Template

iosxe:
  devices:
    - name: Device1
      configuration:
        templates:
          - name: TEMPLATE1
            dot1x_pae: supplicant
            dot1x_max_reauth_req: 3
            dot1x_max_req: 5
            dot1x_timeout_tx_period: 600
            service_policy_input: input
            service_policy_output: output
            switchport:
              mode_trunk: true
              trunk_native_vlan_id: 100
              trunk_allowed_vlans: 10-20,30
              nonegotiate: true
              block_unicast: true
              port_security: true
              port_security_aging_static: true
              port_security_aging_time: 600
              port_security_aging_type_inactivity: true
              port_security_maximum_ranges:
                - range: 10
                  vlan: true
                  vlan_access: true
                - range: 20
                  vlan: true
                - range: 30
              port_security_violation_protect: true
              voice_vlan: 11
            mab: true
            mab_eap: true
            access_session_closed: true
            access_session_monitor: false
            access_session_port_control: force-authorized
            access_session_control_direction: in
            access_session_host_mode: multi-domain
            access_session_interface_template_sticky: true
            access_session_interface_template_sticky_timer: 600
            authentication_periodic: true
            authentication_timer_reauthenticate_range: 600
            spanning_tree_bpduguard_enable: true
            spanning_tree_portfast: true
            spanning_tree_portfast_disable: false
            storm_control_broadcast_level_threshold: 80
            storm_control_multicast_level_threshold: 70
            storm_control_action_shutdown: true
            storm_control_action_trap: true
            load_interval: 90
            ip_dhcp_snooping_limit_rate: 1024
            ip_dhcp_snooping_trust: true
            ip_access_groups:
              - direction: in
                access_list: ACL_IN
              - direction: out
                access_list: ACL_OUT
            subscriber_aging_inactivity_timer_value: 600
            device_tracking: true
            cts_manual: true
            cts_manual_policy_static_sgt: 100
            cts_manual_policy_static_trusted: true
            cts_manual_propagate_sgt: true
            cts_role_based_enforcement: true