---
- name: Ansible resource module example
  hosts: datacenter
  gather_facts: False
  connection: httpapi
  collections:
    - dellemc.enterprise_sonic
  tasks:
  - name: Delete all configuration
    sonic_l2_acls:
      config:
      state: deleted

  - name: Merge some configuration
    sonic_l2_acls:
      config:
        - name: 'acl1'
          remark: 'Remark_ACL1'
          rules:
            - sequence_num: 4
              action: 'discard'
              source:
                any: true
              destination:
                any: true
              ethertype:
                arp: true
            - sequence_num: 5
              action: 'discard'
              source:
                any: true
              destination:
                any: true
              vlan_tag_format:
                multi_tagged: true
              remark: 'VLAN_multi_tagged'
        - name: 'acl2'
          remark: 'Remark_ACL2'
          rules:
            - sequence_num: 1
              action: 'permit'
              source:
                any: true
              destination:
                any: true
              ethertype:
                ipv6: true
              vlan_id: 200
            - sequence_num: 2
              action: 'permit'
              source:
                any: true
              destination:
                any: true
              dei: 1
            - sequence_num: 3
              action: 'permit'
              source:
                any: true
              destination:
                any: true
              pcp:
                value: 4
                mask: 6
            - sequence_num: 4
              action: 'do-not-nat'
              source:
                any: true
              destination:
                any: true
              ethertype:
                ipv4: true
      state: merged

  - name: Replace some configuration
    sonic_l2_acls:
      config:
        - name: 'acl2'
          rules:
            - sequence_num: 1
              action: 'permit'
              source:
                any: true
              destination:
                host: '11:11:11:22:22:22'
            - sequence_num: 2
              action: 'deny'
              source:
                any: true
              destination:
                any: true
              ethertype:
                ipv4: true
              vlan_id: 100
        - name: 'acl3'
          rules:
            - sequence_num: 1
              action: 'permit'
              source:
                host: '22:22:22:22:22:22'
              destination:
                any: true
              pcp:
                traffic_type: 'ca'
            - sequence_num: 2
              action: 'deny'
              source:
                any: true
              destination:
                any: true
              remark: 'Deny_All'
      state: replaced


  - name: override some configuration
    sonic_l2_acls:
      config:
        - name: 'acl1'
          rules:
            - sequence_num: 1
              action: 'permit'
              source:
                host: '33:33:33:33:33:33'
              destination:
                host: '44:44:44:44:44:44'
        - name: 'test-acl'
          remark: 'test_mac_acl'
          rules:
            - sequence_num: 1
              action: 'permit'
              source:
                host: '22:22:22:22:22:22'
              destination:
                any: true
              vlan_id: 20
            - sequence_num: 2
              action: 'permit'
              source:
                any: true
              destination:
                any: true
              ethertype:
                value: '0x88cc'
              remark: 'LLDP'
            - sequence_num: 3
              action: 'permit'
              source:
                any: true
              destination:
                address: '00:00:10:00:00:00'
                address_mask: '00:00:ff:ff:00:00'
              pcp:
                value: 4
                mask: 6
        - name: 'test-acl-1'
          remark: 'test_mac_acl_1'
          rules:
            - sequence_num: 1
              action: 'permit'
              source:
                any: true
              destination:
                any: true
              ethertype:
                arp: true
              vlan_id: 200
            - sequence_num: 2
              action: 'discard'
              source:
                any: true
              destination:
                any: true
      state: overridden

  - name: Delete some configuration
    sonic_l2_acls:
      config:
        - name: 'acl1'
        - name: 'test-acl'
          rules:
            - sequence_num: 3
        - name: 'test-acl-1'
          remark: 'test_mac_acl_1'
          rules:
            - sequence_num: 2
      state: deleted