netapp.ontap.na_ontap_firewall_policy – NetApp ONTAP Manage a firewall policy

• Synopsis
• Requirements
• Parameters
• Notes
• Examples

Synopsis

• Configure firewall on an ONTAP node and manage firewall policy for an ONTAP SVM

Requirements

The below requirements are needed on the host that executes this module.

• A physical or virtual clustered Data ONTAP system. The modules support Data ONTAP 9.1 and onward.
• Ansible 2.9
• Python package ipaddress. Install using ‘pip install ipaddress’
• Python3 netapp-lib (2018.11.13) or later. Install using ‘pip install netapp-lib’
• REST support requires ONTAP 9.6 or later.
• To enable http on the cluster you must run the following commands ‘set -privilege advanced;’ ‘system services web modify -http-enabled true;’
• netapp-lib 2020.3.12 is strongly recommended as it provides better error reporting for connection issues.

Parameters

Notes

Examples

- name: create firewall Policy
  netapp.ontap.na_ontap_firewall_policy:
    state: present
    allow_list: [1.2.3.0/24,1.3.0.0/16]
    policy: pizza
    service: http
    vserver: ci_dev
    hostname: "{{ netapp hostname }}"
    username: "{{ netapp username }}"
    password: "{{ netapp password }}"

- name: Modify firewall Policy
  netapp.ontap.na_ontap_firewall_policy:
    state: present
    allow_list: [1.5.3.0/24]
    policy: pizza
    service: http
    vserver: ci_dev
    hostname: "{{ netapp hostname }}"
    username: "{{ netapp username }}"
    password: "{{ netapp password }}"

- name: Destory firewall Policy
  netapp.ontap.na_ontap_firewall_policy:
    state: absent
    policy: pizza
    service: http
    vserver: ci_dev
    hostname: "{{ netapp hostname }}"
    username: "{{ netapp username }}"
    password: "{{ netapp password }}"

- name: Enable firewall and logging on a node
  netapp.ontap.na_ontap_firewall_policy:
    node: test-vsim1
    enable: enable
    logging: enable
    hostname: "{{ netapp hostname }}"
    username: "{{ netapp username }}"
    password: "{{ netapp password }}"

Authors

• NetApp Ansible Team (@carchi8py) <ng-ansibleteam@netapp.com>