ise.configuration.yaml

---


  # ⟁ Wait for ISE Application Server to be available after [re]boot
  - name: Test for ISE Application Server Initialization
    ansible.builtin.include_tasks: tasks/ise_initialized.yaml

  # ⟁ Verify APIs are enabled *before* gathering facts and configuring
  - name: Enable ISE ERS & OpenAPIs
    ansible.builtin.include_tasks: tasks/ise_apis_enabled.yaml

  - name: Include Repositories
    ansible.builtin.include_vars: vars/repositories.yaml
    tags:
    - repository

  - name: Create Repositories
    when: repositories is defined and repositories | count > 0
    loop: "{{ repositories }}"
    ansible.builtin.include_tasks: tasks/repository.create.yaml
    ignore_errors: true
    tags:
    - repository

  - name: Create RADIUS Probes - identity_group and internal_users
    ansible.builtin.include_tasks: tasks/radius_probes.yaml
    ignore_errors: true
    tags:
    - internal_user

  - name: Create Internal Users
    block:
    - name: Include Internal Users
      ansible.builtin.include_vars: vars/internal_users.yaml
    - name: Create Internal Users
      loop: "{{ internal_users }}"
      ansible.builtin.include_tasks: tasks/internal_user.create.yaml
      ignore_errors: true
    tags:
    - internal_user


  #----------------------------------------------------------------------------
  # Network Device Groups
  #----------------------------------------------------------------------------

  #!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  # 🐞 ISE 3.2.0.542 `networkdevicegroup` create fails.
  # 🐞 It does not support the `othername` attribute.
  # 🐞 It says it wants the `ndgtype` attribute that it does not recognize
  # 💡 Fixed in ISE 3.2 + Patch 2 and later
  #!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

  - name: Create network_device_groups
    block:
    - name: Include network_device_groups
      ansible.builtin.include_vars: vars/network_device_groups.yaml
    - name: Create Network Device Groups
      loop: "{{ network_device_groups }}"
      ansible.builtin.include_tasks: tasks/network_device_group.create.yaml
      ignore_errors: true
    tags:
    - network_device
    - network_device_group


  - name: Create network_devices
    block:
    - name: Include demo network_devices
      ansible.builtin.include_vars: vars/network_devices.yaml
    - name: Create network_devices
      when: network_devices is defined and network_devices | count > 0
      loop: "{{ network_devices }}"
      ansible.builtin.include_tasks: tasks/network_device.create.yaml
      ignore_errors: true
    tags:
    - network_device

  - name: Get All Meraki Devices in the Org+Network
    delegate_to: localhost
    cisco.meraki.meraki_device:
      state: query
      org_name: "{{ meraki_org_name }}"
      net_name: "{{ meraki_lab_net_name }}"
    register: meraki_devices
    #---------------------------------------------------
    # Example output
    #---------------------------------------------------
    # - configuration_updated_at: '2022-09-21T22:14:34Z'
    #   firmware: wireless-28-7-1
    #   lan_ip: 192.168.101.4
    #   lat: 37.0000000000000
    #   lng: -122.0000000000000
    #   mac: 2c:3f:0b:56:e3:6c
    #   model: MR46
    #   name: lab-mr46-1
    #   network_id: L_585467371558187322
    #   notes: ''
    #   product_type: wireless
    #   serial: Q3AC-JCYG-3NL5
    #---------------------------------------------------

  # - name: Show meraki_devices
  #   ansible.builtin.debug: var=meraki_devices

  #
  # Add Meraki Devices to ISE
  #
  - name: Add Meraki Network Devices to ISE
    delegate_to: localhost
    loop: "{{ meraki_devices.data }}"
    when: item.lan_ip is defined        # APs and Switches
    cisco.ise.network_device:
      ise_hostname: "{{ ansible_host }}"
      ise_username: "{{ ise_username }}"
      ise_password: "{{ ise_password }}"
      ise_verify:   "{{ ise_verify }}"
      ise_debug:    "{{ ise_debug }}"
      state:        "{{ item.state | default('present') }}"
      name:         "{{ item.name }}"
      description:  "{{ item.firmware | default('')}}"
      profileName:  "{{ item.profileName | default('Cisco') }}"
      modelName:    "{{ item.modelName | default( omit ) }}"
      softwareVersion: "{{ item.softwareVersion | default( omit ) }}"
      NetworkDeviceIPList:
      - ipaddress: "{{ item.lan_ip }}"
        mask: 32
      NetworkDeviceGroupList: "{{ item.network_device_groups | default( omit ) }}"
      authenticationSettings:
        networkProtocol: RADIUS
        radiusSharedSecret: "{{ radius_secret }}"
      coaPort:     "{{ item.coaPort | default(1700) }}"
    ignore_errors: true


  - name: Endpoint Groups
    block:
    - name: Include Endpoint Groups
      ansible.builtin.include_vars: vars/endpoint_groups.yaml
    - name: Create Endpoint Groups
      loop: "{{ endpoint_groups }}"
      ansible.builtin.include_tasks: tasks/endpoint_group.create.yaml
      ignore_errors: true
    tags:
    - endpoint


  - name: Create Endpoints
    block:
    - name: Include Endpoints
      ansible.builtin.include_vars: vars/endpoints.yaml
    - name: Create Endpoints
      loop: "{{ endpoints }}"
      ansible.builtin.include_tasks: tasks/endpoint.create.yaml
      ignore_errors: true
    tags:
    - endpoint




...