switch_change_all.yml

---

# Copyright 2019-2025 Broadcom. All rights reserved.
# The term 'Broadcom' refers to Broadcom Inc. and/or its subsidiaries.
# GNU General Public License v3.0+
# (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)


- hosts: san_eng_zone_seed_san_a
  gather_facts: False

  vars:
    credential:
      fos_ip_addr: "{{fos_ip_addr}}"
      fos_user_name: "{{fos_user_name}}"
      fos_password: "{{fos_password}}"
      https: "{{fos_https}}"

  tasks:

  - name: disable switch
    brocade_fibrechannel_switch:
      credential: "{{credential}}"
      vfid: -1
      switch:
        enabled_state: False

  - name: change all switch configuration
    brocade_fibrechannel_switch:
      credential: "{{credential}}"
      vfid: -1
      switch:
        user_friendly_name: "new_switch_name"
        fabric_user_friendly_name: "new_fabric_name"
        domain_id: 2
        banner: "MORE AUTHORIZED USERS ONLY"
        dynamic_load_sharing: "two-hop-lossless-dls"
        domain_name: "google.com"
        dns_servers:
          dns_server:
            - "9.8.8.8"

  - name: change all fabric configuration
    brocade_fibrechannel_configuration_fabric:
      credential: "{{credential}}"
      vfid: -1
      fabric:
        insistent_domain_id_enabled: False
        in_order_delivery_enabled: True
        fabric_principal_enabled: False
        fabric_principal_priority: "0"
    register: result

#  - debug: var=result

  - name: change all port configuration. if running on a platform where credit recovery is supported, the line can be uncommented to update the mode.
    brocade_fibrechannel_configuration_port_configuration:
      credential: "{{credential}}"
      vfid: -1
      port_configuration:
        dynamic_portname_format: "T.A.R"
        portname_mode: "off"
#        credit_recovery_mode: "off"

  - name: enable switch
    brocade_fibrechannel_switch:
      credential: "{{credential}}"
      vfid: -1
      switch:
        enabled_state: True

  - name: change all chassis configuration
    brocade_chassis:
      credential: "{{credential}}"
      vfid: -1
      chassis:
        chassis_user_friendly_name: "new_chassis_name"
        # shell_timeout is the REST name for telnet_timeout
        telnet_timeout: 60

  - name: Configure ports
    brocade_interface_fibrechannel:
      credential: "{{credential}}"
      vfid: -1
      ports:
        - name: "0/0"
          enabled_state: True 
          npiv_pp_limit: 126
        - name: "0/1"
          persistent_disable: False

  # pause for 15 seconds to make sure fabric is stable for
  # zoning commit
  - pause: seconds=15

  - name: change all zoning configuration
    brocade_zoning_default_zone:
      credential: "{{credential}}"
      vfid: -1
      default_zone_access: noaccess

  - name: change all clock server configuration
    brocade_time_clock_server:
      credential: "{{credential}}"
      vfid: -1
      clock_server:
        ntp_server_address:
          server_address:
            - "10.38.2.80"
            - "10.38.2.81"

  - name: change all time zone configuration
    brocade_time_time_zone:
      credential: "{{credential}}"
      vfid: -1
      time_zone:
        name: "America/Los_Angeles"

  - name: change all audit configuration
    brocade_logging_audit:
      credential: "{{credential}}"
      vfid: -1
      audit:
        audit_enabled: False
        filter_class_list:
          filter_class:
          - "zone"
          - "security"
          - "configuration"
          - "firmware"
          - "fabric"
          - "ls"
        severity_level: "warning"

  - name: change all syslog configuration
    brocade_logging_syslog_server:
      credential: "{{credential}}"
      vfid: -1
      syslog_servers:
        - port: 514
          secure_mode: False
          server: "10.155.2.152"

  - name: change all snmp system configuration
    brocade_snmp_system:
      credential: "{{credential}}"
      vfid: -1
      snmp_system:
        audit_interval: 60
        contact: "more Field Support."
        description: "more DemoSwitch"
        encryption_enabled: True
        location: "more San Jose"
        security_get_level: 0
        security_set_level: 3
        snmpv1_enabled: False

  - name: snmp v1 accounts
    brocade_snmp_v1_account:
      credential: "{{credential}}"
      vfid: -1
      v1_accounts:
        - index: 1
          community_name: "Secret code old"
        - index: 2
          community_name: "OrigEquipMfr old"
        - index: 3
          community_name: "private old"
        - index: 4
          community_name: "public old"
        - index: 5
          community_name: "common old"
        - index: 6
          community_name: "FibreChannel old"

  - name: v1 traps
    brocade_snmp_v1_trap:
      credential: "{{credential}}"
      vfid: -1
      v1_traps:
        - index: 1
          host: "10.10.10.22"
          port_number: 1022
          trap_severity_level: "critical"

  - name: v3 accounts - setup non-password attributes
    brocade_snmp_v3_account:
      credential: "{{credential}}"
      vfid: -1
      v3_accounts:
        - index: 1
          authentication_protocol: "sha"
          privacy_protocol: "des"
          user_name: "snmpadmin11"
        - index: 2
          authentication_protocol: "md5"
          privacy_protocol: "aes128"
          user_name: "snmpadmin22"

  - name: v3 traps
    brocade_snmp_v3_trap:
      credential: "{{credential}}"
      vfid: -1
      v3_traps:
        - trap_index: 1
          host: "10.10.10.31"
          informs_enabled: false
          port_number: 1031
          trap_severity_level: "critical"
          usm_index: 1
        - trap_index: 2
          host: "10.10.10.32"
          informs_enabled: false
          port_number: 1032
          trap_severity_level: "warning"
          usm_index: 2
        - trap_index: 3
          host: "0.0.0.0"
          informs_enabled: false
          port_number: 162
          trap_severity_level: "none"
          usm_index: 3
        - trap_index: 4
          host: "0.0.0.0"
          informs_enabled: false
          port_number: 162
          trap_severity_level: "none"
          usm_index: 4
        - trap_index: 5
          host: "0.0.0.0"
          informs_enabled: false
          port_number: 162
          trap_severity_level: "none"
          usm_index: 5
        - trap_index: 6
          host: "0.0.0.0"
          informs_enabled: false
          port_number: 162
          trap_severity_level: "none"
          usm_index: 6

  - name: change global inform attribute after removing all from v3 traps
    brocade_snmp_system:
      credential: "{{credential}}"
      vfid: -1
      snmp_system:
        informs_enabled: False

  - name: activate default ipv4 before deleting previously created custom policy
    brocade_security_ipfilter_policy:
      credential: "{{credential}}"
      vfid: -1
      active_policy: "default_ipv4"

  - name: delete custom policy
    brocade_security_ipfilter_policy:
      credential: "{{credential}}"
      vfid: -1
      delete_policies:
        - name: "ipv4_telnet_http"

  - name: enable root & user
    brocade_security_user_config:
      credential: "{{credential}}"
      vfid: -1
      user_configs:
        - name: "user"
          account_enabled: True
        - name: "root"
          account_enabled: True

  - name: delete accounts
    brocade_security_user_config:
      credential: "{{credential}}"
      vfid: -1
      delete_user_configs:
        - name: "myaccount"
        - name: "youraccount"

  - name: configure relay server
    brocade_maps_maps_config:
      credential: "{{credential}}"
      vfid: -1
      maps_config:
        relay_ip_address: "10.10.10.11"
        domain_name: "dd.com"
        sender_address: "s@dd.com"
        recipient_address_list:
          recipient_address:
            - "r@dd.com"
            - "r@rr.com"