cisco.ise.allowedprotocols module – Resource module for Allowedprotocols
Note
This module is part of the cisco.ise collection (version 3.0.0).
To install it, use: ansible-galaxy collection install cisco.ise.
You need further requirements to be able to use this module,
see Requirements for details.
To use it in a playbook, specify: cisco.ise.allowedprotocols.
New in cisco.ise 1.0.0
Synopsis
Manage operation create of the resource Allowedprotocols.
Note
This module has a corresponding action plugin.
Requirements
The below requirements are needed on the host that executes this module.
ciscoisesdk >= 2.0.1
python >= 3.5
Parameters
Parameter |
Comments |
|---|---|
AllowEapFast flag. Choices: |
|
AllowEapMd5 flag. Choices: |
|
AllowEapTls flag. Choices: |
|
AllowEapTtls flag. Choices: |
|
AllowMsChapV1 flag. Choices: |
|
AllowMsChapV2 flag. Choices: |
|
AllowPapAscii flag. Choices: |
|
AllowPreferredEapProtocol flag. Choices: |
|
AllowWeakCiphersForEap flag. Choices: |
|
Description. |
|
DisplayAdditionalTLSParams flag. Choices: |
|
Allowedprotocols’s eapFast. |
|
AllowEapFastEapGtc flag. Choices: |
|
The allowEapFastEapGtcPwdChange is required only if allowEapFastEapGtc is true, otherwise it must be ignored. Choices: |
|
The allowEapFastEapGtcPwdChangeRetries is required only if allowEapFastEapGtc is true, otherwise it must be ignored. Valid range is 0-3. |
|
AllowEapFastEapMsChapV2 flag. Choices: |
|
The allowEapFastEapMsChapV2PwdChange is required only if allowEapFastEapMsChapV2 is true, otherwise it must be ignored. Choices: |
|
The allowEapFastEapMsChapV2PwdChangeRetries is required only if eapTtlsEapMsChapV2 is true, otherwise it must be ignored. Valid range is 0-3. |
|
AllowEapFastEapTls flag. Choices: |
|
The allowEapFastEapTlsAuthOfExpiredCerts is required only if allowEapFastEapTls is true, otherwise it must be ignored. Choices: |
|
The eapFastDontUsePacsAcceptClientCert is required only if eapFastUsePacs is FALSE, otherwise it must be ignored. Choices: |
|
The eapFastDontUsePacsAllowMachineAuthentication is required only if eapFastUsePacs is FALSE, otherwise it must be ignored. Choices: |
|
EapFastEnableEAPChaining flag. Choices: |
|
EapFastUsePacs flag. Choices: |
|
The eapFastUsePacsAcceptClientCert is required only if eapFastUsePacsAllowAuthenProvisioning is true, otherwise it must be ignored. Choices: |
|
The eapFastUsePacsAllowAnonymProvisioning is required only if eapFastUsePacs is true, otherwise it must be ignored. Choices: |
|
The eapFastUsePacsAllowAuthenProvisioning is required only if eapFastUsePacs is true, otherwise it must be ignored. Choices: |
|
The eapFastUsePacsAllowMachineAuthentication is required only if eapFastUsePacs is true, otherwise it must be ignored. Choices: |
|
The eapFastUsePacsAuthorizationPacTtl is required only if eapFastUsePacsStatelessSessionResume is true, otherwise it must be ignored. |
|
The eapFastUsePacsAuthorizationPacTtlUnits is required only if eapFastUsePacsStatelessSessionResume is true, otherwise it must be ignored. Allowed Values SECONDS, MINUTES, HOURS, DAYS, WEEKS. |
|
The eapFastUsePacsMachinePacTtl is required only if eapFastUsePacsAllowMachineAuthentication is true, otherwise it must be ignored. |
|
The eapFastUsePacsMachinePacTtlUnits is required only if eapFastUsePacsAllowMachineAuthentication is true, otherwise it must be ignored. Allowed Values SECONDS, MINUTES, HOURS, DAYS, WEEKS. |
|
The eapFastUsePacsServerReturns is required only if eapFastUsePacsAllowAuthenProvisioning is true, otherwise it must be ignored. Choices: |
|
The eapFastUsePacsStatelessSessionResume is required only if eapFastUsePacs is true, otherwise it must be ignored. Choices: |
|
The eapFastUsePacsTunnelPacTtl is required only if eapFastUsePacs is true, otherwise it must be ignored. |
|
The eapFastUsePacsTunnelPacTtlUnits is required only if eapFastUsePacs is true, otherwise it must be ignored. Allowed Values SECONDS, MINUTES, HOURS, DAYS, WEEKS. |
|
The eapFastUsePacsUseProactivePacUpdatePrecentage is required only if eapFastUsePacs is true, otherwise it must be ignored. |
|
Allowedprotocols’s eapTls. |
|
AllowEapTlsAuthOfExpiredCerts flag. Choices: |
|
EapTlsEnableStatelessSessionResume flag. Choices: |
|
The eapTlsSessionTicketPrecentage is required only if eapTlsEnableStatelessSessionResume is true, otherwise it must be ignored. |
|
Time to live. The eapTlsSessionTicketTtl is required only if eapTlsEnableStatelessSessionResume is true, otherwise it must be ignored. |
|
Time to live time units. The eapTlsSessionTicketTtlUnits is required only if eapTlsEnableStatelessSessionResume is true, otherwise it must be ignored. Allowed Values SECONDS, MINUTES, HOURS, DAYS, WEEKS. |
|
EapTlsLBit flag. Choices: |
|
Allowedprotocols’s eapTtls. |
|
EapTtlsChap flag. Choices: |
|
EapTtlsEapMd5 flag. Choices: |
|
EapTtlsEapMsChapV2 flag. Choices: |
|
The eapTtlsEapMsChapV2PwdChange is required only if eapTtlsEapMsChapV2 is true, otherwise it must be ignored. Choices: |
|
The eapTtlsEapMsChapV2PwdChangeRetries is required only if eapTtlsEapMsChapV2 is true, otherwise it must be ignored. Valid range is 0-3. |
|
EapTtlsMsChapV1 flag. Choices: |
|
EapTtlsMsChapV2 flag. Choices: |
|
EapTtlsPapAscii flag. Choices: |
|
Id. |
|
Flag for Identity Services Engine SDK to enable debugging. Choices: |
|
The Identity Services Engine hostname. |
|
The Identity Services Engine password to authenticate. |
|
Timeout (in seconds) for RESTful HTTP requests. Default: :ansible-option-default:`60` |
|
The Identity Services Engine username to authenticate. |
|
Flag that informs the SDK whether to use the Identity Services Engine’s API Gateway to send requests. If it is true, it uses the ISE’s API Gateway and sends requests to https://{{ise_hostname}}. If it is false, it sends the requests to https://{{ise_hostname}}:{{port}}, where the port value depends on the Service used (ERS, Mnt, UI, PxGrid). Choices: |
|
Flag that informs the SDK whether we send the CSRF token to ISE’s ERS APIs. If it is True, the SDK assumes that your ISE CSRF Check is enabled. If it is True, it assumes you need the SDK to manage the CSRF token automatically for you. Choices: |
|
Flag to enable or disable SSL certificate verification. Choices: |
|
Informs the SDK which version of Identity Services Engine to use. |
|
Flag for Identity Services Engine SDK to enable automatic rate-limit handling. Choices: |
|
Name. |
|
Allowedprotocols’s peap. |
|
AllowPeapEapGtc flag. Choices: |
|
The allowPeapEapGtcPwdChange is required only if allowPeapEapGtc is true, otherwise it must be ignored. Choices: |
|
The allowPeapEapGtcPwdChangeRetries is required only if allowPeapEapGtc is true, otherwise it must be ignored. Valid range is 0-3. |
|
AllowPeapEapMsChapV2 flag. Choices: |
|
The allowPeapEapMsChapV2PwdChange is required only if allowPeapEapMsChapV2 is true, otherwise it must be ignored. Choices: |
|
The allowPeapEapMsChapV2PwdChangeRetries is required only if allowPeapEapMsChapV2 is true, otherwise it must be ignored. Valid range is 0-3. |
|
AllowPeapEapTls flag. Choices: |
|
The allowPeapEapTlsAuthOfExpiredCerts is required only if allowPeapEapTls is true, otherwise it must be ignored. Choices: |
|
AllowPeapV0 flag. Choices: |
|
RequireCryptobinding flag. Choices: |
|
The preferredEapProtocol is required only if allowPreferredEapProtocol is true, otherwise it must be ignored. Allowed Values EAP_FAST, PEAP, LEAP, EAP_MD5, EAP_TLS, EAP_TTLS, TEAP. |
|
ProcessHostLookup flag. Choices: |
|
RequireMessageAuth flag. Choices: |
|
Allowedprotocols’s teap. |
|
AcceptClientCertDuringTunnelEst flag. Choices: |
|
AllowDowngradeMsk flag. Choices: |
|
AllowTeapEapMsChapV2 flag. Choices: |
|
The allowTeapEapMsChapV2PwdChange is required only if allowTeapEapMsChapV2 is true, otherwise it must be ignored. Choices: |
|
The allowTeapEapMsChapV2PwdChangeRetries is required only if allowTeapEapMsChapV2 is true, otherwise it must be ignored. Valid range is 0-3. |
|
AllowTeapEapTls flag. Choices: |
|
The allowTeapEapTlsAuthOfExpiredCerts is required only if allowTeapEapTls is true, otherwise it must be ignored. Choices: |
|
EnableEapChaining flag. Choices: |
Notes
Note
SDK Method used are allowedprotocols.Allowedprotocols.create_allowedprotocols,
Paths used are post /allowedprotocols/,
Does not support
check_modeThe plugin runs on the control node and does not use any ansible connection plugins, but instead the embedded connection manager from Cisco ISE SDK
The parameters starting with ise_ are used by the Cisco ISE Python SDK to establish the connection
Examples
---
- name: Create
cisco.ise.allowedprotocols:
ise_hostname: "{{ise_hostname}}"
ise_username: "{{ise_username}}"
ise_password: "{{ise_password}}"
ise_verify: "{{ise_verify}}"
state: present
allowChap: false
allowEapFast: true
allowEapMd5: true
allowEapTls: true
allowEapTtls: true
allowLeap: false
allowMsChapV1: false
allowMsChapV2: false
allowPapAscii: true
allowPeap: true
allowPreferredEapProtocol: true
allowTeap: true
allowWeakCiphersForEap: false
description: example allowed protocols
displayAdditionalTLSParams: false
eapFast:
allowEapFastEapGtc: true
allowEapFastEapGtcPwdChange: true
allowEapFastEapGtcPwdChangeRetries: 1
allowEapFastEapMsChapV2: true
allowEapFastEapMsChapV2PwdChange: true
allowEapFastEapMsChapV2PwdChangeRetries: 1
allowEapFastEapTls: true
allowEapFastEapTlsAuthOfExpiredCerts: false
eapFastEnableEAPChaining: false
eapFastUsePacs: true
eapFastUsePacsAllowAnonymProvisioning: false
eapFastUsePacsAllowAuthenProvisioning: false
eapFastUsePacsAllowMachineAuthentication: false
eapFastUsePacsStatelessSessionResume: false
eapFastUsePacsTunnelPacTtl: 7776000
eapFastUsePacsTunnelPacTtlUnits: SECONDS
eapFastUsePacsUseProactivePacUpdatePrecentage: 10
eapTls:
allowEapTlsAuthOfExpiredCerts: false
eapTlsEnableStatelessSessionResume: false
eapTlsLBit: false
eapTtls:
eapTtlsChap: true
eapTtlsEapMd5: true
eapTtlsEapMsChapV2: true
eapTtlsEapMsChapV2PwdChange: true
eapTtlsEapMsChapV2PwdChangeRetries: 1
eapTtlsMsChapV1: true
eapTtlsMsChapV2: true
eapTtlsPapAscii: true
fiveG: false
id: f75760e7-a4f9-40ef-93bb-88a97e9fb171
name: allowedprotocols1
peap:
allowPeapEapGtc: false
allowPeapEapMsChapV2: true
allowPeapEapMsChapV2PwdChange: true
allowPeapEapMsChapV2PwdChangeRetries: 1
allowPeapEapTls: true
allowPeapEapTlsAuthOfExpiredCerts: false
allowPeapV0: false
requireCryptobinding: false
preferredEapProtocol: PEAP
processHostLookup: true
requireMessageAuth: false
rsaPss: false
teap:
acceptClientCertDuringTunnelEst: true
allowDowngradeMsk: true
allowTeapEapMsChapV2: true
allowTeapEapMsChapV2PwdChange: true
allowTeapEapMsChapV2PwdChangeRetries: 3
allowTeapEapTls: true
allowTeapEapTlsAuthOfExpiredCerts: false
enableEapChaining: false
Return Values
Common return values are documented here, the following are the fields unique to this module:
Key |
Description |
|---|---|
A dictionary or list with the response returned by the Cisco ISE Python SDK Returned: always |