ce_aaa_server – Manages AAA server global configuration on HUAWEI CloudEngine switches

New in version 2.4.

Synopsis

  • Manages AAA server global configuration on HUAWEI CloudEngine switches.

Parameters

Parameter Choices/Defaults Comments
accounting_mode
string
    Choices:
  • invalid
  • hwtacacs
  • radius
  • none ←
Accounting Mode.
acct_scheme_name
string
Accounting scheme name. The value is a string of 1 to 32 characters.
authen_scheme_name
string
Name of an authentication scheme. The value is a string of 1 to 32 characters.
author_scheme_name
string
Name of an authorization scheme. The value is a string of 1 to 32 characters.
domain_name
string
Name of a domain. The value is a string of 1 to 64 characters.
first_authen_mode
string
    Choices:
  • invalid
  • local ←
  • hwtacacs
  • radius
  • none
Preferred authentication mode.
first_author_mode
string
    Choices:
  • invalid
  • local ←
  • hwtacacs
  • if-authenticated
  • none
Preferred authorization mode.
hwtacas_template
string
Name of a HWTACACS template. The value is a string of 1 to 32 case-insensitive characters.
local_user_group
string
Name of the user group where the user belongs. The user inherits all the rights of the user group. The value is a string of 1 to 32 characters.
radius_server_group
string
RADIUS server group's name. The value is a string of 1 to 32 case-insensitive characters.
state
string
    Choices:
  • absent
  • present ←
Specify desired state of the resource.

Notes

Note

  • This module requires the netconf system service be enabled on the remote device being managed.

  • Recommended connection is netconf.

  • This module also works with local connections for legacy playbooks.

Examples

- name: AAA server test
  hosts: cloudengine
  connection: local
  gather_facts: no
  vars:
    cli:
      host: "{{ inventory_hostname }}"
      port: "{{ ansible_ssh_port }}"
      username: "{{ username }}"
      password: "{{ password }}"
      transport: cli

  tasks:

  - name: "Radius authentication Server Basic settings"
    ce_aaa_server:
      state: present
      authen_scheme_name: test1
      first_authen_mode: radius
      radius_server_group: test2
      provider: "{{ cli }}"

  - name: "Undo radius authentication Server Basic settings"
    ce_aaa_server:
      state: absent
      authen_scheme_name: test1
      first_authen_mode: radius
      radius_server_group: test2
      provider: "{{ cli }}"

  - name: "Hwtacacs accounting Server Basic settings"
    ce_aaa_server:
      state: present
      acct_scheme_name: test1
      accounting_mode: hwtacacs
      hwtacas_template: test2
      provider: "{{ cli }}"

  - name: "Undo hwtacacs accounting Server Basic settings"
    ce_aaa_server:
      state: absent
      acct_scheme_name: test1
      accounting_mode: hwtacacs
      hwtacas_template: test2
      provider: "{{ cli }}"

Return Values

Common return values are documented here, the following are the fields unique to this module:

Key Returned Description
changed
boolean
always
check to see if a change was made on the device

Sample:
True
end_state
dictionary
always
k/v pairs of aaa params after module execution

Sample:
{'accounting scheme': [['hwtacacs', 'test1']], 'hwtacacs template': ['huawei', 'test2']}
existing
dictionary
always
k/v pairs of existing aaa server

Sample:
{'accounting scheme': [['hwtacacs'], ['default']], 'hwtacacs template': ['huawei']}
proposed
dictionary
always
k/v pairs of parameters passed into module

Sample:
{'accounting_mode': 'hwtacacs', 'acct_scheme_name': 'test1', 'hwtacas_template': 'test2', 'state': 'present'}
updates
list
always
command sent to the device

Sample:
['accounting-scheme test1', 'accounting-mode hwtacacs', 'hwtacacs server template test2', 'hwtacacs enable']


Status

Authors

  • wangdezhuang (@QijunPan)

Hint

If you notice any issues in this documentation, you can edit this document to improve it.