1---
2merged:
3  before: []
4  commands:
5    - set firewall ipv6-name UPLINK default-action 'accept'
6    - set firewall ipv6-name UPLINK description 'This is ipv6 specific rule-set'
7    - set firewall ipv6-name UPLINK rule 1 action 'accept'
8    - set firewall ipv6-name UPLINK rule 1
9    - set firewall ipv6-name UPLINK rule 1 description 'Fwipv6-Rule 1 is configured
10      by Ansible'
11    - set firewall ipv6-name UPLINK rule 1 ipsec 'match-ipsec'
12    - set firewall ipv6-name UPLINK rule 2 action 'accept'
13    - set firewall ipv6-name UPLINK rule 2
14    - set firewall ipv6-name UPLINK rule 2 description 'Fwipv6-Rule 2 is configured
15      by Ansible'
16    - set firewall ipv6-name UPLINK rule 2 ipsec 'match-ipsec'
17    - set firewall name INBOUND default-action 'accept'
18    - set firewall name INBOUND description 'IPv4 INBOUND rule set'
19    - set firewall name INBOUND rule 101 action 'accept'
20    - set firewall name INBOUND rule 101
21    - set firewall name INBOUND rule 101 description 'Rule 101 is configured by Ansible'
22    - set firewall name INBOUND rule 101 ipsec 'match-ipsec'
23    - set firewall name INBOUND rule 102 action 'reject'
24    - set firewall name INBOUND rule 102
25    - set firewall name INBOUND rule 102 description 'Rule 102 is configured by Ansible'
26    - set firewall name INBOUND rule 102 ipsec 'match-ipsec'
27    - set firewall name INBOUND rule 103 description 'Rule 103 is configured by Ansible'
28    - set firewall name INBOUND rule 103 destination group address-group inbound
29    - set firewall name INBOUND rule 103
30    - set firewall name INBOUND rule 103 source address 192.0.2.0
31    - set firewall name INBOUND rule 103 state established enable
32    - set firewall name INBOUND rule 103 state related enable
33    - set firewall name INBOUND rule 103 state invalid disable
34    - set firewall name INBOUND rule 103 state new disable
35    - set firewall name INBOUND rule 103 action 'accept'
36  after:
37    - afi: ipv6
38      rule_sets:
39        - name: UPLINK
40          description: This is ipv6 specific rule-set
41          default_action: accept
42          rules:
43            - number: 1
44              action: accept
45              description: Fwipv6-Rule 1 is configured by Ansible
46              ipsec: match-ipsec
47            - number: 2
48              action: accept
49              description: Fwipv6-Rule 2 is configured by Ansible
50              ipsec: match-ipsec
51    - afi: ipv4
52      rule_sets:
53        - name: INBOUND
54          description: IPv4 INBOUND rule set
55          default_action: accept
56          rules:
57            - number: 101
58              action: accept
59              description: Rule 101 is configured by Ansible
60              ipsec: match-ipsec
61            - number: 102
62              action: reject
63              description: Rule 102 is configured by Ansible
64              ipsec: match-ipsec
65            - number: 103
66              action: accept
67              description: Rule 103 is configured by Ansible
68              destination:
69                group:
70                  address_group: inbound
71              source:
72                address: 192.0.2.0
73              state:
74                established: true
75                new: false
76                invalid: false
77                related: true
78populate:
79  - afi: ipv6
80    rule_sets:
81      - name: UPLINK
82        description: This is ipv6 specific rule-set
83        default_action: accept
84        rules:
85          - number: 1
86            action: accept
87            description: Fwipv6-Rule 1 is configured by Ansible
88            ipsec: match-ipsec
89          - number: 2
90            action: accept
91            description: Fwipv6-Rule 2 is configured by Ansible
92            ipsec: match-ipsec
93  - afi: ipv4
94    rule_sets:
95      - name: INBOUND
96        description: IPv4 INBOUND rule set
97        default_action: accept
98        rules:
99          - number: 101
100            action: accept
101            description: Rule 101 is configured by Ansible
102            ipsec: match-ipsec
103          - number: 102
104            action: reject
105            description: Rule 102 is configured by Ansible
106            ipsec: match-ipsec
107          - number: 103
108            action: accept
109            description: Rule 103 is configured by Ansible
110            destination:
111              group:
112                address_group: inbound
113            source:
114              address: 192.0.2.0
115            state:
116              established: true
117              new: false
118              invalid: false
119              related: true
120replaced:
121  commands:
122    - delete firewall ipv6-name UPLINK rule 1
123    - delete firewall ipv6-name UPLINK rule 2
124    - delete firewall name INBOUND rule 102
125    - delete firewall name INBOUND rule 103
126    - set firewall name INBOUND rule 104 action 'reject'
127    - set firewall name INBOUND rule 104 description 'Rule 104 is configured by Ansible'
128    - set firewall name INBOUND rule 104
129    - set firewall name INBOUND rule 104 ipsec 'match-none'
130  after:
131    - afi: ipv6
132      rule_sets:
133        - name: UPLINK
134          description: This is ipv6 specific rule-set
135          default_action: accept
136    - afi: ipv4
137      rule_sets:
138        - name: INBOUND
139          description: IPv4 INBOUND rule set
140          default_action: accept
141          rules:
142            - number: 101
143              action: accept
144              description: Rule 101 is configured by Ansible
145              ipsec: match-ipsec
146            - number: 104
147              action: reject
148              description: Rule 104 is configured by Ansible
149              ipsec: match-none
150overridden:
151  before:
152    - afi: ipv6
153      rule_sets:
154        - name: UPLINK
155          description: This is ipv6 specific rule-set
156          default_action: accept
157    - afi: ipv4
158      rule_sets:
159        - name: INBOUND
160          description: IPv4 INBOUND rule set
161          default_action: accept
162          rules:
163            - number: 101
164              action: accept
165              description: Rule 101 is configured by Ansible
166              ipsec: match-ipsec
167            - number: 104
168              action: reject
169              description: Rule 104 is configured by Ansible
170              ipsec: match-none
171  commands:
172    - delete firewall ipv6-name UPLINK
173    - delete firewall name INBOUND
174    - set firewall name Downlink default-action 'accept'
175    - set firewall name Downlink description 'IPv4 INBOUND rule set'
176    - set firewall name Downlink rule 501 action 'accept'
177    - set firewall name Downlink rule 501
178    - set firewall name Downlink rule 501 description 'Rule 501 is configured by Ansible'
179    - set firewall name Downlink rule 501 ipsec 'match-ipsec'
180    - set firewall name Downlink rule 502 action 'reject'
181    - set firewall name Downlink rule 502
182    - set firewall name Downlink rule 502 description 'Rule 502 is configured by Ansible'
183    - set firewall name Downlink rule 502 ipsec 'match-ipsec'
184  after:
185    - afi: ipv4
186      rule_sets:
187        - name: Downlink
188          description: IPv4 INBOUND rule set
189          default_action: accept
190          rules:
191            - number: 501
192              action: accept
193              description: Rule 501 is configured by Ansible
194              ipsec: match-ipsec
195            - number: 502
196              action: reject
197              description: Rule 502 is configured by Ansible
198              ipsec: match-ipsec
199parsed:
200  after:
201    - afi: ipv6
202      rule_sets:
203        - name: UPLINK
204          description: This is ipv6 specific rule-set
205          default_action: accept
206          rules:
207            - number: 1
208              action: accept
209              description: Fwipv6-Rule 1 is configured by Ansible
210              ipsec: match-ipsec
211            - number: 2
212              action: accept
213              description: Fwipv6-Rule 2 is configured by Ansible
214              ipsec: match-ipsec
215    - afi: ipv4
216      rule_sets:
217        - name: INBOUND
218          description: IPv4 INBOUND rule set
219          default_action: accept
220          rules:
221            - number: 101
222              action: accept
223              description: Rule 101 is configured by Ansible
224              ipsec: match-ipsec
225            - number: 102
226              action: reject
227              description: Rule 102 is configured by Ansible
228              ipsec: match-ipsec
229            - number: 103
230              action: accept
231              description: Rule 103 is configured by Ansible
232              destination:
233                group:
234                  address_group: inbound
235              source:
236                address: 192.0.2.0
237              state:
238                established: true
239                new: false
240                invalid: false
241                related: true
242rendered:
243  commands:
244    - set firewall ipv6-name UPLINK default-action 'accept'
245    - set firewall ipv6-name UPLINK description 'This is ipv6 specific rule-set'
246    - set firewall name INBOUND default-action 'accept'
247    - set firewall name INBOUND description 'IPv4 INBOUND rule set'
248    - set firewall name INBOUND rule 101 action 'accept'
249    - set firewall name INBOUND rule 101
250    - set firewall name INBOUND rule 101 description 'Rule 101 is configured by Ansible'
251    - set firewall name INBOUND rule 101 ipsec 'match-ipsec'
252    - set firewall name INBOUND rule 102 action 'reject'
253    - set firewall name INBOUND rule 102
254    - set firewall name INBOUND rule 102 description 'Rule 102 is configured by Ansible'
255    - set firewall name INBOUND rule 102 ipsec 'match-ipsec'
256    - set firewall name INBOUND rule 103 description 'Rule 103 is configured by Ansible'
257    - set firewall name INBOUND rule 103 destination group address-group inbound
258    - set firewall name INBOUND rule 103
259    - set firewall name INBOUND rule 103 source address 192.0.2.0
260    - set firewall name INBOUND rule 103 state established enable
261    - set firewall name INBOUND rule 103 state related enable
262    - set firewall name INBOUND rule 103 state invalid disable
263    - set firewall name INBOUND rule 103 state new disable
264    - set firewall name INBOUND rule 103 action 'accept'
265deleted_rs:
266  commands:
267    - delete firewall ipv6-name UPLINK
268    - delete firewall name INBOUND
269  after: []
270deleted_afi_all:
271  commands:
272    - delete firewall ipv6-name
273    - delete firewall name
274  after: []
275round_trip:
276  after:
277    - afi: ipv6
278      rule_sets:
279        - name: UPLINK
280          description: This is ipv6 specific rule-set
281          default_action: accept
282          rules:
283            - number: 1
284              action: accept
285              description: Fwipv6-Rule 1 is configured by Ansible
286              ipsec: match-ipsec
287            - number: 2
288              action: accept
289              description: Fwipv6-Rule 2 is configured by Ansible
290              ipsec: match-ipsec
291    - afi: ipv4
292      rule_sets:
293        - name: INBOUND
294          description: IPv4 INBOUND rule set
295          default_action: accept
296          rules:
297            - number: 101
298              action: accept
299              description: Rule 101 is configured by Ansible
300              ipsec: match-ipsec
301            - number: 102
302              action: reject
303              description: Rule 102 is configured by Ansible
304              ipsec: match-ipsec
305            - number: 103
306              action: accept
307              description: Rule 103 is configured by Ansible
308              source:
309                address: 192.0.2.0
310              state:
311                established: true
312                new: false
313                invalid: false
314                related: true
315