FAILED! => {"changed": false, "msg": "parameters are mutually exclusive: address|any|host|prefix|net_group|port_group, wildcard_bits|any|host|prefix|net_group|port_group found in config -> acls -> aces -> destination"} - Githubissues

ansible-collections / cisco.iosxr

Ansible Network Collection for Cisco IOSXR

GNU General Public License v3.0

67 stars 47 forks source link

FAILED! => {"changed": false, "msg": "parameters are mutually exclusive: address|any|host|prefix|net_group|port_group, wildcard_bits|any|host|prefix|net_group|port_group found in config -> acls -> aces -> destination"} #453

Open Hassan-Core opened 10 months ago

Hassan-Core commented 10 months ago

SUMMARY

Issue on cisco.iosxr.iosxr_acls module while simultaneously adding the "port_group" , "address" and "wildcard_bits" parameters under the "destination" parameters. Requirement is to configure the below mentioned ACL sequence. 1390 permit udp any 1.1.1.1 0.0.0.0 port-group ABC
As per the error and documentation, they are mutually exclusive. Query is how we can add the above entry if they are mutually exclusive.

ISSUE TYPE

Bug Report

COMPONENT NAME

cisco.iosxr.iosxr_acls module

ANSIBLE VERSION

2.14.1

COLLECTION VERSION

/home/ansible/.local/lib/python3.10/site-packages/ansible_collections

Collection Version

community.general 7.5.1

CONFIGURATION

CONFIG_FILE() = /etc/ansible/ansible.cfg DEFAULT_HOST_LIST(/etc/ansible/ansible.cfg) = ['/etc/ansible/hosts1'] DEFAULT_LOG_PATH(/etc/ansible/ansible.cfg) = /var/log/ansible.log EDITOR(env: EDITOR) = /usr/bin/vim HOST_KEY_CHECKING(/etc/ansible/ansible.cfg) = False INTERPRETER_PYTHON(/etc/ansible/ansible.cfg) = /usr/bin/python PERSISTENT_COMMAND_TIMEOUT(/etc/ansible/ansible.cfg) = 60 PERSISTENT_CONNECT_TIMEOUT(/etc/ansible/ansible.cfg) = 60

OS / ENVIRONMENT

OS version Fedora release 35 (Thirty Five) NAME="Fedora Linux" VERSION="35 (Server Edition)"

STEPS TO REPRODUCE

sequence: 1390 grant: permit protocol: udp source: any: true destination: address:
wildcard_bits: port_group:

EXPECTED RESULTS

Entry will be added without any error.
1390 permit udp any 1.1.1.1 0.0.0.0 port-group ABC

ACTUAL RESULTS

FAILED! => {"changed": false, "msg": "parameters are mutually exclusive: address|any|host|prefix|net_group|port_group, wildcard_bits|any|host|prefix|net_group|port_group found in config -> acls -> aces -> destination"}

ntl-afzaalarif commented 10 months ago

I have also checked this, and this appears to be a bug. It will fail for both source and destination. [host,address,prefix,net-group] these items are mutually exclusive but not the port-group. I have modified the acls.py to get this working on my local environment, will initiate a pull request for the solution to this repository.