aruba/aos-switch-ansible-collection

arubaoss_acl_policy adding new ace at the end of the ACL

Opened this issue · 0 comments

Hi, I tried inserting an ACE to an existing ACL using the arubaoss_acl_policy module and specified the sequence number e.g. 11, however, the ACE is inserted as the last statement in the existing ACL e.g. 30 and not at the specified sequence number. Pls see an example below

- name: configure test acl
  arubaoss_acl_policy:
    acl_name: test-acl
    acl_type: AT_EXTENDED_IPV4
    acl_action: "{{item.action | default ('AA_PERMIT')}}"
    source_ip_address: "{{x.x.x.x}}"
    source_ip_mask: "{{x.x.x.x}}"
    protocol_type: PT_IP
    destination_ip_address: "{{x.x.x.x}}"
    destination_ip_mask: "{{x.x.x.x}}"                                                              
    state: create
  loop:
    - { seq_no: '10', destip: "{{x.x.x.x}}" }  
    - { action: 'AA_DENY', seq_no: '11', srcip: 'x.x.x.x', srcmask: 'x.x.x.x', destip: 'x.x.x.x', destmask: 'x.x.x.x' }
    - { srcip: 'x.x.x.x', seq_no: '20', srcmask: 'x.x.x.x', destip: 'x.x.x.x', destmask: 'x.x.x.x' }

I noticed I have no issues

  • when I attempt to insert via the CLI or
  • if I create a new task just for the specific ACE that I'll like to insert