terraform-iosxe-nac-iosxe/iosxe_arp.tf at main · seojumper/terraform-iosxe-nac-iosxe · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
resource "iosxe_arp" "arp" {
  for_each = { for device in local.devices : device.name => device if try(local.device_config[device.name].arp, null) != null }
  device   = each.value.name

  incomplete_entries = try(local.device_config[each.value.name].arp.incomplete_entries, local.defaults.iosxe.configuration.arp.incomplete_entries, null)
  proxy_disable      = try(local.device_config[each.value.name].arp.proxy_disable, local.defaults.iosxe.configuration.arp.proxy_disable, null)
  entry_learn        = try(local.device_config[each.value.name].arp.entry_learn, local.defaults.iosxe.configuration.arp.entry_learn, null)

  inspection_filters = try(length(local.device_config[each.value.name].arp.inspection_filters) == 0, true) ? null : [for e in local.device_config[each.value.name].arp.inspection_filters : {
    name = try(e.name, local.defaults.iosxe.configuration.arp.inspection_filters.name, null)
    vlans = try(length(e.vlans) == 0, true) ? null : [for v in e.vlans : {
      vlan_range = try(
        provider::utils::normalize_vlans(
          {
            ids    = try(v.ids, local.defaults.iosxe.configuration.arp.inspection_filters.vlans.ids, [])
            ranges = try(v.ranges, local.defaults.iosxe.configuration.arp.inspection_filters.vlans.ranges, [])
          },
          "string"
        ),
        null
      )
      static = try(v.static, local.defaults.iosxe.configuration.arp.inspection_filters.vlans.static, null)
    }]
  }]

  inspection_validate_src_mac         = try(local.device_config[each.value.name].arp.inspection_validate_src_mac, local.defaults.iosxe.configuration.arp.inspection_validate_src_mac, null)
  inspection_validate_dst_mac         = try(local.device_config[each.value.name].arp.inspection_validate_dst_mac, local.defaults.iosxe.configuration.arp.inspection_validate_dst_mac, null)
  inspection_validate_ip              = try(local.device_config[each.value.name].arp.inspection_validate_ip, local.defaults.iosxe.configuration.arp.inspection_validate_ip, null)
  inspection_validate_allow_zeros     = try(local.device_config[each.value.name].arp.inspection_validate_allow_zeros, local.defaults.iosxe.configuration.arp.inspection_validate_allow_zeros, null)
  inspection_log_buffer_entries       = try(local.device_config[each.value.name].arp.inspection_log_buffer_entries, local.defaults.iosxe.configuration.arp.inspection_log_buffer_entries, null)
  inspection_log_buffer_logs_entries  = try(local.device_config[each.value.name].arp.inspection_log_buffer_logs_entries, local.defaults.iosxe.configuration.arp.inspection_log_buffer_logs_entries, null)
  inspection_log_buffer_logs_interval = try(local.device_config[each.value.name].arp.inspection_log_buffer_logs_interval, local.defaults.iosxe.configuration.arp.inspection_log_buffer_logs_interval, null)
  inspection_vlan                     = try(local.device_config[each.value.name].arp.inspection_vlan, local.defaults.iosxe.configuration.arp.inspection_vlan, null)

  depends_on = [
    iosxe_vlan.vlan,
  ]
}