Status of brocade_security_ipfilter_rule module?

[mgoetze5]

When trying to use brocade_security_ipfilter_rule I get errors such as

    PATCH_resp_code: 405
    PATCH_resp_data:
        errors:
            '@xmlns': urn:ietf:params:xml:ns:yang:ietf-restconf
            error:
                error-app-tag: Error
                error-info:
                    error-code: '26'
                    error-module: rest
                error-message: Method not supported
                error-tag: operation-not-supported
                error-type: application
    PATCH_resp_reason: Method Not Allowed

I notice this module is used in switch_initial_config.yml, which hasn't been updated for 5 years, but in template_switch_initial_config.yml this is done with brocade_list_obj instead. In general, it's unclear when to look at which of these files and some additional documentation to clarify their purpose would be appreciated.

Is brocade_security_ipfilter_rule supposed to work with current ansible and FOS versions? If yes, can you point to a working example?

[mgoetze5]

Update: it works again if I delete all existing custom policies. But this is not acceptable behavior - something as critical as the firewall needs to be especially robust and idempotent.

For reference, I'm using FOS 9.2.0c.

[prasad-valmeti-broadcom]

The IP filter rule has a named module, brocade_security_ipfilter_rule, which should be used instead of list_obj. Usually, list_obj is used for modules that don't have named modules.

Please share the FOS Ansible version used. Does the example in switch_initial_config.yml not work?
If you can share the logs of the sample playbook with the —vvvv option, it will help us determine what PATCH request was sent.

[mgoetze5]

I'm using version 2.0.0 of the ansible modules.

At this moment brocade_security_ipfilter_rule is working for me, the problems I was having seem only intermittently reproducible. I suspect I was seeing a bug in the underlying FOS REST implementation and not in the Ansible module.

Anyway, if we are not meant to use brocade_list_obj for this purpose then I would suggest not having examples of it in the repository (template_switch_initial_config.yml). In general, it would be nice for each of the examples to have a short comment documenting what the example is meant to accomplish.

[prasad-valmeti-broadcom]

Thanks for the suggestion. In the next release, we will update the example with the named module and documentation.