Skip to content

Changelog

Tested versions: link

New Features

  • Add Return Material Authorization (RMA) device replacement workflow
  • Add option to control whether fabric site assignments are merged or replaced when managing L3 virtual networks across multiple sites
  • Add catalystcenter_power_profile resource for AP power profiles from catalyst_center.wireless.power_profiles (rules, description); catalystcenter_ap_profile and catalystcenter_wireless_profile depend on it when present
  • Add catalystcenter_anchor_group resource for wireless anchor groups from catalyst_center.wireless.anchor_groups; supports managed and external anchors with up to 3 mobility anchors per group
  • Add anchor_group_name support in wireless profile ssid_details to link SSIDs to anchor groups for guest traffic tunneling
  • Add vlan_group_name support in wireless profile ssid_details for client VLAN load-balancing via WLC VLAN Groups (mutually exclusive with interface_name)
  • Add AP Profile support with catalystcenter_ap_profile resource for managing Access Point profiles including management settings (802.1X, SSH, Telnet, CDP), aWIPS, rogue detection, mesh networking, power profiles, and client limits; NaC data model uses power_profile for the always-on profile and power_profile on each calendar_power_profiles row for scheduled profiles
  • Add Wireless Profile Site Tag support with catalystcenter_wireless_profile_site_tag resource for attaching AP profiles to wireless network profiles per site via site tags
  • Add support for updating device management IP address via catalystcenter_update_device_management_address resource when device_ip in data model differs from current Catalyst Center management IP
  • Add support for selecting replication_mode as either NATIVE_MULTICAST or HEADEND_REPLICATION

Improvements

  • Add support for skipping configuration cleanup during delete to remove unreachable provisioned devices from inventory
  • Allow clean_up_config to be set as a module-level default in defaults.yaml under catalyst_center.inventory.devices.clean_up_config, falling back to per-device setting
  • Add support for deploying templates with the same name across multiple template projects by using a project_name#template_name composite key for resource addressing while preserving backward compatibility when template names are unique

Bug Fixes

  • Fix AP provisioning for devices without IP address
  • Fix issue with provisioning the embedded wireless controller and enabling the edge role in a single Terraform run
  • Fix multicast rendezvous point IP addresses being sent for Fabric-internal RPs; ipv4_address and ipv6_address are now only populated when rp_location is not FABRIC
  • Fix extranet policy to only be managed when not using manage_global_settings with managed_sites, resolving incorrect state evaluation in single-state deployments
  • Fix L3 virtual network global instance to use merge_fabric_sites attribute instead of ignoring fabric_ids changes via lifecycle

Tested versions: link

New Features

  • Add anycast gateway support under fabric zones

Bug Fixes

  • Fix issue with provisioning device under fabric zones
  • Fix issue in fabric SSID-to-VLAN assignment in global/common instance while using multi state
  • Fix issue with deploying composite templates while using multi state
  • Fix wireless SSID auth_type value mapping to correctly transform OPEN_SECURED to OPEN-SECURED for API compatibility
  • Add dependency on provision WLC to wait for managed AP locations in bulk site provision scenarios

Improvements

  • Ignore device tag check for devices in INIT state
  • Allow L2VN anycast gateway creation without specifying VLAN ID

Tested versions: link

Upgrade procedure: link

Breaking Changes

  • Template variable schema updated to support both single strings and lists, which may require manual Terraform state migration
  • Template change detection logic for templates and variables was updated, which may require manual Terraform state migration
  • IP pool type enum values changed: genericGeneric, tunnelTunnel (capitalization change)
  • L2 Virtual Network attribute renamed: associated_l3_virtual_networkassociated_l3_virtual_network_name
  • Wireless network profile attribute renamed: dot11be_profiledot11be_profile_name
  • SNMPv2 credentials description attribute removed from read/write credentials

New Features

  • Add support for 6 additional site hierarchy area levels, extending total support to 10 area levels enabling deep organizational hierarchies up to Global/area/area/area/area/area/area/area/area/area/area
  • Add 802.11be (WiFi 7) profile support with enhanced OFDMA and MU-MIMO settings for next-generation wireless performance
  • Add dot11be_profile_name attribute to wireless network profile SSID details for associating 802.11be profiles (requires IOS 17.15+)
  • Add lldp_level attribute support for LLDP-based network discovery with improved device neighbor detection
  • Add support for IP pool to site assignment for sites and fabric sites with additional site hierarchy area levels

Improvements:

  • Enhance device provisioning grouping logic to support bulk_site_provisioning and managed_sites with proper hierarchical site matching for improved large-scale deployments
  • Add bulk site resource support via use_bulk_api flag for areas, buildings, and floors using new map-based provider resources for faster site creation
  • Add sequential dependencies to network settings resources to prevent concurrent operations and “Global Settings Save is in progress” API errors
  • Add validation for managed_sites and bulk_site_provisioning variables with precondition checks to ensure configuration consistency
  • Add universal 802.11be profile resolution supporting both Terraform-managed and pre-existing profiles

Bug Fixes

  • Fix issue with extranet policies fabric site assignment while using multi state
  • Fix device provisioning grouping under managed sites to prevent empty or incorrect site mappings caused by full path matching instead of parent site hierarchy
  • Fix template parameter handling to correctly process both single string values and list values during deployment
  • Fix issue with L2 virtual networks while using single state deployment
  • Fix credential assignment to Global site in multi-state deployments
  • Fix fabric zones not being created in multi-state deployments due to incorrect site filtering
  • Fix L3 virtual networks not being attached to fabric zones in multi-state deployments
  • Fix issue with template_id for composite templates provisioning to device while using multi state

Tested versions: link

Upgrade procedure: link

Breaking Changes

  • Rename resource catalystcenter_fabric_provision_device to catalystcenter_provision_device (requires manual Terraform state migration)
  • RF Profile enable_radio_type_c attribute is now required (was optional). Added extensive new 6GHz radio properties including standard power service, PSC enforcing, discovery frames, DBS width settings, preamble puncture, Multi-BSSID properties with 802.11ax/be parameters, and FRA properties
  • Discovery snmp_mode enum values updated from uppercase to mixed case (e.g., AUTHPRIVAuthPriv, AUTHNOPRIVAuthNoPriv, NOAUTHNOPRIVNoAuthNoPriv)
  • Update several resources to align with provider version 0.4.0 schema changes (removal of deprecated and internal API attributes)

New Features

  • Add support for Authentication and Policy Servers (ISE and AAA) in System Settings
  • Add Fabric Extranet Policies support for inter-VN communication
  • Add Fabric Multicast support for optimized multicast traffic in SD-Access fabric
  • Add Access Point provisioning with RF profiles and PNP access points support
  • Add Embedded Wireless Controller Node fabric role with wireless capabilities
  • Add interface_description support for port assignments (interface ranges and descriptions)
  • Add group_based_policy_enforcement_enabled to anycast gateways for EXTENDED_NODE pool types and TCP MSS adjustment
  • Add reconfigure attribute to fabric site for applying pending fabric configuration events
  • Add use_bulk_api flag to enable bulk API operations for faster execution
  • Add bulk_site_provisioning variable: Site path for bulk device provisioning. When set with use_bulk_api=true, provisions all devices from this site and all child sites in a single bulk operation. Example: ‘Global/Poland’ will provision all devices under Poland hierarchy
  • Add device_name_to_ip lookup map to support name and FQDN-based device IP resolution for border device mapping
  • Add MD5 checksum to templates variable to trigger redeployment when template variables change
  • Add units_of_measure to floor to select feet or meters for floor dimensions (length, width, height)

Improvements:

  • Consolidate template deployment resources from per-device-template to per-template grouping for improved scalability

Bug Fixes

  • Fix issue with Vlan to SSID mappings while using use_bulk_api
  • Fix issue when creating L2 VN while using multi state
  • Fix issue when creating an L3 VN without a fabric site assignment
  • Fix issue with sites hierarchy while using multi state
  • Fix issue with ip pools reservations while using multi state
  • Fix issue with assigning cli credentials to site while using multi state
  • Fix idempotency issue during brownfield import of border devices
  • Fix issue with assigning ip pool type management and service in ip pools reservations
  • Fix EWLC provisioning
  • Fix issue with provision edge device while using embedded wireless controller
  • Fix multicast resource to tolerate both hostname and FQDN device names
  • Fix floor width, length, height rounding to 3 decimal places
  • Fix transit configuration and L2 handoff dependencies

Tested versions: link

Upgrade procedure: link

  • Add AP Zones support under Wireless Network Profile
  • BREAKING CHANGE: change hostname to fqdn_name in inventory devices data model
  • BREAKING CHANGE: Modify template redeployment, replace deploy_state with redeploy_template attribute with values ALWAYS, ON_CHANGE, NEVER
  • BREAKING CHANGE: Add ip_pool_name and rename name to l3_virtual_network under l2_handoff with anycast gateway data model
  • BREAKING CHANGE: L3 Handoff Ip Transit resource creation now leverages bulk operations, allowing multiple objects to be provisioned in one API call for faster deployments.
  • BREAKING CHANGE: Replace name with ip_pool_name under Anycast Gateway data model
  • BREAKING CHANGE: Modify data model for Lan Automation
  • Fix issue with assigning Local to VLAN to wireless profile for Flex Connect Local Switching
  • Fix issue with assigning L3 Virtual Networks to Fabric Zones.
  • BREAKING_CHANGE: Fix issue with assigning UseLoopBack as preferred_mgmt_ip_method to Discovery.
  • Fix issue with assigning global_credential_id_list to Discovery.
  • BREAKING CHANGE: Replace resource for assigining network profile to site

Tested versions: link

  • Add support for a new hierarchy area level: Global/area/area/area/area
  • Fix issue with assigning security_group_name to fabric port assignments
  • BREAKING CHANGE: Change data model structure for l3_virtual_networks to support L3 VNs on global level
  • Add support for reprovisioning wireless controller device
  • Add support for separating global and site-specific configuration
    Terraform configurations can now be split into multiple state files (e.g., by using separate folders with their own main.tf). New options allow you to manage global settings independently from site-specific resources, and to control whether only selected sites or also their child sites are managed in each configuration.
  • BREAKING CHANGE: Fix an issue where devices that were initially provisioned could not be successfully reprovisioned after being added to a Fabric Site

Tested versions: link

  • Add support for assigning tag to device
  • Add support for CORE and DISTRIBUTION role
  • Fix wireless ssid radio type mapping to match API response
  • Fix issue with ssid to vlan mapping in fabric
  • Add support for same L3 Virtual Networks under multiple Anycast Gateways
  • Add experimental feature: fabric_zone
  • BREAKING CHANGE: Add support to update authentication_template settings globally and on fabric site level
  • Add ASSIGN state for assigning device to site without provisioning
  • Fix pnp issue when adding multiple devices
  • Add support for .vtl and .vlt extensions for velocity templates
  • Add support for INFRA_VN and DEFAULT_VN L3 Virtual Networks

Tested versions: link

  • Fix issue with assigning the same VLAN to different anycast gateways from different fabric sites
  • Fix issue with provision non fabric wireless controller
  • Add support for SDA Transit

Tested versions: link

  • Add support for multiple interfaces under l3_handoffs
  • Add redeploy option to catalystcenter_deploy_template
  • Add non fabric device provisioning
  • Update banner settings to use allow banner settings to be assigned to Global area
  • BREAKING CHANGE: rename catalystcenter_fabric_port_assignment to catalystcenter_fabric_port_assignments
  • Fix issue with assigning same L3 VN to multiple fabric_sites
  • Removed network_profile dependencies for deploying templates
  • Fix issue with pnp onboarding templates

Tested versions: link

  • Use new API endpoint for creating L3 Virtual Network

Tested versions: link

  • Initial release