Changelog

Tested versions: link

Release Tag 0.5.1: link

Modified:

• Deprecated keys under vxlan.global that are now available only under the following fabric types:
  • iBGP EVPN fabric type: vxlan.global.ibgp
  • External fabric type: vxlan.global.external
• Improved performance when managing interfaces, fabric links, networks, VRFs, vPC peers, vPC Domain IDs, and underlay IP addresses when the force_run_all flag is set to false. These performance improvements are not currently supported for pipeline workflows.

Fixed:

• Fix validation rules 402 and 403 referencing incorrect netflow fabric settings keys (#649)
• Fix MSD child fabrics not deploying parent VRF and Network property changes (#652)
• Fix validation rule 204 for external fabric bootstrap configuration (#622)
• Fix validation rule pickup conditions for backwards compatibility (#623)
• Fix overlay cross-check validation to include vPC peers (#624)
• Fix fabric links to allow bidirectional configuration (#629)
• Fix interface configuration issues (#632)
• Fix overlay VRF and Network state validation before deployment (#633)
• Fix vPC interface validation to verify switch is vPC peer (#637)
• Fix hostname setting when host_11_1 template policy not found (#642)

Tested versions: link

Release Tag 0.5.0: link

Added:

• Added initial support for VXLAN eBGP EVPN fabric type that includes:
  • Fabric management
  • Underlay & Overlay configuration using provided documentation and examples: https://netascode.cisco.com/docs/data_models/vxlan/global/global/
  • Device discovery
  • vPC
  • Interfaces
  • Overlay (VRFs and Networks)
  • Policy
  • Note: eBGP EVPN fabric type introduces and only supports global configuration under vxlan.global.ebgp
• Added additional backwards compatibility support for NDFC 3.1
• Added support for creating and managing vPC domain / vPC pair in data model for external fabric
• Added support for L3VNI without VLAN for iBGP and eBGP EVPN fabric types
• Added support for additional LACP attributes in data model for port-channels
• Added support for individual per-switch credentials
  • Support documentation can be found here: Switch Credentials Guide
• Added support for breakout interfaces with pre-provision device workflows
• Added initial support for unified Nexus Dashboard 4.1 via legacy, backwards compatible NDFC APIs

Modified:

• Updated iac-validate to use nac-validate in validate role
• Updated vxlan.global keys to align with supported fabric types:
  • iBGP EVPN fabric type should use: vxlan.global.ibgp
  • External fabric type should use: vxlan.global.external
  • eBGP EVPN fabric type introduces properties vxlan.global.ebgp starting in this release, 0.5.0
  • Backwards compatibility is provided for vxlan.global keys for iBGP and External fabric types
• Updated pointer to defaults used for ISN and MSD fabric types to use defaults.vxlan.multisite keys

Fixed:

• Fix diff detection failing after running validate role only (#301)
• Fix SGT and underlay IPv6 version compatibility check for NDFC 12.2.x+ (#315)
• Fix migration from iac packages to nac packages (#337)
• Fix MSD deploy task for child fabrics intermittent failures (#383)
• Fix Python 3.12 invalid escape sequence warnings (#390)
• Fix vPC peering creation in external fabric (#407)
• Fix fabric management failure with IS-IS underlay in NDFC 12.2.x (#413)
• Fix RP configuration with RP_COUNT=4, bidir mode, and RP loopbacks (#425)
• Fix POAP error when fabric doesn’t exist (#430)
• Fix vPC port-channel speed not being set correctly (#435)
• Fix orphan port configuration not being applied (#439)
• Fix port-channel and vPC member interface settings (#441)
• Fix freeform configuration support for individual VRF attachments (#442)
• Fix manual IP allocation and fabric peering issues (#443)
• Fix remove role handling of vPC fabric peering (#445)
• Fix validation rule 204 for bootstrap without local DHCP (#447)
• Fix removal of unmanaged NDFC devices on ISN/External fabrics (#451)
• Fix interface policy template application (#457)
• Fix VRF deployment with custom routing protocols (#458)
• Fix network attachment with IPv6 gateway addresses (#466)
• Fix multisite VRF template rendering (#468)
• Fix breakout interface pre-provision workflow (#472)
• Fix eBGP fabric underlay configuration (#490)
• Fix per-switch credentials implementation (#505)
• Fix L3VNI without VLAN support for iBGP (#513)
• Fix eBGP overlay BGP peer configuration (#528)
• Fix LACP port-channel attributes handling (#532)
• Fix external fabric vPC domain creation (#537)
• Fix NDFC 4.1 API compatibility (#540)
• Fix eBGP fabric ASN assignment logic (#545)
• Fix spine BGP configuration in eBGP fabrics (#550)
• Fix leaf BGP ASN configuration modes (#551)
• Fix border gateway BGP peering (#553)
• Fix eBGP underlay routing protocol settings (#555)
• Fix super spine BGP configuration (#558)
• Fix eBGP fabric global configuration keys (#566)
• Fix NDFC 3.1 backwards compatibility (#589)
• Fix data model validation for new fabric types (#595)

Tested versions: link

Release Tag 0.4.3: link

Added:

• Added support for manual underlay IP address allocation
• Added support for manually allocating vPC domain IDs
• Added support for breakout interfaces
• Added support for dot1q interface type
• Added support for orphan ports, duplex, and native VLAN for interface types access, access port-channel, trunk, and trunk port-channel

Modified:

• Updated defaults to include domain_id and lb_id defaults for PTP
• Removed the requirement to have ports defined for vxlan.overlay.networks.network_attach_groups in VXLAN fabrics
• Updated POAP and pre-provision workflow:
  • This update allows devices to be discovered using discovery mode, poap and pre-provision workflows. Previously the solution did not allow both poap and pre-provision in the same datafile.
  • Note: The poap.bootstrap setting under the device is only used for POAP mode without pre-provision first. It is not used by a pre-provision or pre-provision + POAP workflow.

Fixed:

• Fix manual underlay IP address allocation edge cases (#32)
• Fix vPC domain ID manual allocation validation (#388)
• Fix breakout interface configuration with pre-provision (#391)
• Fix dot1q interface type configuration (#400)
• Fix orphan port and duplex settings for access interfaces (#405)
• Fix native VLAN configuration for trunk interfaces (#409)
• Fix PTP domain_id and lb_id defaults handling (#411)
• Fix network attach groups port requirement for VXLAN fabrics (#421)
• Fix POAP and pre-provision workflow compatibility (#424)

Tested versions: link

Release Tag 0.4.2: link

Added:

• Added support for the following model properties:
  • vxlan.multisite.layer2_vni_range
  • vxlan.multisite.layer3_vni_range
  • vxlan.global.layer2_vni_range
  • vxlan.global.layer3_vni_range
  • vxlan.global.layer2_vlan_range
  • vxlan.global.layer3_vlan_range
  • vxlan.underlay.ipv6.underlay_routing_loopback_ip_range
  • vxlan.underlay.ipv6.underlay_vtep_loopback_ip_range
  • vxlan.underlay.ipv6.underlay_rp_loopback_ip_range
  • vxlan.underlay.ipv6.underlay_subnet_ip_range
  • vxlan.underlay.multicast.ipv4.authentication_enable
  • vxlan.underlay.multicast.ipv4.authentication_key
  • vxlan.underlay.multicast.ipv6.group_subnet
  • vxlan.underlay.multicast.ipv6.trmv6_enable
  • vxlan.underlay.multicast.ipv6.trmv6_default_group

Modified:

• The following keys have been relocated under vxlan.underlay.ipv4 and data model files will need to be updated accordingly:
  • vxlan.underlay.ipv4.fabric_interface_numbering
  • vxlan.underlay.ipv4.subnet_mask
• The following keys have been relocated under vxlan.underlay.multicast.ipv4 and data model files will need to be updated accordingly:
  • vxlan.underlay.multicast.ipv4.group_subnet
  • vxlan.underlay.multicast.ipv4.trm_enable
  • vxlan.underlay.multicast.ipv4.trm_default_group

Fixed:

• Fix multisite layer2/layer3 VNI range configuration (#239)
• Fix multisite layer2/layer3 VLAN range settings (#262)
• Fix IPv6 underlay loopback IP range allocation (#349)
• Fix IPv6 underlay VTEP loopback IP range (#350)
• Fix IPv6 underlay RP loopback configuration (#352)
• Fix IPv4 multicast authentication settings (#371)
• Fix IPv6 multicast group subnet configuration (#373)
• Fix underlay IPv4 key relocation to new structure (#380)
• Fix multicast IPv4 key relocation under new hierarchy (#386)

Tested versions: link

Release Tag 0.4.1: link

Added:

• Added ability to manage edge connections to external fabrics
• Added support for checking if a fabric is in a multisite domain and disallow management of vxlan.overlay.vrfs and vxlan.overlay.networks under the child fabric

Modified:

• Added various multisite fixes and introduced new child_fabrics model key under vxlan.multisite.overlay.vrfs and vxlan.multisite.overlay.networks for defining site-specific attributes

Fixed:

• Fix edge connection management to external fabrics (#232)
• Fix multisite domain fabric validation checks (#274)
• Fix multisite VRF child fabric deployment (#292)
• Fix multisite network child fabric configuration (#293)
• Fix child_fabrics key support in multisite overlays (#294)
• Fix site-specific attributes in multisite VRFs (#295)
• Fix site-specific network properties in MSD (#296)
• Fix VRF attachment in child fabrics (#302)
• Fix network deployment to multisite members (#303)
• Fix multisite template rendering errors (#308)
• Fix MSD parent to child communication (#311)
• Fix multisite VRF route target configuration (#314)
• Fix external fabric edge routing (#320)
• Fix ISN fabric link configuration (#325)
• Fix multisite network VLAN allocation (#327)
• Fix child fabric VRF overlay properties (#331)
• Fix MSD network gateway configuration (#335)
• Fix multisite VNI assignment logic (#336)
• Fix external fabric BGP peering (#340)
• Fix multisite domain orchestration (#343)
• Fix child fabric state synchronization (#345)
• Fix multisite child fabric validation (#355)

Tested versions: link

Release Tag 0.4.0: link

Added:

• NEW Feature: Support for data model defined policy based VRF-LITE
• NEW Feature: Support for data model defined policy based Route-Control
• NEW Feature: Support for Multi-Site Domain (MSD)
  • Support for VXLAN Child Fabric
  • Support for ISN Child Fabric
  • Support for MSD Parent Fabric
  • Support for new multisite child fabric, vrf and network delete mode protection flags
  • Only MSD is supported for MultiSite deployments. MFD will be supported in a future release.
• NEW Feature: Support for managing inter-fabric links and External fabrics with ansible tag support to limit execution
• Enhanced data model validation and preprocessing
• Added new model keys for defining fabric name and type:

vxlan:
  fabric:
    name: nac-fabric1
    type: VXLAN_EVPN # Other allowed fabric types: MSD, ISN, External
  global:
    # name: nac-fabric1
    # fabric_type: VXLAN_EVPN

The name and fabric_type keys under vxlan.global are still supported but will be deprecated in future releases.

Modified:

• Updated model key vxlan.overlay_services to be vxlan.overlay (backwards compatible)

Fixed:

• Fix VRF-Lite policy configuration rendering (#234)
• Fix route control policy deployment (#235)
• Fix MSD parent fabric creation (#236)
• Fix MSD child fabric registration (#237)
• Fix ISN fabric configuration template (#243)
• Fix external fabric device management (#246)
• Fix inter-fabric link provisioning (#252)
• Fix fabric type validation in data model (#253)
• Fix multisite delete mode protection flags (#256)
• Fix VRF-Lite extension configuration (#259)
• Fix route-map policy object creation (#265)
• Fix prefix-list and ACL policy rendering (#270)
• Fix community-list policy deployment (#272)
• Fix fabric name and type key validation (#276)

Tested versions: link

Release Tag 0.3.0: link

Added:

• Support for selective execution based on data model changes
• Support for defining custom default values for data model
• Support for defining custom NDFC Policies
• Performance improvements for adding devices to a fabric
• Support for POAP when adding devices to a fabric
• New connectivity_check role for verifying connectivity and authentication to NDFC
• Updated tag support to include the following tags:
  • cc_verify
  • cr_manage_policy
  • rr_manage_policy
• Update to service model keys:
  • VRF attach_group changes to vrf_attach_group under vxlan.overlay_services.vrfs
  • Network attach_group changes to network_attach_group under vxlan.overlay_services.networks
• Support for Spanning-Tree in data model and fabric creation in NDFC 12.2.2 or later
• Support for IPv6 fabric underlay
• Support new and updated pre-validation rules:
  • 201: Verify a spanning tree protocol mutually exclusive parameters
  • 202: Verify Fabric Underlay Supports Multicast for TRM
  • 203: Verify Fabric Underlay ISIS Authentication
  • 401: Cross Reference VRFs and Networks items in the Service Model
  • 402: Verify VRF elements are enabled in fabric overlay services
  • 403: Verify Network elements are enabled in fabric overlay services
  • 501: Verify Policy Cross Reference Between Policies, Groups, and Switches

Fixed:

• Fix selective execution based on data model changes (#21)
• Fix custom default values configuration (#67)
• Fix custom NDFC policy management (#104)
• Fix device addition performance improvements (#119)
• Fix POAP device discovery workflow (#120)
• Fix spanning-tree protocol configuration in NDFC 12.2.2+ (#151)
• Fix IPv6 fabric underlay support (#153)
• Fix VRF attach_group to vrf_attach_group migration (#170)
• Fix network attach_group to network_attach_group migration (#184)
• Fix validation rules for VRF and network cross-references (#188)
• Fix policy cross-reference validation between groups and switches (#192)

Tested versions: link

Release Tag 0.2.0: link

Added:

• Support for the following device inventory roles. Only applies to adding devices to a fabric with these role types:
  • border_spine
  • border_gateway
  • border_gateway_spine
  • super_spine
  • border_super_spine
  • border_gateway_super_spine
• Added SysLog Server Support - Fabric Creation Stage
• Added DHCP Support and Secondary IP Address Support - Network Creation Stage
• Support for Ansible Tags
  • Tags to limit execution and target specific roles in the collection
  • Tags to limit execution and target specific stages inside a role

Fixed:

• Fix device inventory role support for border_spine (#111)
• Fix device inventory role support for super_spine and border_gateway (#112)
• Fix syslog server configuration in fabric creation (#127)
• Fix DHCP and secondary IP address support in network creation (#135)

Release Tag 0.1.0: link

Release Date: June 2024

Initial release of the Ansible NetworkAsCode DC VXLAN collection.

Added:

The following roles have been added to the collection:

• Role: cisco.nac_dc_vxlan.validate
• Role: cisco.nac_dc_vxlan.dtc.create
• Role: cisco.nac_dc_vxlan.dtc.deploy
• Role: cisco.nac_dc_vxlan.dtc.remove

This version of the collection includes support for an IPv4 Underlay only. Support for IPv6 Underlay was added in version 0.3.0.