Managing Cisco ACLs with Ansible

[amaslobojev]

 Hello Cisco Community,

i am working on development of Ansible playbook to automate ACL management on Cisco devices within our network.

There are some examples available which would fit for my task, but almost all of them remove an ACL first before apply the new configuration, like

- name: "Configure ACL"

   cisco.nxos.nxos_config:

   lines: "{{ acl_lines }}"

   parents: "ip access-list standard test"

   before: "no ip access-list standard test"

   replace: block

The main concern with approach i have is that between the "no" command and time the new access list is applied there is no ACL and if something breaks in-between no access list will be configured.

My question is - is there any other approach how to safely apply the new ACL configuration with Ansible, etc. ?

Any hints and suggestions are highly appreciated.

Thanks in advance!

Best regards,

Alex.

[packemon]

I realize this is beyond old, but in case someone stumbles across this looking for an answer...

Use the acl resource module with the "merge" state and it will not mess with any other entry other than what you specify. You can find documentation for this here: https://docs.ansible.com/ansible/latest/collections/cisco/nxos/nxos_acl_interfaces_module.html#ansible-collections-cisco-nxos-nxos-acl-interfaces-module