network/roles
Timotej Lazar 8fd6f3bff6 access: fix check/diff mode for FS switches
Regardless of terminal width FS switches always split known VLAN
ranges into multiple lines of at most twenty numbers when showing
configuration. Do the same in our config template to avoid reporting
changes when there are none.

Allowed VLANs for tagged ports are displayed similarly but even worse,
with the first line specifying `allowed vlan only` for the first twenty
numbers and subsequent lines adding the remaining VLANs.

Not sure if configuring a switch this way – as opposed to a single long
`allowed vlan only` line – could disrupt traffic. Instead we simply
allow all VLANs on uplink ports, marked in NetBox as 'tagged-all'. For
downlink tagged ports the number of allowed VLANs is unlikely to
exceed twenty.

Ansible now reports no fictional changes for all existing access
switches. The only remaining issue is removing known VLANs, which has
to be done manually on each switch.
2025-08-01 12:20:08 +02:00
..
access access: fix check/diff mode for FS switches 2025-08-01 12:20:08 +02:00
exit exit: import firewalls’ addresses into inside VRFs 2025-07-18 15:20:32 +02:00
fabric fabric: make some space 2025-04-03 18:42:23 +02:00
facts/tasks exit: support custom VRF imports 2024-07-15 14:22:42 +02:00
firewall firewall: do track wireguard connections not meant for us 2025-07-19 12:02:07 +02:00
leaf leaf: consolidate IPv4 and IPv6 address families for BGP 2025-03-26 01:33:33 +01:00
spine Initial commit, squashed 2023-12-18 12:55:47 +01:00