juniper.yml

---

# requires xmltodict: pip3 install xmltodict
# check inventory for endpoint, especially on first run

- hosts: switch

  gather_facts: false
  connection: ansible.netcommon.netconf

  vars:
    juniper_l3_interfaces:
      - unit: 0
        name: vlan
        ipv4:
          - address: 192.168.0.2/24
      - unit: 1
        name: vlan
        ipv4:
          - address: 192.168.1.2/24

    # access = .vlan
    # trunk = .name
    juniper_l2_interfaces:
      #
      # ROUTER
      #
      -
        port: "0"
        description: "opnsense-lan"
      -
        port: "1"
        description: "opnsense-vlans"
        trunk:
          - "{{ networks.mgmt.name }}"
          - "{{ networks.user.name }}"
          - "{{ networks.iot.name }}"
          - "{{ networks.pub.name }}"
          - "{{ networks.granny.name }}"
      #
      # CAMERAS
      #
      -
        port: "2"
        description: "nvr-ethernet"
        access: "{{ networks.iot.vlan }}"
      -
        port: "3"
        description: "cam-01"
        access: "{{ networks.iot.vlan }}"
      -
        port: "4"
        description: "cam-02"
        access: "{{ networks.iot.vlan }}"
      -
        port: "5"
        description: "cam-03"
        access: "{{ networks.iot.vlan }}"
      -
        port: "6"
        description: "cam-04"
        access: "{{ networks.iot.vlan }}"
      -
        port: "7"
        description: "cam-05"
        access: "{{ networks.iot.vlan }}"
      -
        port: "8"
        description: "cam-06"
        access: "{{ networks.iot.vlan }}"
      -
        port: "9"
        description: "cam-07"
        access: "{{ networks.iot.vlan }}"
      -
        port: "10"
        description: "cam-08"
        access: "{{ networks.iot.vlan }}"
      -
        port: "11"
        description: "cam-09"
        access: "{{ networks.iot.vlan }}"
      #
      # ROOMS
      #
      -
        port: "24"
        description: "master-bedroom"
        access: "{{ networks.iot.vlan }}"
      -
        port: "25"
        description: "calvins-study"
        access: "{{ networks.user.vlan }}"
      -
        port: "26"
        description: "living-room"
        access: "{{ networks.iot.vlan }}"
      -
        port: "27"
        description: "reserved-1"
        access: "{{ networks.user.vlan }}"
      -
        port: "28"
        description: "reserved-2"
        access: "{{ networks.user.vlan }}"
      -
        port: "29"
        description: "reserved-3"
        access: "{{ networks.user.vlan }}"
      #
      # STATIC DEVICES
      #
      -
        port: "30"
        description: "eufy-homebase-lan"
        access: "{{ networks.iot.vlan }}"
      -
        port: "36"
        description: "3d-printer"
        access: "{{ networks.iot.vlan }}"
      -
        port: "37"
        description: "printer"
        access: "{{ networks.user.vlan }}"
      -
        port: "38"
        description: "solar-inverter-bridge-1"
        access: "{{ networks.iot.vlan }}"
      -
        port: "39"
        description: "solar-inverter-bridge-2"
        access: "{{ networks.iot.vlan }}"
      #
      # WIFI
      #
      -
        port: "40"
        description: "wifi-01"
        access: "{{ networks.user.vlan }}"
        trunk:
          - "{{ networks.iot.name }}"
          - "{{ networks.granny.name }}"
      -
        port: "41"
        description: "wifi-02"
        access: "{{ networks.user.vlan }}"
        trunk:
          - "{{ networks.iot.name }}"
          - "{{ networks.granny.name }}"
      -
        port: "42"
        description: "wifi-03"
        access: "{{ networks.user.vlan }}"
        trunk:
          - "{{ networks.iot.name }}"
          - "{{ networks.granny.name }}"
      -
        port: "43"
        description: "wifi-04"
        access: "{{ networks.user.vlan }}"
        trunk:
          - "{{ networks.iot.name }}"
          - "{{ networks.granny.name }}"
      #
      # OTHER
      #
      -
        port: "45"
        description: "homelab-ethernet"
        trunk:
          - "{{ networks.mgmt.name }}"
          - "{{ networks.user.name }}"
          - "{{ networks.iot.name }}"
          - "{{ networks.pub.name }}"
          - "{{ networks.granny.name }}"
      -
        port: "46"
        description: "homelab-ipmi"
        access: "{{ networks.mgmt.vlan }}"
      -
        port: "47"
        description: "alarm"
        access: "{{ networks.iot.vlan }}"
      #
      # XE/SFP
      #
      -
        interface: xe
        port: "0"
        description: "homelab-sfp"
        trunk:
          - "{{ networks.mgmt.name }}"
          - "{{ networks.user.name }}"
          - "{{ networks.iot.name }}"
          - "{{ networks.pub.name }}"
          - "{{ networks.granny.name }}"
      -
        interface: xe
        port: "1"
        description: "nvr-sfp"
        access: "{{ networks.iot.vlan }}"

  tasks:
    - name: Enable netconf service
      junipernetworks.junos.junos_netconf:
        state: present
      connection: ansible.netcommon.network_cli

    - name: Configure Layer 3 interfaces
      junipernetworks.junos.junos_l3_interfaces:
        config: "{{ juniper_l3_interfaces }}"
        state: merged

    - name: Configure VLANs
      junipernetworks.junos.junos_vlans:
        config: "{{ networks | to_juniper_vlan_config }}"
        state: merged

    # - name: Gather junos layer 2 interfaces as in given arguments
    #   junipernetworks.junos.junos_l2_interfaces:
    #     state: gathered

    - name: Configure Layer 2 interfaces
      junipernetworks.junos.junos_l2_interfaces:
        config: "{{ juniper_l2_interfaces | to_juniper_l2_config }}"
        state: replaced

    - name: Configure ports
      junipernetworks.junos.junos_interfaces:
        config: "{{ juniper_l2_interfaces | to_juniper_interface_config }}"
        state: merged