Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feat(eos_cli_config_gen): Add dot1x protocol bpdu bypass #3622

Merged
merged 9 commits into from
Feb 16, 2024

Conversation

kmueller68
Copy link
Contributor

Change Summary

Starting with EOS 4.31.2F there is a new feature with dotx1x available:
dot1x protocol bpdu bypass

This allows spanning-tree bdpu packets to bypass dot1x that for example bpduguard would work even there is no client authenticated.

Related Issue(s)

Fixes #3621

Component(s) name

arista.avd.eos_cli_config_gen

Proposed changes

dot1x:
  protocol_bpdu_bypass: <bool>

How to test

dot1x:
  protocol_bpdu_bypass: true

should add globally

dot1x protocol bpdu bypass

Checklist

User Checklist

  • N/A

Repository Checklist

  • [x ] My code has been rebased from devel before I start
  • I have read the CONTRIBUTING document.
  • My change requires a change to the documentation and documentation have been updated accordingly.
  • I have updated molecule CI testing accordingly. (check the box if not applicable)

@kmueller68 kmueller68 requested review from a team as code owners February 13, 2024 17:54
@github-actions github-actions bot added role: eos_cli_config_gen issue related to eos_cli_config_gen role state: CI Updated CI scenario have been updated in the PR state: Documentation role Updated labels Feb 13, 2024
@kmueller68
Copy link
Contributor Author

I am sorry, I messed the end of file new line in ansible_collections/arista/avd/molecule/eos_cli_config_gen/molecule.yml.
Could please anyone help fixing it?

Comment on lines 12 to 17
{% if dot1x.protocol_bpdu_bypass is arista.avd.defined(true) %}
dot1x protocol bpdu bypass
{% endif %}
{% if dot1x.protocol_lldp_bypass is arista.avd.defined(true) %}
dot1x protocol lldp bypass
{% endif %}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please swap the order of bpdu and lldp. That is how it is rendered on EOS. Thanks.

@ClausHolbechArista ClausHolbechArista requested a review from a team February 16, 2024 07:56
@ClausHolbechArista ClausHolbechArista added the one approval This PR has one approval and is only missing one more. label Feb 16, 2024
@ClausHolbechArista ClausHolbechArista added this to the v4.6.0 milestone Feb 16, 2024
@ClausHolbechArista ClausHolbechArista merged commit aaa4590 into aristanetworks:devel Feb 16, 2024
41 checks passed
sugetha24 pushed a commit to sugetha24/ansible-avd that referenced this pull request Feb 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
one approval This PR has one approval and is only missing one more. rn: Feat(eos_cli_config_gen) role: eos_cli_config_gen issue related to eos_cli_config_gen role state: CI Updated CI scenario have been updated in the PR state: Documentation role Updated
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Feat(eos_cli_config_gen): Add dot1x protocol bpdu bypass
3 participants