W3cubDocs

/Ansible

ce_aaa_server - Manages AAA server global configuration on HUAWEI CloudEngine switches.

New in version 2.4.

Synopsis

  • Manages AAA server global configuration on HUAWEI CloudEngine switches.

Options

parameter required default choices comments
accounting_mode
no
  • invalid
  • hwtacacs
  • radius
  • none
Accounting Mode.
acct_scheme_name
no
Accounting scheme name. The value is a string of 1 to 32 characters.
authen_scheme_name
no
Name of an authentication scheme. The value is a string of 1 to 32 characters.
author_scheme_name
no
Name of an authorization scheme. The value is a string of 1 to 32 characters.
domain_name
no
Name of a domain. The value is a string of 1 to 64 characters.
first_authen_mode
no
  • invalid
  • local
  • hwtacacs
  • radius
  • none
Preferred authentication mode.
first_author_mode
no
  • invalid
  • local
  • hwtacacs
  • if-authenticated
  • none
Preferred authorization mode.
hwtacas_template
no
Name of a HWTACACS template. The value is a string of 1 to 32 case-insensitive characters.
local_user_group
no
Name of the user group where the user belongs. The user inherits all the rights of the user group. The value is a string of 1 to 32 characters.
radius_server_group
no
RADIUS server group's name. The value is a string of 1 to 32 case-insensitive characters.
state
no present
  • present
  • absent
Specify desired state of the resource.

Examples

- name: AAA server test
  hosts: cloudengine
  connection: local
  gather_facts: no
  vars:
    cli:
      host: "{{ inventory_hostname }}"
      port: "{{ ansible_ssh_port }}"
      username: "{{ username }}"
      password: "{{ password }}"
      transport: cli

  tasks:

  - name: "Radius authentication Server Basic settings"
    ce_aaa_server:
      state: present
      authen_scheme_name: test1
      first_authen_mode: radius
      radius_server_group: test2
      provider: "{{ cli }}"

  - name: "Undo radius authentication Server Basic settings"
    ce_aaa_server:
      state: absent
      authen_scheme_name: test1
      first_authen_mode: radius
      radius_server_group: test2
      provider: "{{ cli }}"

  - name: "Hwtacacs accounting Server Basic settings"
    ce_aaa_server:
      state: present
      acct_scheme_name: test1
      accounting_mode: hwtacacs
      hwtacas_template: test2
      provider: "{{ cli }}"

  - name: "Undo hwtacacs accounting Server Basic settings"
    ce_aaa_server:
      state: absent
      acct_scheme_name: test1
      accounting_mode: hwtacacs
      hwtacas_template: test2
      provider: "{{ cli }}"

Return Values

Common return values are documented here Return Values, the following are the fields unique to this module:

name description returned type sample
end_state
k/v pairs of aaa params after module execution
always dict {'accounting scheme': [['hwtacacs', 'test1']], 'hwtacacs template': ['huawei', 'test2']}
changed
check to see if a change was made on the device
always boolean True
updates
command sent to the device
always list ['accounting-scheme test1', 'accounting-mode hwtacacs', 'hwtacacs server template test2', 'hwtacacs enable']
proposed
k/v pairs of parameters passed into module
always dict {'acct_scheme_name': 'test1', 'hwtacas_template': 'test2', 'accounting_mode': 'hwtacacs', 'state': 'present'}
existing
k/v pairs of existing aaa server
always dict {'accounting scheme': [['hwtacacs'], ['default']], 'hwtacacs template': ['huawei']}

Status

This module is flagged as preview which means that it is not guaranteed to have a backwards compatible interface.

For help in developing on modules, should you be so inclined, please read Community Information & Contributing, Testing Ansible and Developing Modules.

© 2012–2017 Michael DeHaan
© 2017 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/ansible/latest/ce_aaa_server_module.html