NAC collector output is not complete vs Terraform data model

[sammybibs]

NAC collector output is not round-trip complete vs Terraform data model (missing site credentials, network profiles, fabric L2 handoffs, tags, and operational files)

When using the Terraform data model as source of truth, applying to Catalyst Center, and then re-collecting with NAC collector, several configuration sections are not present in collector output.

Observed behaviour indicates collector output is inventory/state-heavy, but misses operational and assignment-level model data required for full round-trip parity.

Confirmed missing areas

1. Network settings credentials and global network settings

Missing from collector output:

• network_settings.device_credentials (CLI, SNMPv2/v3, HTTPS read/write)
• network_settings.network (DNS, DHCP, NTP, domain, banner, timezone)

Example of whats missing from source data model:

catalyst_center:
  network_settings:
    device_credentials:
      cli_credentials:
      snmpv2_read_credentials:
      snmpv3_credentials:
      https_write_credentials:
      https_read_credentials:
    network:
      - name: network_settings
        dhcp_servers:
        dns_servers:
        domain_name: abc.cisco.com
        banner: "Welcome"
        timezone: Europe/London
        ntp_servers:

2. Site-level credential and settings assignments

Missing from collector output:

• per-site credential bindings (cli_credentials, snmpv3_credentials, https_read_credentials, https_write_credentials)
• floor-level network_settings

Example of whats missing from source data model:

catalyst_center:
  sites:
    areas:
      - name: Global
        network_settings:
          network: network_settings
      - name: LAB_AREA
        cli_credentials: LabAdmin
        snmpv2_read_credentials: snmpv2_read
        parent_name: Global
      - name: UK
        cli_credentials: sdaadmin
        snmpv3_credentials: snmpv3
        https_read_credentials: https_read
        https_write_credentials: https_write
        parent_name: Global

3. Fabric wireless SSID mapping and border L2 handoff attributes

Missing from collector output:

• fabric.fabric_sites[].wireless_ssids
• border device connected_to_internet
• border device l2_handoffs

Example of whats missing from source data model:

catalyst_center:
  fabric:
    fabric_sites:
      - name: Global/UK/Reading/SDA_HQ_Green_Park
        wireless_ssids:
          - name: SDA_CORP_SSID
            vlan_name: Corp_Overlay
    border_devices:
      - name: BN2.ukps.cisco.com
        connected_to_internet: true
        l2_handoffs:
          l2_without_anycast_gateway:
            vlans:
              - name: L2_VLAN_USERS
                external_vlan: 901
            interfaces:
              - TenGigabitEthernet1/0/6

4. Wireless network profile to site bindings

Missing from collector output:

• network_profiles.wireless (SSID profile/site binding)

Example of whats missing from source data model:

catalyst_center:
  network_profiles:
    wireless:
      - name: WIRELESS_PROFILE
        ssid_details:
          - name: SDA_CORP_SSID
            enable_fabric: true
            enable_flex_connect: false
        sites:
          - Global/UK/Reading/SDA_HQ_Green_Park

5. Inventory tag assignments and WLC managed AP locations

Missing from collector output:

• inventory.tags
• per-device tags
• WLC primary_managed_ap_locations

Example of whats missing from source data model:

catalyst_center:
  inventory:
    tags:
      - name: Secure
        description: Secured Device
    devices:
      - name: CORE1
        fqdn_name: core1.example.com
        device_ip: 1.2.3.4
        pid: C9500-40X
        state: ASSIGN
        device_role: CORE
        site: Global/UK/Reading/Core_Green_Park
        tags:
          - Secure
      - name: WLC1
        primary_managed_ap_locations:
          - Global/UK/Reading/SDA_HQ_Green_Park

sabibby@cisco.com