Commit graph

20 commits

Author SHA1 Message Date
8fd6f3bff6 access: fix check/diff mode for FS switches
Regardless of terminal width FS switches always split known VLAN
ranges into multiple lines of at most twenty numbers when showing
configuration. Do the same in our config template to avoid reporting
changes when there are none.

Allowed VLANs for tagged ports are displayed similarly but even worse,
with the first line specifying `allowed vlan only` for the first twenty
numbers and subsequent lines adding the remaining VLANs.

Not sure if configuring a switch this way – as opposed to a single long
`allowed vlan only` line – could disrupt traffic. Instead we simply
allow all VLANs on uplink ports, marked in NetBox as 'tagged-all'. For
downlink tagged ports the number of allowed VLANs is unlikely to
exceed twenty.

Ansible now reports no fictional changes for all existing access
switches. The only remaining issue is removing known VLANs, which has
to be done manually on each switch.
2025-08-01 12:20:08 +02:00
88686ab939 access: set IPv6 management address for D-Link switches
Also default route.
2025-07-31 17:49:37 +02:00
617e0689f1 access: filter some more non-changes from config diff 2025-07-01 09:37:13 +02:00
a1147a3283 access: disable port-security on trunk ports
Because it messes up AP roaming: client MAC will not be learned on the
switch port for the new AP until the old one times out in five minutes.
2025-05-23 12:39:59 +02:00
6040a3ae84 access: round allowed MACs on a port down to 64
Haven’t seen anyone use more than ten.
2025-03-26 19:12:15 +01:00
0ed4973894 access: get mgmt gateway from custom field on prefix
Mainly so we can drop the gateway custom field from NetBox interfaces.
2025-03-24 18:13:55 +01:00
60dd62c00f access: increase command timeout when setting config
Some options take a while to enable. Like port-security.
2025-03-18 14:40:18 +01:00
07fa350ae6 access: enable port-security
Should prevent one way of network coming down. Again.
2025-03-17 15:41:48 +01:00
dd30e2ab1c access: support native VLAN on tagged interfaces for D-Link switches 2025-02-10 17:07:32 +01:00
de05fd236b access: enable DHCP snooping on D-Link switches
Use the ifaces_dhcp custom context property to select interfaces where
we should expect DHCP replies.
2024-11-09 19:58:28 +01:00
57197d7695 access: set up SNMP user for D-Link switches 2024-10-02 16:04:39 +02:00
e51d08c073 access: get switch username from password store 2024-10-02 10:39:12 +02:00
a230697846 access: disable HTTP service for D-Link switches 2024-09-30 10:50:50 +02:00
3caea81896 access: add voice VLAN support 2024-09-01 10:37:11 +02:00
c479f90669 access: move switch config templates back to this repo
Let’s keep it simple. Also editing templates in NetBox is a pain.
2024-04-08 14:45:39 +02:00
f489555ba1 access: fix password store subdirectory for switches 2024-04-05 12:00:22 +02:00
be0cc49b33 access: ignore more non‐changes
Should probably move this somewhere more listy if it keeps growing.
2024-03-04 10:12:38 +01:00
27dac09549 access: move secrets to password store
Keeping ansible-vault values in NetBox is too cumbersome and limited.
2024-02-13 10:33:14 +01:00
0802dc8637 access: move templates to netbox
And adjust tasks to work with FS switches also.
2023-12-29 14:55:00 +01:00
158e8740b8 Initial commit, squashed 2023-12-18 12:55:47 +01:00