The ansible-nae project provides an Ansible collection for managing and automating your Cisco NAE environment. It consists of a set of modules and roles for performing tasks related to NAE.

Note: This collection is not compatible with versions of Ansible before v2.8.

Ansible v2.8 or newer requests requests_toolbelt jsonpath_ng

Ansible and other requirements must be installed

sudo pip install ansible requests requests-toolbelt jsonpath_ng pathlib filelock

Install the collection

ansible-galaxy collection install cisco.nae

Once the collection is installed, you can use it in a playbook by specifying the full namespace path to the module, plugin and/or role.

- name: NAE Testing
  hosts: all
  vars:
    nae_login: &nae_login
        host: 1.1.1.1
        port: 443  
        username: Admin
        password: password  
    validate_certs: False
  tasks:
  - name: Create a pre-change analysis from file
    nae_prechange:
      <<: *nae_login
      ag_name: FAB2
      file: config.json
      name: New
      state: present
  - name Create Online Assurance Group (with APIC Configuration Export Polciy)
    nae_ag:
      <<: *nae_login
      state: present
      name: AG1
      online: True
      apic_hostnames: 1.2.3.4
      apic_username: admin
      apic_password: password
...

• Configure PCA
• Start/Stop/Query PCA

• Configure Delta Analysis
• Query Delta Analysis Result

• Create/Update/Read/Delete
• • Object Selectors
• • Traffic Selector
• • Compliance Requirement
• • Compliance Requirement Sets
• Create Associate/Disassociate a requirement set with an AG
• Report Creation

• Create/Update/Read/Delete Online Assurance Group
• • Configure F5 Load Balancer
• Create/Update/Read/Delete Offline Assurance Group

• Upload/Delete/Get a File

• Create/Start/Stop/Delete Online Analysis
• Create/Start/Stop/Delete Offline Analysis

• Get smart events by Type/Severity
• Export Smart Events in CSV format
• Smart Event Suppression
• • Create/Update/Delete/Read Even suppression rules
• • Create/Update/Delete/Read Even suppression rules sets
• • Activate a rules set with an AG
• • Associate/Disassociate a requirement set with an AG

• Export TCAM stats as CSV

• Create/Update/Delete/Read Users

If you wanna test the latest code you can:

• Clone this repo
• ansible-galaxy collection build --force
• ansible-galaxy collection install cisco-nae-* --force