nxos_acls module: addrgroup as source and/or destination

[edaleand]

SUMMARY

Add support for addrgroup as option for source and destination addresses in nxos_acls module.

ISSUE TYPE

• Feature Idea

COMPONENT NAME

cisco.nxos.nxos_acls module

ADDITIONAL INFORMATION

Using addrgroup is supported on nxos for logical grouping of hosts and prefixes to be used as source and/or destinations in access-lists. It would be great if the nxos_acls module supported it as well. addrgroup would be an optional key in the source/destination dictionary with a string as value representing the name of a pre existing addrgroup.

- name: Create ACL entry with addrgroup as source
  cisco.nxos.nxos_acls:
    state: merged
    config:
      - afi: ipv4
        acls:
          - name: myAcl
            aces:
              - sequence: 10
                grant: permit
                protocol: ip
                source:
                  addrgroup: myAddrgroup
                destination:
                  host: 10.0.0.1