cisco.mso.ndo_match_rule_prefix module – Manage Match Prefix List on Cisco Nexus Dashboard Orchestrator (NDO).

Note

This module is part of the cisco.mso collection (version 2.13.0).

You might already have this collection installed if you are using the ansible package. It is not included in ansible-core. To check whether it is installed, run ansible-galaxy collection list.

To install it, use: ansible-galaxy collection install cisco.mso. You need further requirements to be able to use this module, see Requirements for details.

To use it in a playbook, specify: cisco.mso.ndo_match_rule_prefix.

New in cisco.mso 2.12.0

Synopsis
Requirements
Parameters
Notes
See Also
Examples

Synopsis

Manage Match Prefix List inside a Match Rule Policy on Cisco Nexus Dashboard Orchestrator (NDO).
This module is only supported on ND v4.1 (NDO v5.1) and later.

Requirements

The below requirements are needed on the host that executes this module.

Multi Site Orchestrator v2.1 or newer

Parameters

Parameter	Comments
aggregate boolean	The aggregate flag enabling route aggregation. Defaults to `false` when unset during creation. Choices: `false` `true`
description string	The description of the Match Prefix.
from_prefix aliases: from integer	The subnet value from which to aggregate. The value must be below `to_prefix` and above the subnet of the Prefix IP. The value must be between 0 and 32. Defaults to `0` when unset during creation.
host aliases: hostname string	IP Address or hostname of the ACI Multi Site Orchestrator host. If the value is not specified in the task, the value of environment variable `MSO_HOST` will be used instead.
login_domain string	The login domain name to use for authentication. The default value is Local. If the value is not specified in the task, the value of environment variable `MSO_LOGIN_DOMAIN` will be used instead. When using a HTTPAPI connection plugin the inventory variable `ansible_httpapi_login_domain` will be used if this attribute is not specified.
match_rule_policy string	The name of the Match Rule Policy. This parameter or `match_rule_policy_uuid` is required.
match_rule_policy_uuid string	The UUID of the Match Rule Policy. This parameter or `match_rule_policy` is required.
output_level string	Influence the output of this MSO module. `normal` means the standard output, incl. `current` dict `info` adds informational output, incl. `previous`, `proposed` and `sent` dicts `debug` adds debugging output, incl. `filter_string`, `method`, `response`, `status` and `url` information If the value is not specified in the task, the value of environment variable `MSO_OUTPUT_LEVEL` will be used instead. Choices: `"debug"` `"info"` `"normal"` ← (default)
password string	The password to use for authentication. If the value is not specified in the task, the value of environment variables `MSO_PASSWORD` or `ANSIBLE_NET_PASSWORD` will be used instead.
port integer	Port number to be used for the REST connection. The default value depends on parameter `use_ssl`. If the value is not specified in the task, the value of environment variable `MSO_PORT` will be used instead.
prefix string	The Prefix IP to match.
state string	Use `absent` for removing. Use `query` for listing an object or multiple objects. Use `present` for creating or updating. Choices: `"absent"` `"query"` ← (default) `"present"`
template string	The name of the template. The template must be a Tenant Policy template. This parameter or `template_id` is required.
template_id string	The ID of the template. The template must be a Tenant Policy template. This parameter or `template` is required.
timeout integer	The socket level timeout in seconds. The default value is 30 seconds. If the value is not specified in the task, the value of environment variable `MSO_TIMEOUT` will be used instead.
to_prefix aliases: to integer	The subnet value to which to aggregate. The value must be above `from_prefix` and above the subnet of the Prefix IP. The value must be between 0 and 32. Defaults to `0` when unset during creation.
use_proxy boolean	If `false`, it will not use a proxy, even if one is defined in an environment variable on the target hosts. If the value is not specified in the task, the value of environment variable `MSO_USE_PROXY` will be used instead. The default is `true`. Choices: `false` `true`
use_ssl boolean	If `false`, an HTTP connection will be used instead of the default HTTPS connection. If the value is not specified in the task, the value of environment variable `MSO_USE_SSL` will be used instead. When using a HTTPAPI connection plugin the inventory variable `ansible_httpapi_use_ssl` will be used if this attribute is not specified. The default is `false` when using a HTTPAPI connection plugin (mso or nd) and `true` when using the legacy connection method (only for mso). Choices: `false` `true`
username string	The username to use for authentication. If the value is not specified in the task, the value of environment variables `MSO_USERNAME` or `ANSIBLE_NET_USERNAME` will be used instead.
validate_certs boolean	If `false`, SSL certificates will not be validated. This should only set to `false` when used on personally controlled sites using self-signed certificates. If the value is not specified in the task, the value of environment variable `MSO_VALIDATE_CERTS` will be used instead. The default is `true`. Choices: `false` `true`

Notes

Note

The template must exist before using this module in your playbook. Use cisco.mso.ndo_template to create the Tenant Policy template.
The match_rule_policy must exist before using this module in your playbook. Use cisco.mso.ndo_match_rule_policy to create the Match Rule Policy.
This module was written to support Multi Site Orchestrator v2.1 or newer. Some or all functionality may not work on earlier versions.

Examples

- name: Create a Match Prefix
  cisco.mso.ndo_match_rule_prefix:
    host: mso_host
    username: admin
    password: SomeSecretPassword
    template: ansible_test
    match_rule_policy: ansible_match_rule_policy
    prefix: 10.10.10.1/24
    description: Ansible Match Prefix
    aggregate: false
    from_prefix: 0
    to_prefix: 0
    state: present
  register: create_match_prefix

- name: Update a Match Prefix using Match Rule Policy's name
  cisco.mso.ndo_match_rule_prefix:
    host: mso_host
    username: admin
    password: SomeSecretPassword
    template: ansible_test
    match_rule_policy: ansible_match_rule_policy
    prefix: 10.10.10.1/24
    description: Updated Ansible Match Prefix
    aggregate: true
    from_prefix: 25
    to_prefix: 31
    state: present

- name: Update a Match Prefix using Match Rule Policy's UUID
  cisco.mso.ndo_match_rule_prefix:
    host: mso_host
    username: admin
    password: SomeSecretPassword
    template: ansible_test
    match_rule_policy_uuid: "{{ create_match_prefix.current.matchRulePolicyUuid }}"
    prefix: 10.10.10.1/24
    description: Updated Ansible Match Prefix
    aggregate: true
    from_prefix: 25
    to_prefix: 31
    state: present

- name: Query a Match Prefix using Match Rule Policy's name
  cisco.mso.ndo_match_rule_prefix:
    host: mso_host
    username: admin
    password: SomeSecretPassword
    template: ansible_test
    match_rule_policy: ansible_match_rule_policy
    prefix: 10.10.10.1/24
    state: query
  register: query_with_name

- name: Query a Match Prefix using  Match Rule Policy's UUID
  cisco.mso.ndo_match_rule_prefix:
    host: mso_host
    username: admin
    password: SomeSecretPassword
    template: ansible_test
    match_rule_policy_uuid: "{{ create_match_prefix.current.matchRulePolicyUuid }}"
    prefix: 10.10.10.1/24
    state: query
  register: query_with_uuid

- name: Query all Match Prefixes in a Match Rule Policy
  cisco.mso.ndo_match_rule_prefix:
    host: mso_host
    username: admin
    password: SomeSecretPassword
    template: ansible_test
    match_rule_policy: ansible_match_rule_policy
    state: query
  register: query_all_objects

- name: Delete a Match Prefix using Match Rule Policy's name
  cisco.mso.ndo_match_rule_prefix:
    host: mso_host
    username: admin
    password: SomeSecretPassword
    template: ansible_test
    match_rule_policy: ansible_match_rule_policy
    prefix: 10.10.10.1/24
    state: absent

- name: Delete a Match Prefix using Match Rule Policy's UUID
  cisco.mso.ndo_match_rule_prefix:
    host: mso_host
    username: admin
    password: SomeSecretPassword
    template_id: ansible_test
    match_rule_policy_uuid: "{{ create_match_prefix.current.matchRulePolicyUuid }}"
    prefix: 10.10.10.1/24
    state: absent

Authors

Gaspard Micol (@gmicol)

Collection links

© 2012–2018 Michael DeHaan
© 2018–2025 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/projects/ansible/latest/collections/cisco/mso/ndo_match_rule_prefix_module.html