from multicast group upon leave. When false, waits for query timeout before removing port. Use with caution in shared media environments. Provides faster leave processing for point-to-point links. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/mld_snooping/mld_snooping_vlans/mld_snooping_mrouter_port_list: .. rst-class:: ansible-option-title **mld_snooping_mrouter_port_list** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=string` .. raw:: html
- .. raw:: html
List of interface names that connect to IPv6 multicast routers. Interfaces in this list are treated as IPv6 mrouter ports. IPv6 multicast traffic is always forwarded to these ports. Format interface type and number (Example, "GigabitEthernet1/0/1"). Essential for proper IPv6 multicast routing integration. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/mld_snooping/mld_snooping_vlans/mld_snooping_querier: .. rst-class:: ansible-option-title **mld_snooping_querier** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable MLD Querier for this specific VLAN. When true, this VLAN can have its own MLD querier. When false, relies on external queriers for this VLAN. Useful when different VLANs have different querier requirements. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/mld_snooping/mld_snooping_vlans/mld_snooping_querier_address: .. rst-class:: ansible-option-title **mld_snooping_querier_address** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Source IPv6 address for MLD queries in this VLAN. Must be a valid IPv6 address format. Should be an address within the VLAN's IPv6 prefix. Used for VLAN-specific querier identification. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/mld_snooping/mld_snooping_vlans/mld_snooping_querier_query_interval: .. rst-class:: ansible-option-title **mld_snooping_querier_query_interval** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Query interval for this specific VLAN in seconds. Must be between 1 and 18000 seconds. Can be optimized based on VLAN's IPv6 multicast traffic patterns. Lower intervals for VLANs with dynamic IPv6 memberships. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/mld_snooping/mld_snooping_vlans/mld_snooping_querier_version: .. rst-class:: ansible-option-title **mld_snooping_querier_version** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
MLD version for this VLAN's query messages. \ :literal:`VERSION\_1`\ - Basic IPv6 multicast listener functionality. \ :literal:`VERSION\_2`\ - Adds source-specific multicast and enhanced features. Can be different from the global MLD version. Choose based on VLAN-specific IPv6 application requirements. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`"VERSION\_1"` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`"VERSION\_2"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/mld_snooping/mld_snooping_vlans/mld_snooping_vlan_id: .. rst-class:: ansible-option-title **mld_snooping_vlan_id** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` / :ansible-option-required:`required` .. raw:: html
- .. raw:: html
VLAN ID for this MLD Snooping configuration. Must be between 1 and 4094. VLAN must exist before configuring MLD Snooping. Each VLAN can have independent MLD Snooping settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration: .. rst-class:: ansible-option-title **port_configuration** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
Individual interface configuration settings for all port types. Allows per-interface customization of Layer 2 features. Each interface can have unique switchport, security, and protocol settings. Essential for fine-grained network access control and optimization. NOTE - configure switchport\_interface\_config FIRST before other interface features .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/cdp_interface_config: .. rst-class:: ansible-option-title **cdp_interface_config** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Cisco Discovery Protocol (CDP) interface configuration for this specific interface. Controls CDP operation on individual interfaces independent of global settings. Allows per-interface customization of CDP behavior and logging. Useful for selectively enabling/disabling CDP on specific ports. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/cdp_interface_config/cdp_interface_admin_status: .. rst-class:: ansible-option-title **cdp_interface_admin_status** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable or disable CDP on this specific interface. When true, CDP is enabled on this interface (sends and receives CDP packets). When false, CDP is disabled on this interface. Overrides the global CDP setting for this specific interface. Recommended to disable on interfaces connecting to untrusted devices. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/cdp_interface_config/cdp_interface_log_duplex_mismatch: .. rst-class:: ansible-option-title **cdp_interface_log_duplex_mismatch** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable logging of duplex mismatches detected by CDP on this interface. When true, logs warnings when CDP detects duplex mismatches with the neighbor. When false, duplex mismatch detection logging is disabled for this interface. Useful for troubleshooting connectivity issues and performance problems. Helps identify configuration inconsistencies between connected devices. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/dhcp_snooping_interface_config: .. rst-class:: ansible-option-title **dhcp_snooping_interface_config** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
DHCP Snooping interface configuration for this specific interface. Controls DHCP security features and trust settings per interface. Provides granular control over DHCP packet processing on individual ports. Essential for securing DHCP operations against rogue servers and attacks. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/dhcp_snooping_interface_config/dhcp_snooping_interface_rate: .. rst-class:: ansible-option-title **dhcp_snooping_interface_rate** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Maximum rate of DHCP packets per second allowed on this interface. Must be between 1 and 2048 packets per second. Helps prevent DHCP flooding attacks by rate-limiting DHCP traffic. Higher rates may be needed for interfaces connecting to DHCP servers. Lower rates are typically sufficient for client access ports. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`100` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/dhcp_snooping_interface_config/dhcp_snooping_interface_trust: .. rst-class:: ansible-option-title **dhcp_snooping_interface_trust** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Configure this interface as trusted for DHCP operations. When true, interface is trusted and DHCP packets are forwarded without inspection. When false, interface is untrusted and DHCP packets are inspected and filtered. Trusted interfaces typically connect to legitimate DHCP servers or uplinks. Untrusted interfaces typically connect to end devices that should not offer DHCP. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/dot1x_interface_config: .. rst-class:: ansible-option-title **dot1x_interface_config** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
802.1X authentication configuration for the interface. Configures authentication settings, timers, and behavior for network access control. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/dot1x_interface_config/dot1x_interface_authentication_mode: .. rst-class:: ansible-option-title **dot1x_interface_authentication_mode** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Sets the 802.1X authentication mode for the interface. \ :literal:`AUTO`\ - Interface can authenticate both 802.1X and non-802.1X devices. \ :literal:`FORCE\_AUTHORIZED`\ - Interface only allows authenticated devices. \ :literal:`FORCE\_UNAUTHORIZED`\ - Interface only allows unauthenticated devices. Determines how the interface handles authentication requests. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`"AUTO"` - :ansible-option-choices-entry:`"FORCE\_AUTHORIZED"` - :ansible-option-choices-entry:`"FORCE\_UNAUTHORIZED"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/dot1x_interface_config/dot1x_interface_authentication_order: .. rst-class:: ansible-option-title **dot1x_interface_authentication_order** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=string` .. raw:: html
- .. raw:: html
Authentication method order for the interface. \ :literal:`DOT1X`\ - 802.1X authentication method. \ :literal:`MAB`\ - MAC Authentication Bypass method. \ :literal:`WEBAUTH`\ - Web-based authentication method. Defines the sequence in which authentication methods are tried. Methods are attempted in the order specified in the list. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`"DOT1X"` - :ansible-option-choices-entry:`"MAB"` - :ansible-option-choices-entry:`"WEBAUTH"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/dot1x_interface_config/dot1x_interface_control_direction: .. rst-class:: ansible-option-title **dot1x_interface_control_direction** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Control direction for 802.1X authentication on the interface. When set to \ :literal:`BOTH`\ , controls both inbound and outbound traffic. When set to \ :literal:`IN`\ , only controls inbound traffic. Specifies which traffic direction is controlled by authentication. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`"BOTH"` - :ansible-option-choices-entry:`"IN"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/dot1x_interface_config/dot1x_interface_enable_inactivity_timer_from_server: .. rst-class:: ansible-option-title **dot1x_interface_enable_inactivity_timer_from_server** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable receiving inactivity timer value from RADIUS server. When enabled, uses server-provided inactivity timeout values. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/dot1x_interface_config/dot1x_interface_enable_reauth: .. rst-class:: ansible-option-title **dot1x_interface_enable_reauth** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable periodic re-authentication for 802.1X on the interface. When enabled, authenticated clients are re-authenticated periodically. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/dot1x_interface_config/dot1x_interface_enable_reauth_timer_from_server: .. rst-class:: ansible-option-title **dot1x_interface_enable_reauth_timer_from_server** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable receiving re-authentication timer value from RADIUS server. When enabled, uses server-provided re-authentication timeout values. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/dot1x_interface_config/dot1x_interface_host_mode: .. rst-class:: ansible-option-title **dot1x_interface_host_mode** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Host mode for 802.1X authentication on the interface. \ :literal:`SINGLE\_HOST`\ - Only one host can authenticate on the port. \ :literal:`MULTI\_HOST`\ - Multiple hosts can authenticate, but only one at a time. \ :literal:`MULTI\_AUTH`\ - Multiple hosts can authenticate simultaneously. \ :literal:`MULTI\_DOMAIN`\ - Multiple hosts from different domains can authenticate. Determines how many hosts can authenticate on a single port. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`"SINGLE\_HOST"` - :ansible-option-choices-entry:`"MULTI\_HOST"` - :ansible-option-choices-entry:`"MULTI\_AUTH"` - :ansible-option-choices-entry:`"MULTI\_DOMAIN"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/dot1x_interface_config/dot1x_interface_inactivity_timer: .. rst-class:: ansible-option-title **dot1x_interface_inactivity_timer** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Inactivity timer value in seconds for 802.1X authentication. Time after which an inactive authenticated session is terminated. Valid range is 1-65535 seconds. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/dot1x_interface_config/dot1x_interface_max_reauth_requests: .. rst-class:: ansible-option-title **dot1x_interface_max_reauth_requests** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Maximum number of re-authentication requests sent to a client. After this limit, the client is considered unreachable. Valid range is 1-10 requests. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/dot1x_interface_config/dot1x_interface_pae_type: .. rst-class:: ansible-option-title **dot1x_interface_pae_type** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Port Access Entity (PAE) type for 802.1X authentication. \ :literal:`AUTHENTICATOR`\ - Interface acts as an authenticator (common for switches). \ :literal:`SUPPLICANT`\ - Interface acts as a supplicant (common for client devices). \ :literal:`BOTH`\ - Interface can act as both authenticator and supplicant. Defines the role of the interface in the authentication process. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`"AUTHENTICATOR"` - :ansible-option-choices-entry:`"SUPPLICANT"` - :ansible-option-choices-entry:`"BOTH"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/dot1x_interface_config/dot1x_interface_port_control: .. rst-class:: ansible-option-title **dot1x_interface_port_control** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Port control mode for 802.1X authentication. \ :literal:`AUTO`\ - Port automatically authorizes or unauthorizes based on authentication state. \ :literal:`FORCE\_AUTHORIZED`\ - Port is always authorized regardless of authentication state. \ :literal:`FORCE\_UNAUTHORIZED`\ - Port is always unauthorized regardless of authentication state. Determines the initial authorization state of the port. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`"AUTO"` - :ansible-option-choices-entry:`"FORCE\_AUTHORIZED"` - :ansible-option-choices-entry:`"FORCE\_UNAUTHORIZED"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/dot1x_interface_config/dot1x_interface_priority: .. rst-class:: ansible-option-title **dot1x_interface_priority** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=string` .. raw:: html
- .. raw:: html
Authentication priority list for the interface. Defines priority order for authentication methods when multiple are configured. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/dot1x_interface_config/dot1x_interface_reauth_timer: .. rst-class:: ansible-option-title **dot1x_interface_reauth_timer** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Re-authentication timer value in seconds for 802.1X authentication. Time interval between periodic re-authentication attempts. Valid range is 1-65535 seconds. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/dot1x_interface_config/dot1x_interface_tx_period: .. rst-class:: ansible-option-title **dot1x_interface_tx_period** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Transmission period for EAP Request/Identity frames. Time interval between successive EAP Request/Identity transmissions. Valid range is 1-65535 seconds. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/interface_name: .. rst-class:: ansible-option-title **interface_name** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` / :ansible-option-required:`required` .. raw:: html
- .. raw:: html
Name of the interface to configure. Must be a valid interface identifier on the target switch. Format interface type and number (Example, "GigabitEthernet1/0/1"). Interface must exist on the device and be configurable. Used as the key to identify which interface to configure. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/lldp_interface_config: .. rst-class:: ansible-option-title **lldp_interface_config** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Link Layer Discovery Protocol (LLDP) interface configuration for this specific interface. Controls LLDP packet transmission and reception behavior per interface. Provides granular control over LLDP operation on individual ports. Allows optimization of LLDP behavior based on interface usage. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/lldp_interface_config/lldp_interface_receive_transmit: .. rst-class:: ansible-option-title **lldp_interface_receive_transmit** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Configure LLDP transmission and reception behavior for this interface. \ :literal:`TRANSMIT\_ONLY`\ - Only send LLDP packets, do not process received packets. \ :literal:`RECEIVE\_ONLY`\ - Only receive and process LLDP packets, do not transmit. \ :literal:`TRANSMIT\_AND\_RECEIVE`\ - Both send and receive LLDP packets (default behavior). \ :literal:`DISABLED`\ - Completely disable LLDP on this interface. Choose based on security requirements and interface role in the network. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`"TRANSMIT\_ONLY"` - :ansible-option-choices-entry:`"RECEIVE\_ONLY"` - :ansible-option-choices-entry-default:`"TRANSMIT\_AND\_RECEIVE"` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`"DISABLED"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/mab_interface_config: .. rst-class:: ansible-option-title **mab_interface_config** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
MAC Authentication Bypass (MAB) configuration for this interface. Provides authentication for devices that don't support 802.1X. Uses device MAC address as the authentication credential. Common for printers, cameras, and legacy devices. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/mab_interface_config/enable_mab: .. rst-class:: ansible-option-title **enable_mab** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable MAC Authentication Bypass on this interface. When true, allows authentication using device MAC address. When false, disables MAB authentication method. Useful for devices that cannot perform 802.1X authentication. Often used in combination with 802.1X authentication. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/stp_interface_config: .. rst-class:: ansible-option-title **stp_interface_config** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Spanning Tree Protocol configuration for this specific interface. Controls STP behavior, timers, and protection features per port. Allows fine-tuning of STP operation for different interface types. Essential for optimizing convergence and preventing loops. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/stp_interface_config/stp_interface_bpdu_filter: .. rst-class:: ansible-option-title **stp_interface_bpdu_filter** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
BPDU Filter configuration for this interface. When true, prevents sending and receiving BPDUs on PortFast ports. When false, allows normal BPDU processing. Use with caution as it can create loops if misconfigured. Typically used on ports connected to end devices. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/stp_interface_config/stp_interface_bpdu_guard: .. rst-class:: ansible-option-title **stp_interface_bpdu_guard** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
BPDU Guard configuration for this interface. When true, shuts down PortFast ports that receive BPDUs. When false, disables BPDU Guard protection. Protects against accidental switch connections to access ports. Essential security feature for edge port protection. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/stp_interface_config/stp_interface_cost: .. rst-class:: ansible-option-title **stp_interface_cost** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Path cost for this interface in STP calculations. Must be between 1 and 20000000. Lower costs are preferred paths in STP topology. Allows manual control of STP path selection. Should reflect actual link bandwidth and desired traffic flow. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/stp_interface_config/stp_interface_guard: .. rst-class:: ansible-option-title **stp_interface_guard** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Guard mode configuration for this interface \ :literal:`LOOP`\ - Enable Loop Guard to prevent loops from unidirectional failures. \ :literal:`ROOT`\ - Enable Root Guard to prevent inferior BPDUs. \ :literal:`NONE`\ - Disable guard features on this interface. Choose based on interface role and protection requirements. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`"LOOP"` - :ansible-option-choices-entry:`"ROOT"` - :ansible-option-choices-entry:`"NONE"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/stp_interface_config/stp_interface_per_vlan_cost: .. rst-class:: ansible-option-title **stp_interface_per_vlan_cost** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Per-VLAN cost configuration for this interface. Allows different costs for different VLANs on the same interface. Enables per-VLAN load balancing in PVST plus environments. Useful for optimizing traffic flow across VLANs. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/stp_interface_config/stp_interface_per_vlan_cost/priority: .. rst-class:: ansible-option-title **priority** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Cost value to apply to the specified VLANs. Must be between 1 and 20000000. Lower costs make this path preferred for the specified VLANs. Should be coordinated with overall STP design. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/stp_interface_config/stp_interface_per_vlan_cost/vlan_ids: .. rst-class:: ansible-option-title **vlan_ids** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=integer` .. raw:: html
- .. raw:: html
List of VLAN IDs to apply this cost setting to. Each VLAN ID must be between 1 and 4094. Allows grouping VLANs with the same cost requirements. VLANs must exist before applying cost settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/stp_interface_config/stp_interface_per_vlan_priority: .. rst-class:: ansible-option-title **stp_interface_per_vlan_priority** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Per-VLAN priority configuration for this interface. Allows different priorities for different VLANs on the same interface. Enables per-VLAN load balancing and traffic engineering. Useful for optimizing port selection across VLANs. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/stp_interface_config/stp_interface_per_vlan_priority/priority: .. rst-class:: ansible-option-title **priority** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Priority value to apply to the specified VLANs. Must be between 0 and 240 in increments of 16. Lower values have higher priority for forwarding state. Should be coordinated with overall STP design. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/stp_interface_config/stp_interface_per_vlan_priority/vlan_ids: .. rst-class:: ansible-option-title **vlan_ids** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=integer` .. raw:: html
- .. raw:: html
List of VLAN IDs to apply this priority setting to. Each VLAN ID must be between 1 and 4094. Allows grouping VLANs with the same priority requirements. VLANs must exist before applying priority settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/stp_interface_config/stp_interface_portfast_mode: .. rst-class:: ansible-option-title **stp_interface_portfast_mode** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
PortFast mode configuration for this interface. \ :literal:`NONE`\ - No PortFast configuration (uses global setting). \ :literal:`DISABLE`\ - Explicitly disable PortFast on this interface. \ :literal:`EDGE`\ - Enable PortFast for edge ports (end device connections). \ :literal:`EDGE\_TRUNK`\ - Enable PortFast on trunk ports to edge devices. \ :literal:`NETWORK`\ - Configure as network port (inter-switch links). \ :literal:`TRUNK`\ - Enable PortFast on all trunk ports. Advanced portfast modes (EDGE\_TRUNK, NETWORK, TRUNK) are only supported on Catalyst 9600 Series switches and specific Catalyst 9500 Series models (C9500-32C, C9500-32QC, C9500-48Y4C, C9500-24Y4C, C9500X-28C8D). .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`"NONE"` - :ansible-option-choices-entry:`"DISABLE"` - :ansible-option-choices-entry:`"EDGE"` - :ansible-option-choices-entry:`"EDGE\_TRUNK"` - :ansible-option-choices-entry:`"NETWORK"` - :ansible-option-choices-entry:`"TRUNK"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/stp_interface_config/stp_interface_priority: .. rst-class:: ansible-option-title **stp_interface_priority** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Port priority for this interface in STP tie-breaking. Must be between 0 and 240 in increments of 16. Lower values have higher priority for forwarding state. Used when multiple ports have equal cost to root bridge. Helps control which ports forward traffic in redundant topologies. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`128` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/switchport_interface_config: .. rst-class:: ansible-option-title **switchport_interface_config** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Basic switchport configuration for Layer 2 operation. Defines interface mode, VLAN assignments, and administrative settings. Essential for connecting end devices and configuring trunk links. Forms the foundation of Layer 2 connectivity. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/switchport_interface_config/access_vlan: .. rst-class:: ansible-option-title **access_vlan** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
VLAN ID for untagged traffic when interface is in access mode. Must be between 1 and 4094. Only applicable when switchport\_mode is "ACCESS". VLAN must exist before assigning to interface. Defines which VLAN untagged traffic will be placed in. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`1` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/switchport_interface_config/admin_status: .. rst-class:: ansible-option-title **admin_status** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Administrative status of the interface. When true, interface is administratively enabled (no shutdown). When false, interface is administratively disabled (shutdown). Disabled interfaces do not pass traffic but retain configuration. Used for maintenance and security purposes. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/switchport_interface_config/allowed_vlans: .. rst-class:: ansible-option-title **allowed_vlans** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=integer` .. raw:: html
- .. raw:: html
List of VLAN IDs allowed on trunk interfaces. Each VLAN ID must be between 1 and 4094. Only applicable when switchport\_mode is TRUNK. Controls which VLANs can traverse the trunk link. Helps optimize bandwidth and enhance security. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/switchport_interface_config/native_vlan_id: .. rst-class:: ansible-option-title **native_vlan_id** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Native VLAN ID for trunk interfaces (untagged traffic). Must be between 1 and 4094. Only applicable when switchport\_mode is TRUNK. Defines which VLAN untagged traffic belongs to on trunk. Should be changed from default (VLAN 1) for security. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`1` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/switchport_interface_config/switchport_description: .. rst-class:: ansible-option-title **switchport_description** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Descriptive text for interface documentation and identification. Maximum 230 characters of descriptive text. Should follow organizational naming conventions. Useful for documentation, monitoring, and troubleshooting. Cannot include non-ASCII characters. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/switchport_interface_config/switchport_mode: .. rst-class:: ansible-option-title **switchport_mode** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Switchport operational mode. \ :literal:`ACCESS`\ - Interface carries traffic for a single VLAN. \ :literal:`TRUNK`\ - Interface carries traffic for multiple VLANs. \ :literal:`DYNAMIC\_AUTO`\ - Negotiates mode with neighbor (becomes trunk if neighbor is trunk/desirable). \ :literal:`DYNAMIC\_DESIRABLE`\ - Actively negotiates to become trunk. \ :literal:`DOT1Q\_TUNNEL`\ - Interface acts as a tunnel port for service provider networks. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`"ACCESS"` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`"TRUNK"` - :ansible-option-choices-entry:`"DYNAMIC\_AUTO"` - :ansible-option-choices-entry:`"DYNAMIC\_DESIRABLE"` - :ansible-option-choices-entry:`"DOT1Q\_TUNNEL"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/switchport_interface_config/voice_vlan: .. rst-class:: ansible-option-title **voice_vlan** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
VLAN ID for IP phone traffic on access ports. Must be between 1 and 4094. Allows IP phones to use a separate VLAN for voice traffic. Enables QoS prioritization and security separation for voice. Only applicable on access ports with connected IP phones. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/vlan_trunking_interface_config: .. rst-class:: ansible-option-title **vlan_trunking_interface_config** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
VLAN trunking specific configuration for trunk interfaces. Controls DTP negotiation, protection, and VLAN pruning. Optimizes trunk operation and enhances security. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/vlan_trunking_interface_config/enable_dtp_negotiation: .. rst-class:: ansible-option-title **enable_dtp_negotiation** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Dynamic Trunking Protocol (DTP) negotiation setting. Controls whether the interface participates in DTP negotiation. When enabled, interface can negotiate trunking with neighbor. When disabled, prevents DTP packet transmission (recommended for security). Disable DTP when connecting to non-Cisco devices or for security. DTP negotiation control REQUIRES "switchport\_mode" to be "TRUNK" (not "DYNAMIC") .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/vlan_trunking_interface_config/protected: .. rst-class:: ansible-option-title **protected** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable protected port functionality. When true, prevents traffic between protected ports at Layer 2. Traffic between protected ports must traverse a Layer 3 device. Useful for isolating ports within the same VLAN. Enhances security in shared network environments. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/vlan_trunking_interface_config/pruning_vlan_ids: .. rst-class:: ansible-option-title **pruning_vlan_ids** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=integer` .. raw:: html
- .. raw:: html
List of VLAN IDs eligible for VTP pruning on this trunk. Each VLAN ID must be between 1 and 4094. Controls which VLANs can be pruned from this trunk. Helps optimize bandwidth by removing unnecessary VLAN traffic. Works in conjunction with global VTP pruning settings. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/vtp_interface_config: .. rst-class:: ansible-option-title **vtp_interface_config** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
VLAN Trunking Protocol (VTP) interface configuration for this specific interface. Controls VTP advertisement processing on individual interfaces. Allows per-interface control of VTP participation. Useful for securing VTP domains and preventing unauthorized updates. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/port_configuration/vtp_interface_config/vtp_interface_admin_status: .. rst-class:: ansible-option-title **vtp_interface_admin_status** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable or disable VTP on this specific interface. When true, VTP advertisements are processed on this interface. When false, VTP advertisements are blocked on this interface. Helps prevent VTP updates from untrusted sources. Recommended to disable on interfaces connecting to untrusted switches. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp: .. rst-class:: ansible-option-title **stp** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
Spanning Tree Protocol (STP) global and per-VLAN configuration settings. STP prevents loops in redundant network topologies while providing path redundancy. Supports PVST+, RSTP, and MST modes for different network requirements. Critical for network stability in environments with redundant paths. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp/stp_backbonefast: .. rst-class:: ansible-option-title **stp_backbonefast** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable BackboneFast for faster convergence on indirect link failures. When true, enables BackboneFast to detect indirect failures quickly. Reduces convergence time from 50 seconds to 30 seconds for indirect failures. Works in conjunction with UplinkFast for optimal convergence. Equivalent to "spanning-tree backbonefast" command. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp/stp_bpdu_filter: .. rst-class:: ansible-option-title **stp_bpdu_filter** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Global BPDU Filter configuration for PortFast-enabled ports. When true, prevents sending and receiving BPDUs on PortFast ports. Should be used with caution as it can create loops if misconfigured. Typically used in environments where STP is not needed on edge ports. Equivalent to "spanning-tree portfast bpdufilter default" command. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp/stp_bpdu_guard: .. rst-class:: ansible-option-title **stp_bpdu_guard** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Global BPDU Guard configuration for PortFast-enabled ports. When true, shuts down PortFast ports that receive BPDUs. Protects against accidental switch connections to access ports. Essential security feature for edge port protection. Equivalent to "spanning-tree portfast bpduguard default" command. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp/stp_etherchannel_guard: .. rst-class:: ansible-option-title **stp_etherchannel_guard** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable EtherChannel Guard to detect EtherChannel misconfigurations. When true, detects when one side has EtherChannel configured but the other doesn't. Prevents loops and inconsistencies in EtherChannel configurations. Essential for maintaining EtherChannel integrity. Equivalent to "spanning-tree etherchannel guard misconfig" command. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp/stp_extended_system_id: .. rst-class:: ansible-option-title **stp_extended_system_id** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable extended system ID for bridge priority calculation. When true, uses VLAN ID as part of bridge ID calculation. Required for PVST plus operation with more than 64 VLANs. Changes bridge priority calculation to include VLAN ID. Equivalent to "spanning-tree extend system-id" command. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp/stp_instances: .. rst-class:: ansible-option-title **stp_instances** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
List of per-VLAN STP instance configurations. Allows customization of STP parameters for specific VLANs. Each instance can have different priorities and timers. Useful for load balancing and fine-tuning STP behavior. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp/stp_instances/enable_stp: .. rst-class:: ansible-option-title **enable_stp** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable or disable STP for this specific VLAN. When true, STP is active for this VLAN. When false, STP is disabled for this VLAN (use with caution). Disabling STP can create loops if redundant paths exist. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp/stp_instances/stp_instace_forward_delay_timer: .. rst-class:: ansible-option-title **stp_instace_forward_delay_timer** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Forward delay timer for this STP instance in seconds. Must be between 4 and 30 seconds. Time spent in listening and learning states during convergence. Should be coordinated with max age and hello interval. Affects convergence time, shorter delays mean faster convergence. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`15` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp/stp_instances/stp_instace_hello_interval_timer: .. rst-class:: ansible-option-title **stp_instace_hello_interval_timer** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Hello interval timer for this STP instance in seconds. Must be between 1 and 10 seconds. Frequency of BPDU transmission by the root bridge. Lower values provide faster detection but increase overhead. Should be coordinated with max age and forward delay. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`2` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp/stp_instances/stp_instance_max_age_timer: .. rst-class:: ansible-option-title **stp_instance_max_age_timer** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Maximum age timer for this STP instance in seconds. Must be between 6 and 40 seconds. Time to wait for BPDUs before aging out port information. Should be coordinated with hello interval and forward delay. Affects convergence time and stability. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`20` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp/stp_instances/stp_instance_priority: .. rst-class:: ansible-option-title **stp_instance_priority** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Bridge priority for this VLAN's STP instance. Must be between 0 and 61440 in increments of 4096. Lower values have higher priority (more likely to be root). Default is 32768. Common values 4096, 8192, 16384, 24576. Used for load balancing across multiple VLANs. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`32768` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp/stp_instances/stp_instance_vlan_id: .. rst-class:: ansible-option-title **stp_instance_vlan_id** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` / :ansible-option-required:`required` .. raw:: html
- .. raw:: html
VLAN ID for this STP instance configuration. Must be between 1 and 4094. Each VLAN can have its own STP parameters. VLAN must exist before STP instance configuration. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp/stp_logging: .. rst-class:: ansible-option-title **stp_logging** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable STP event logging for troubleshooting. When true, logs STP state changes and events. Useful for monitoring STP behavior and troubleshooting issues. May increase log verbosity in environments with frequent topology changes. Equivalent to "spanning-tree logging" command. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp/stp_loopguard: .. rst-class:: ansible-option-title **stp_loopguard** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Global Loop Guard configuration to prevent loops from unidirectional failures. When true, prevents alternate/root ports from becoming designated ports. Protects against loops caused by unidirectional link failures. Complements UDLD for comprehensive loop prevention. Equivalent to "spanning-tree loopguard default" command. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp/stp_mode: .. rst-class:: ansible-option-title **stp_mode** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Spanning Tree Protocol mode to operate in. \ :literal:`PVST`\ (Per-VLAN Spanning Tree Plus) - Cisco proprietary, one instance per VLAN. \ :literal:`RSTP`\ (Rapid Spanning Tree Protocol) - IEEE 802.1w, faster convergence than PVST. \ :literal:`MST`\ (Multiple Spanning Tree) - IEEE 802.1s, maps multiple VLANs to instances. Choose based on network size, convergence requirements, and vendor compatibility. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`"PVST"` - :ansible-option-choices-entry-default:`"RSTP"` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`"MST"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp/stp_portfast_mode: .. rst-class:: ansible-option-title **stp_portfast_mode** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Global PortFast mode configuration for edge ports. \ :literal:`ENABLE`\ - Enables PortFast on all access ports globally. \ :literal:`DISABLE`\ - Disables PortFast globally. \ :literal:`EDGE`\ - Enables PortFast on edge ports (recommended for end devices). \ :literal:`NETWORK`\ - Configures network ports (inter-switch links). \ :literal:`TRUNK`\ - Enables PortFast on trunk ports (use with caution). PortFast bypasses listening and learning states for faster convergence. Advanced portfast modes (EDGE, NETWORK, TRUNK) are only supported on Catalyst 9600 Series and specific Catalyst 9500 Series models (C9500-32C, C9500-32QC, C9500-48Y4C, C9500-24Y4C, C9500X-28C8D). .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`"ENABLE"` - :ansible-option-choices-entry:`"DISABLE"` - :ansible-option-choices-entry:`"EDGE"` - :ansible-option-choices-entry:`"NETWORK"` - :ansible-option-choices-entry:`"TRUNK"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp/stp_transmit_hold_count: .. rst-class:: ansible-option-title **stp_transmit_hold_count** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Maximum number of BPDUs sent per hello interval. Must be between 1 and 20. Controls BPDU transmission rate to prevent overwhelming neighbors. Higher values allow more BPDUs but may impact performance. Equivalent to "spanning-tree transmit hold-count" command. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`6` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp/stp_uplinkfast: .. rst-class:: ansible-option-title **stp_uplinkfast** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable UplinkFast for faster convergence on direct link failures. When true, enables UplinkFast for access layer switches. Provides sub-second convergence for direct uplink failures. Should only be enabled on access layer switches, not distribution/core. Equivalent to "spanning-tree uplinkfast" command. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/stp/stp_uplinkfast_max_update_rate: .. rst-class:: ansible-option-title **stp_uplinkfast_max_update_rate** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Maximum rate of update packets sent when UplinkFast is enabled. Must be between 0 and 32000 packets per second. Controls the rate of multicast packets sent during convergence. Higher rates provide faster convergence but may impact performance. Only applicable when UplinkFast is enabled. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`150` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/vlans: .. rst-class:: ansible-option-title **vlans** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=dictionary` .. raw:: html
- .. raw:: html
List of VLAN configurations to create or modify on the device. VLANs are fundamental building blocks for network segmentation. Each VLAN must have a unique ID within the valid range (1-4094). Default VLANs (1, 1002-1005) are typically pre-configured and should not be modified. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/vlans/vlan_admin_status: .. rst-class:: ansible-option-title **vlan_admin_status** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Administrative status of the VLAN (enabled or disabled). When true, the VLAN is active and can carry traffic. When false, the VLAN is administratively shut down. Disabled VLANs do not forward traffic but retain their configuration. NOTE - "vlan\_admin\_status" Can only be modified for VLAN IDs 2-1001. Extended range VLANs (1002-4094) do not support admin status updates. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/vlans/vlan_id: .. rst-class:: ansible-option-title **vlan_id** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` / :ansible-option-required:`required` .. raw:: html
- .. raw:: html
Unique identifier for the VLAN. Must be within the valid range of 1 to 4094. VLAN 1 is the default VLAN and exists on all switches. VLANs 1002-1005 are reserved for legacy protocols. Extended VLANs (1006-4094) may require VTP version 3. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/vlans/vlan_name: .. rst-class:: ansible-option-title **vlan_name** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Descriptive name for the VLAN to aid in identification and management. Maximum length depends on VTP version (32 chars for v1/v2, 128 chars for v3). Should be descriptive and follow organizational naming conventions. If not specified, defaults to "VLAN" followed by the VLAN ID with leading zeros. Must contain only ASCII characters (0-127) as per Catalyst Center API requirements. Cannot contain whitespace characters (spaces, tabs, newlines) or question marks (?). Use underscores (\_) or hyphens (-) instead of spaces for better compatibility. Empty strings are not allowed and will cause API validation errors. Examples - "SALES\_VLAN", "IOT\_DEVICES", "GUEST\_NETWORK" .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/vtp: .. rst-class:: ansible-option-title **vtp** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
VLAN Trunking Protocol (VTP) configuration settings. VTP synchronizes VLAN configuration across switches in a domain. Enables centralized VLAN management for large switched networks. Requires careful planning to avoid accidental VLAN deletion. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/vtp/vtp_configuration_file_name: .. rst-class:: ansible-option-title **vtp_configuration_file_name** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Custom filename for VTP configuration storage. Default is "vlan.dat" in the flash file system. Maximum 244 characters for custom filenames. Useful for backup and recovery procedures. Should include full path if not in default location. NOTE - Due to API limitations, this parameter does not support empty string values ("") for resetting to default. To reset this parameter, the entire VTP configuration has to be reset using the "deleted" state. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/vtp/vtp_domain_name: .. rst-class:: ansible-option-title **vtp_domain_name** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
VTP domain name for switch participation. Maximum 32 characters for VTP domains. All switches in the same domain share VLAN information. Case-sensitive and must match exactly across all domain switches. Required for VTP version 3 operation. Once domain name is set, it can be updated but cannot be reset. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/vtp/vtp_mode: .. rst-class:: ansible-option-title **vtp_mode** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
VTP operational mode for this switch. \ :literal:`SERVER`\ - Can create, modify, and delete VLANs; propagates changes. \ :literal:`CLIENT`\ - Cannot modify VLANs locally; accepts updates from servers. \ :literal:`TRANSPARENT`\ - Can modify VLANs locally; forwards but doesn't process updates. \ :literal:`OFF`\ - VTP is disabled; no VTP processing or forwarding. Choose based on network role and VLAN management strategy. VTP modes SERVER and CLIENT do not support extended range VLANs (1006-4094). If extended range VLANs are configured on the device, VTP mode must be set to TRANSPARENT or OFF. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`"SERVER"` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`"CLIENT"` - :ansible-option-choices-entry:`"TRANSPARENT"` - :ansible-option-choices-entry:`"OFF"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/vtp/vtp_pruning: .. rst-class:: ansible-option-title **vtp_pruning** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Enable VTP pruning to optimize bandwidth usage. When true, restricts flooded traffic to only necessary trunk links. Reduces unnecessary broadcast traffic in the VTP domain. Only affects VLANs 2-1001; VLAN 1 and extended VLANs are not pruned. Can only be configured when "vtp\_mode" is "SERVER". .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/vtp/vtp_source_interface: .. rst-class:: ansible-option-title **vtp_source_interface** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Interface to use as the source for VTP updates. Specifies which interface IP becomes the VTP updater address. Useful for identifying which switch made the last update. Should be a consistently available interface like a loopback. Format interface type and number (Example, "GigabitEthernet1/0/1"). NOTE - Due to API limitations, this parameter does not support empty string values ("") for resetting to default. To reset this parameter, the entire VTP configuration has to be reset using the "deleted" state. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config/layer2_configuration/vtp/vtp_version: .. rst-class:: ansible-option-title **vtp_version** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
VTP protocol version to use. \ :literal:`VERSION\_1`\ - Original VTP implementation, basic functionality. \ :literal:`VERSION\_2`\ - Adds support for Token Ring and unrecognized TLVs. \ :literal:`VERSION\_3`\ - Adds extended VLANs, private VLANs, and MST support. Higher versions provide more features but require compatible switches. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`"VERSION\_1"` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`"VERSION\_2"` - :ansible-option-choices-entry:`"VERSION\_3"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-config_verify: .. rst-class:: ansible-option-title **config_verify** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Set to true to verify the Cisco Catalyst Center configuration after applying the playbook configuration. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-dnac_api_task_timeout: .. rst-class:: ansible-option-title **dnac_api_task_timeout** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Defines the timeout in seconds for API calls to retrieve task details. If the task details are not received within this period, the process will end, and a timeout notification will be logged. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`1200` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-dnac_debug: .. rst-class:: ansible-option-title **dnac_debug** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Indicates whether debugging is enabled in the Cisco Catalyst Center SDK. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-dnac_host: .. rst-class:: ansible-option-title **dnac_host** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` / :ansible-option-required:`required` .. raw:: html
- .. raw:: html
The hostname of the Cisco Catalyst Center. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-dnac_log: .. rst-class:: ansible-option-title **dnac_log** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Flag to enable/disable playbook execution logging. When true and dnac\_log\_file\_path is provided, - Create the log file at the execution location with the specified name. When true and dnac\_log\_file\_path is not provided, - Create the log file at the execution location with the name 'dnac.log'. When false, - Logging is disabled. If the log file doesn't exist, - It is created in append or write mode based on the "dnac\_log\_append" flag. If the log file exists, - It is overwritten or appended based on the "dnac\_log\_append" flag. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`false` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`true` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-dnac_log_append: .. rst-class:: ansible-option-title **dnac_log_append** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Determines the mode of the file. Set to True for 'append' mode. Set to False for 'write' mode. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-dnac_log_file_path: .. rst-class:: ansible-option-title **dnac_log_file_path** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Governs logging. Logs are recorded if dnac\_log is True. If path is not specified, - When 'dnac\_log\_append' is True, 'dnac.log' is generated in the current Ansible directory; logs are appended. - When 'dnac\_log\_append' is False, 'dnac.log' is generated; logs are overwritten. If path is specified, - When 'dnac\_log\_append' is True, the file opens in append mode. - When 'dnac\_log\_append' is False, the file opens in write (w) mode. - In shared file scenarios, without append mode, content is overwritten after each module execution. - For a shared log file, set append to False for the 1st module (to overwrite); for subsequent modules, set append to True. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`"dnac.log"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-dnac_log_level: .. rst-class:: ansible-option-title **dnac_log_level** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Sets the threshold for log level. Messages with a level equal to or higher than this will be logged. Levels are listed in order of severity [CRITICAL, ERROR, WARNING, INFO, DEBUG]. CRITICAL indicates serious errors halting the program. Displays only CRITICAL messages. ERROR indicates problems preventing a function. Displays ERROR and CRITICAL messages. WARNING indicates potential future issues. Displays WARNING, ERROR, CRITICAL messages. INFO tracks normal operation. Displays INFO, WARNING, ERROR, CRITICAL messages. DEBUG provides detailed diagnostic info. Displays all log messages. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`"WARNING"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-dnac_password: .. rst-class:: ansible-option-title **dnac_password** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
The password for authentication at the Cisco Catalyst Center. .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-dnac_port: .. rst-class:: ansible-option-title **dnac_port** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Specifies the port number associated with the Cisco Catalyst Center. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`"443"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-dnac_task_poll_interval: .. rst-class:: ansible-option-title **dnac_task_poll_interval** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`integer` .. raw:: html
- .. raw:: html
Specifies the interval in seconds between successive calls to the API to retrieve task details. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`2` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-dnac_username: .. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-user: .. rst-class:: ansible-option-title **dnac_username** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-aliases:`aliases: user` .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
The username for authentication at the Cisco Catalyst Center. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`"admin"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-dnac_verify: .. rst-class:: ansible-option-title **dnac_verify** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Flag to enable or disable SSL certificate verification. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-dnac_version: .. rst-class:: ansible-option-title **dnac_version** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
Specifies the version of the Cisco Catalyst Center that the SDK should use. .. rst-class:: ansible-option-line :ansible-option-default-bold:`Default:` :ansible-option-default:`"2.2.3.3"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-state: .. rst-class:: ansible-option-title **state** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`string` .. raw:: html
- .. raw:: html
The desired state of Cisco Catalyst Center after module execution. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry-default:`"merged"` :ansible-option-choices-default-mark:`← (default)` - :ansible-option-choices-entry:`"deleted"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__parameter-validate_response_schema: .. rst-class:: ansible-option-title **validate_response_schema** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`boolean` .. raw:: html
- .. raw:: html
Flag for Cisco Catalyst Center SDK to enable the validation of request bodies against a JSON schema. .. rst-class:: ansible-option-line :ansible-option-choices:`Choices:` - :ansible-option-choices-entry:`false` - :ansible-option-choices-entry-default:`true` :ansible-option-choices-default-mark:`← (default)` .. raw:: html
.. Attributes .. Notes Notes ----- .. note:: - SDK Method used are - devices.get\_device\_list - wired.Wired.get\_configurations\_for\_an\_intended\_layer2\_feature\_on\_a\_wired\_device - wired.Wired.get\_configurations\_for\_a\_deployed\_layer2\_feature\_on\_a\_wired\_device - wired.Wired.create\_configurations\_for\_an\_intended\_layer2\_feature\_on\_a\_wired\_device - wired.Wired.update\_configurations\_for\_an\_intended\_layer2\_feature\_on\_a\_wired\_device - wired.Wired.delete\_configurations\_for\_an\_intended\_layer2\_feature\_on\_a\_wired\_device - wired.Wired.deploy\_the\_intended\_configuration\_features\_on\_a\_wired\_device - Paths used are - GET /dna/intent/api/v1/networkDevices - GET /dna/intent/api/v1/networkDevices/${id}/configFeatures/intended/layer2/${feature} - GET /dna/intent/api/v1/networkDevices/${id}/configFeatures/intended/layer2/${feature} - POST /dna/intent/api/v1/networkDevices/${id}/configFeatures/intended/layer2/${feature} - PUT /dna/intent/api/v1/networkDevices/${id}/configFeatures/intended/layer2/${feature} - DELETE /dna/intent/api/v1/networkDevices/${id}/configFeatures/intended/layer2/${feature} - POST /dna/intent/api/v1/networkDevices/${id}/configFeatures/deploy - Does not support \ :literal:`check\_mode`\ - The plugin runs on the control node and does not use any ansible connection plugins instead embedded connection manager from Cisco Catalyst Center SDK - The parameters starting with dnac\_ are used by the Cisco Catalyst Center Python SDK to establish the connection .. Seealso .. Examples Examples -------- .. code-block:: yaml+jinja - name: Create multiple VLANs with comprehensive settings cisco.dnac.wired_campus_automation_workflow_manager: dnac_host: "{{ dnac_host }}" dnac_username: "{{ dnac_username }}" dnac_password: "{{ dnac_password }}" dnac_verify: "{{ dnac_verify }}" dnac_port: "{{ dnac_port }}" dnac_version: "{{ dnac_version }}" dnac_debug: "{{ dnac_debug }}" state: merged config: - ip_address: 204.1.2.3 device_collection_status_check: false layer2_configuration: vlans: - vlan_id: 100 vlan_name: Production_Network vlan_admin_status: true - vlan_id: 200 vlan_name: Development_Network vlan_admin_status: true - vlan_id: 300 vlan_name: Guest_Network vlan_admin_status: false - name: Update VLAN settings cisco.dnac.wired_campus_automation_workflow_manager: dnac_host: "{{ dnac_host }}" dnac_username: "{{ dnac_username }}" dnac_password: "{{ dnac_password }}" dnac_verify: "{{ dnac_verify }}" dnac_port: "{{ dnac_port }}" dnac_version: "{{ dnac_version }}" dnac_debug: "{{ dnac_debug }}" state: merged config: - ip_address: 204.1.2.3 layer2_configuration: vlans: - vlan_id: 300 vlan_name: Guest_Network_Updated vlan_admin_status: true - name: Delete VLANs cisco.dnac.wired_campus_automation_workflow_manager: dnac_host: "{{ dnac_host }}" dnac_username: "{{ dnac_username }}" dnac_password: "{{ dnac_password }}" dnac_verify: "{{ dnac_verify }}" dnac_port: "{{ dnac_port }}" dnac_version: "{{ dnac_version }}" dnac_debug: "{{ dnac_debug }}" state: deleted config: - ip_address: 204.1.2.3 layer2_configuration: vlans: - vlan_id: 300 - name: Configure CDP discovery protocol cisco.dnac.wired_campus_automation_workflow_manager: dnac_host: "{{ dnac_host }}" dnac_username: "{{ dnac_username }}" dnac_password: "{{ dnac_password }}" dnac_verify: "{{ dnac_verify }}" dnac_port: "{{ dnac_port }}" dnac_version: "{{ dnac_version }}" dnac_debug: "{{ dnac_debug }}" state: merged config: - ip_address: 204.1.2.3 layer2_configuration: cdp: cdp_admin_status: true cdp_hold_time: 180 cdp_timer: 60 cdp_advertise_v2: true cdp_log_duplex_mismatch: true - name: Configure LLDP discovery protocol cisco.dnac.wired_campus_automation_workflow_manager: dnac_host: "{{ dnac_host }}" dnac_username: "{{ dnac_username }}" dnac_password: "{{ dnac_password }}" dnac_verify: "{{ dnac_verify }}" dnac_port: "{{ dnac_port }}" dnac_version: "{{ dnac_version }}" dnac_debug: "{{ dnac_debug }}" state: merged config: - ip_address: 204.1.2.3 layer2_configuration: lldp: lldp_admin_status: true lldp_hold_time: 240 lldp_timer: 30 lldp_reinitialization_delay: 3 - name: Configure Spanning Tree Protocol cisco.dnac.wired_campus_automation_workflow_manager: dnac_host: "{{ dnac_host }}" dnac_username: "{{ dnac_username }}" dnac_password: "{{ dnac_password }}" dnac_verify: "{{ dnac_verify }}" dnac_port: "{{ dnac_port }}" dnac_version: "{{ dnac_version }}" dnac_debug: "{{ dnac_debug }}" state: merged config: - ip_address: 204.1.2.3 layer2_configuration: stp: stp_mode: MST stp_portfast_mode: ENABLE stp_bpdu_guard: true stp_bpdu_filter: false stp_backbonefast: true stp_extended_system_id: true stp_logging: true stp_loopguard: false stp_transmit_hold_count: 8 stp_uplinkfast: false stp_uplinkfast_max_update_rate: 200 stp_etherchannel_guard: true stp_instances: - stp_instance_vlan_id: 100 stp_instance_priority: 32768 enable_stp: true stp_instance_max_age_timer: 20 stp_instance_hello_interval_timer: 2 stp_instance_forward_delay_timer: 15 - stp_instance_vlan_id: 200 stp_instance_priority: 16384 enable_stp: true - name: Configure VLAN Trunking Protocol cisco.dnac.wired_campus_automation_workflow_manager: dnac_host: "{{ dnac_host }}" dnac_username: "{{ dnac_username }}" dnac_password: "{{ dnac_password }}" dnac_verify: "{{ dnac_verify }}" dnac_port: "{{ dnac_port }}" dnac_version: "{{ dnac_version }}" dnac_debug: "{{ dnac_debug }}" state: merged config: - ip_address: 204.1.2.3 layer2_configuration: vtp: vtp_mode: TRANSPARENT vtp_version: VERSION_2 vtp_domain_name: CORPORATE_DOMAIN vtp_pruning: true vtp_configuration_file_name: flash:vtp_config.dat vtp_source_interface: Loopback0 - name: Configure DHCP Snooping cisco.dnac.wired_campus_automation_workflow_manager: dnac_host: "{{ dnac_host }}" dnac_username: "{{ dnac_username }}" dnac_password: "{{ dnac_password }}" dnac_verify: "{{ dnac_verify }}" dnac_port: "{{ dnac_port }}" dnac_version: "{{ dnac_version }}" dnac_debug: "{{ dnac_debug }}" state: merged config: - ip_address: 204.1.2.3 layer2_configuration: dhcp_snooping: dhcp_admin_status: true dhcp_snooping_vlans: - 100 - 200 - 300 dhcp_snooping_glean: true dhcp_snooping_database_agent_url: tftp://192.168.1.100/dhcp_binding.db dhcp_snooping_database_timeout: 600 dhcp_snooping_database_write_delay: 300 dhcp_snooping_proxy_bridge_vlans: - 100 - 200 - name: Configure IGMP Snooping for multicast cisco.dnac.wired_campus_automation_workflow_manager: dnac_host: "{{ dnac_host }}" dnac_username: "{{ dnac_username }}" dnac_password: "{{ dnac_password }}" dnac_verify: "{{ dnac_verify }}" dnac_port: "{{ dnac_port }}" dnac_version: "{{ dnac_version }}" dnac_debug: "{{ dnac_debug }}" state: merged config: - ip_address: 204.1.2.3 layer2_configuration: igmp_snooping: enable_igmp_snooping: true igmp_snooping_querier: false igmp_snooping_querier_address: 192.168.1.10 igmp_snooping_querier_version: VERSION_2 igmp_snooping_querier_query_interval: 125 igmp_snooping_vlans: - igmp_snooping_vlan_id: 100 enable_igmp_snooping: true igmp_snooping_querier: false igmp_snooping_querier_address: 192.168.1.11 igmp_snooping_querier_version: VERSION_2 igmp_snooping_querier_query_interval: 125 igmp_snooping_mrouter_port_list: - GigabitEthernet1/0/1 - GigabitEthernet1/0/2 - igmp_snooping_vlan_id: 200 enable_igmp_snooping: true igmp_snooping_querier: true igmp_snooping_querier_version: VERSION_3 igmp_snooping_querier_query_interval: 90 - name: Configure MLD Snooping for IPv6 multicast cisco.dnac.wired_campus_automation_workflow_manager: dnac_host: "{{ dnac_host }}" dnac_username: "{{ dnac_username }}" dnac_password: "{{ dnac_password }}" dnac_verify: "{{ dnac_verify }}" dnac_port: "{{ dnac_port }}" dnac_version: "{{ dnac_version }}" dnac_debug: "{{ dnac_debug }}" state: merged config: - ip_address: 204.1.2.3 layer2_configuration: mld_snooping: enable_mld_snooping: true mld_snooping_querier: false mld_snooping_querier_address: fe80::1 mld_snooping_querier_version: VERSION_2 mld_snooping_listener: true mld_snooping_querier_query_interval: 125 mld_snooping_vlans: - mld_snooping_vlan_id: 100 enable_mld_snooping: true mld_snooping_enable_immediate_leave: false mld_snooping_querier: false mld_snooping_querier_address: fe80::10 mld_snooping_querier_version: VERSION_2 mld_snooping_querier_query_interval: 125 mld_snooping_mrouter_port_list: - GigabitEthernet1/0/3 - GigabitEthernet1/0/4 - name: Configure 802.1X Authentication cisco.dnac.wired_campus_automation_workflow_manager: dnac_host: "{{ dnac_host }}" dnac_username: "{{ dnac_username }}" dnac_password: "{{ dnac_password }}" dnac_verify: "{{ dnac_verify }}" dnac_port: "{{ dnac_port }}" dnac_version: "{{ dnac_version }}" dnac_debug: "{{ dnac_debug }}" state: merged config: - ip_address: 204.1.2.3 layer2_configuration: authentication: enable_dot1x_authentication: true authentication_config_mode: NEW_STYLE - name: Configure LACP and PAGP Port Channels cisco.dnac.wired_campus_automation_workflow_manager: dnac_host: "{{ dnac_host }}" dnac_username: "{{ dnac_username }}" dnac_password: "{{ dnac_password }}" dnac_verify: "{{ dnac_verify }}" dnac_port: "{{ dnac_port }}" dnac_version: "{{ dnac_version }}" dnac_debug: "{{ dnac_debug }}" state: merged config: - ip_address: 204.1.2.3 layer2_configuration: logical_ports: port_channel_auto: false port_channel_lacp_system_priority: 4096 port_channel_load_balancing_method: SRC_DST_MIXED_IP_PORT port_channels: - port_channel_protocol: LACP port_channel_name: Port-channel1 port_channel_min_links: 2 port_channel_members: - port_channel_interface_name: GigabitEthernet1/0/10 port_channel_mode: ACTIVE port_channel_port_priority: 128 port_channel_rate: 30 - port_channel_interface_name: GigabitEthernet1/0/11 port_channel_mode: ACTIVE port_channel_port_priority: 128 port_channel_rate: 30 - port_channel_protocol: PAGP port_channel_name: Port-channel2 port_channel_min_links: 1 port_channel_members: - port_channel_interface_name: GigabitEthernet1/0/12 port_channel_mode: DESIRABLE port_channel_port_priority: 128 port_channel_learn_method: AGGREGATION_PORT - name: Configure Access Port with authentication and security cisco.dnac.wired_campus_automation_workflow_manager: dnac_host: "{{ dnac_host }}" dnac_username: "{{ dnac_username }}" dnac_password: "{{ dnac_password }}" dnac_verify: "{{ dnac_verify }}" dnac_port: "{{ dnac_port }}" dnac_version: "{{ dnac_version }}" dnac_debug: "{{ dnac_debug }}" state: merged config: - ip_address: 204.1.2.3 layer2_configuration: port_configuration: - interface_name: GigabitEthernet1/0/5 switchport_interface_config: switchport_description: Access Port - Production Network switchport_mode: ACCESS access_vlan: 100 admin_status: true voice_vlan: 200 vlan_trunking_interface_config: enable_dtp_negotiation: false protected: false dot1x_interface_config: dot1x_interface_authentication_order: - DOT1X - MAB dot1x_interface_authentication_mode: OPEN dot1x_interface_pae_type: AUTHENTICATOR dot1x_interface_control_direction: BOTH dot1x_interface_host_mode: MULTI_AUTHENTICATION dot1x_interface_port_control: AUTO dot1x_interface_inactivity_timer: 300 dot1x_interface_max_reauth_requests: 3 dot1x_interface_reauth_timer: 3600 mab_interface_config: mab_interface_enable: true stp_interface_config: stp_interface_enable_portfast: true stp_interface_enable_bpdu_guard: true stp_interface_enable_bpdu_filter: false stp_interface_enable_root_guard: false stp_interface_enable_loop_guard: false stp_interface_port_priority: 128 stp_interface_cost: 19 dhcp_snooping_interface_config: dhcp_snooping_interface_rate_limit: 100 dhcp_snooping_interface_trust: true cdp_interface_config: cdp_interface_admin_status: true cdp_interface_logging: true lldp_interface_config: lldp_interface_transmit: true lldp_interface_receive: true vtp_interface_config: vtp_interface_admin_status: true - name: Configure Trunk Port for inter-switch links cisco.dnac.wired_campus_automation_workflow_manager: dnac_host: "{{ dnac_host }}" dnac_username: "{{ dnac_username }}" dnac_password: "{{ dnac_password }}" dnac_verify: "{{ dnac_verify }}" dnac_port: "{{ dnac_port }}" dnac_version: "{{ dnac_version }}" dnac_debug: "{{ dnac_debug }}" state: merged config: - ip_address: 204.1.2.3 layer2_configuration: port_configuration: - interface_name: GigabitEthernet1/0/6 switchport_interface_config: switchport_description: Trunk Port - Inter-Switch Link switchport_mode: TRUNK allowed_vlans: - 100 - 200 - 300 - 400 native_vlan_id: 100 admin_status: true vlan_trunking_interface_config: enable_dtp_negotiation: true protected: true pruning_vlan_ids: - 300 - 400 stp_interface_config: stp_interface_enable_portfast: false stp_interface_enable_bpdu_guard: false stp_interface_enable_bpdu_filter: false stp_interface_enable_root_guard: true stp_interface_enable_loop_guard: true stp_interface_port_priority: 64 stp_interface_cost: 100 - name: Comprehensive network configuration with all Layer 2 features cisco.dnac.wired_campus_automation_workflow_manager: dnac_host: "{{ dnac_host }}" dnac_username: "{{ dnac_username }}" dnac_password: "{{ dnac_password }}" dnac_verify: "{{ dnac_verify }}" dnac_port: "{{ dnac_port }}" dnac_version: "{{ dnac_version }}" dnac_debug: "{{ dnac_debug }}" state: merged config: - ip_address: 204.1.2.3 device_collection_status_check: false layer2_configuration: vlans: - vlan_id: 10 vlan_name: Management vlan_admin_status: true - vlan_id: 20 vlan_name: Production vlan_admin_status: true - vlan_id: 30 vlan_name: Development vlan_admin_status: true - vlan_id: 40 vlan_name: Guest vlan_admin_status: true cdp: cdp_admin_status: true cdp_hold_time: 180 cdp_timer: 60 cdp_advertise_v2: true cdp_log_duplex_mismatch: true lldp: lldp_admin_status: true lldp_hold_time: 240 lldp_timer: 30 lldp_reinitialization_delay: 3 stp: stp_mode: RSTP stp_portfast_mode: ENABLE stp_bpdu_guard: true stp_bpdu_filter: false stp_backbonefast: true stp_extended_system_id: true stp_logging: true stp_instances: - stp_instance_vlan_id: 10 stp_instance_priority: 32768 enable_stp: true - stp_instance_vlan_id: 20 stp_instance_priority: 16384 enable_stp: true vtp: vtp_mode: SERVER vtp_version: VERSION_2 vtp_domain_name: ENTERPRISE_DOMAIN vtp_pruning: true dhcp_snooping: dhcp_admin_status: true dhcp_snooping_vlans: - 20 - 30 - 40 dhcp_snooping_glean: true igmp_snooping: enable_igmp_snooping: true igmp_snooping_querier: false igmp_snooping_querier_version: VERSION_2 igmp_snooping_vlans: - igmp_snooping_vlan_id: 20 enable_igmp_snooping: true igmp_snooping_querier: false authentication: enable_dot1x_authentication: true authentication_config_mode: NEW_STYLE logical_ports: port_channel_auto: false port_channel_lacp_system_priority: 8192 port_channel_load_balancing_method: SRC_DST_IP port_channels: - port_channel_protocol: LACP port_channel_name: Port-channel10 port_channel_min_links: 2 port_channel_members: - port_channel_interface_name: GigabitEthernet1/0/16 port_channel_mode: ACTIVE port_channel_port_priority: 128 port_channel_rate: 30 - port_channel_interface_name: GigabitEthernet1/0/17 port_channel_mode: ACTIVE port_channel_port_priority: 128 port_channel_rate: 30 port_configuration: - interface_name: GigabitEthernet1/0/1 switchport_interface_config: switchport_description: Management Port switchport_mode: ACCESS access_vlan: 10 admin_status: true stp_interface_config: stp_interface_enable_portfast: true stp_interface_enable_bpdu_guard: true dhcp_snooping_interface_config: dhcp_snooping_interface_trust: true - interface_name: GigabitEthernet1/0/2 switchport_interface_config: switchport_description: Production User Port switchport_mode: ACCESS access_vlan: 20 admin_status: true dot1x_interface_config: dot1x_interface_authentication_order: - DOT1X - MAB dot1x_interface_port_control: AUTO stp_interface_config: stp_interface_enable_portfast: true - name: Reset CDP to default settings cisco.dnac.wired_campus_automation_workflow_manager: dnac_host: "{{ dnac_host }}" dnac_username: "{{ dnac_username }}" dnac_password: "{{ dnac_password }}" dnac_verify: "{{ dnac_verify }}" dnac_port: "{{ dnac_port }}" dnac_version: "{{ dnac_version }}" dnac_debug: "{{ dnac_debug }}" state: deleted config: - ip_address: 204.1.2.3 layer2_configuration: cdp: {} - name: Reset LLDP to default settings cisco.dnac.wired_campus_automation_workflow_manager: dnac_host: "{{ dnac_host }}" dnac_username: "{{ dnac_username }}" dnac_password: "{{ dnac_password }}" dnac_verify: "{{ dnac_verify }}" dnac_port: "{{ dnac_port }}" dnac_version: "{{ dnac_version }}" dnac_debug: "{{ dnac_debug }}" state: deleted config: - ip_address: 204.1.2.3 layer2_configuration: lldp: {} - name: Comprehensive cleanup of all Layer 2 configurations cisco.dnac.wired_campus_automation_workflow_manager: dnac_host: "{{ dnac_host }}" dnac_username: "{{ dnac_username }}" dnac_password: "{{ dnac_password }}" dnac_verify: "{{ dnac_verify }}" dnac_port: "{{ dnac_port }}" dnac_version: "{{ dnac_version }}" dnac_debug: "{{ dnac_debug }}" state: deleted config: - ip_address: 204.1.2.3 layer2_configuration: vlans: - vlan_id: 10 - vlan_id: 20 - vlan_id: 30 - vlan_id: 40 - vlan_id: 100 - vlan_id: 200 - vlan_id: 300 cdp: {} lldp: {} vtp: {} dhcp_snooping: {} authentication: {} - name: Configure using device hostname cisco.dnac.wired_campus_automation_workflow_manager: dnac_host: "{{ dnac_host }}" dnac_username: "{{ dnac_username }}" dnac_password: "{{ dnac_password }}" dnac_verify: "{{ dnac_verify }}" dnac_port: "{{ dnac_port }}" dnac_version: "{{ dnac_version }}" dnac_debug: "{{ dnac_debug }}" state: merged config: - hostname: switch01.example.com device_collection_status_check: true config_verification_wait_time: 15 layer2_configuration: vlans: - vlan_id: 100 vlan_name: Finance_VLAN vlan_admin_status: true cdp: cdp_admin_status: true cdp_hold_time: 200 cdp_timer: 90 .. Facts .. Return values Return Values ------------- Common return values are documented :ref:`here `, the following are the fields unique to this module: .. rst-class:: ansible-option-table .. list-table:: :width: 100% :widths: auto :header-rows: 1 * - Key - Description * - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__return-response_1: .. rst-class:: ansible-option-title **response_1** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`dictionary` .. raw:: html
- .. raw:: html
A dictionary with with the response returned by the Cisco Catalyst Center Python SDK .. rst-class:: ansible-option-line :ansible-option-returned-bold:`Returned:` always .. rst-class:: ansible-option-line .. rst-class:: ansible-option-sample :ansible-option-sample-bold:`Sample:` :ansible-rv-sample-value:`"{\\n \\"response\\":\\n {\\n \\"response\\": String,\\n \\"version\\": String\\n },\\n \\"msg\\": String\\n}\\n"` .. raw:: html
* - .. raw:: html
.. _ansible_collections.cisco.dnac.wired_campus_automation_workflow_manager_module__return-response_2: .. rst-class:: ansible-option-title **response_2** .. raw:: html .. rst-class:: ansible-option-type-line :ansible-option-type:`list` / :ansible-option-elements:`elements=string` .. raw:: html
- .. raw:: html
A string with the response returned by the Cisco Catalyst Center Python SDK .. rst-class:: ansible-option-line :ansible-option-returned-bold:`Returned:` always .. rst-class:: ansible-option-line .. rst-class:: ansible-option-sample :ansible-option-sample-bold:`Sample:` :ansible-rv-sample-value:`["{\\n \\"response\\": []", "\\n \\"msg\\": String\\n}\\n"]` .. raw:: html
.. Status (Presently only deprecated) .. Authors Authors ~~~~~~~ - Rugvedi Kapse (@rukapse) - Madhan Sankaranarayanan (@madhansansel) .. Extra links Collection links ~~~~~~~~~~~~~~~~ .. raw:: html

Issue Tracker Repository (Sources)

.. Parsing errors