Add attributes to interface resource and rename snmp server attributes

Author: danischm

CHANGELOG.md

@@ -1,3 +1,9 @@
+## 0.2.7 (unreleased)
+
+- Add `ipv4_verify_unicast_source_reachable_via` and `ipv4_access_group` attributes to `iosxr_interface` resource and data source
+- Add `ipv6_verify_unicast_source_reachable_via` and `ipv6_access_group` attributes to `iosxr_interface` resource and data source
+- BREAKING CHANGE: Rename traps related attributes of `iosxr_snmp_server` resource and data source to `traps_*`
+
 ## 0.2.6
 
 - Add `auto_cost` attributes to `iosxr_router_ospf` and `iosxr_router_ospf_vrf` resources and data sources

docs/data-sources/interface.md

@@ -53,14 +53,34 @@ data "iosxr_interface" "example" {
 - `flow_ipv6_ingress_monitor_samplers` (Attributes List) Specify a flow monitor and sampler for incoming packets (see [below for nested schema](#nestedatt--flow_ipv6_ingress_monitor_samplers))
 - `flow_ipv6_ingress_monitors` (Attributes List) Specify a flow monitor for packets (see [below for nested schema](#nestedatt--flow_ipv6_ingress_monitors))
 - `id` (String) The path of the retrieved object.
+- `ipv4_access_group_egress_acl` (String) Access-list name
+- `ipv4_access_group_egress_compress_level` (Number) Specify ACL compression in hardware
+- `ipv4_access_group_egress_hardware_count` (Boolean) Count packets in hardware
+- `ipv4_access_group_egress_interface_statistics` (Boolean) Per interface statistics in hardware
+- `ipv4_access_group_ingress_acl1` (String) Access-list name
+- `ipv4_access_group_ingress_compress_level` (Number) Specify ACL compression in hardware
+- `ipv4_access_group_ingress_hardware_count` (Boolean) Count packets in hardware
+- `ipv4_access_group_ingress_interface_statistics` (Boolean) Per interface statistics in hardware
 - `ipv4_address` (String) IP address
 - `ipv4_netmask` (String) IP subnet mask
 - `ipv4_point_to_point` (Boolean) Enable point-to-point handling for this interface.
+- `ipv4_verify_unicast_source_reachable_via_allow_default` (Boolean) Allow default route to match when checking source address
+- `ipv4_verify_unicast_source_reachable_via_allow_self_ping` (Boolean) Allow router to ping itself (opens vulnerability in verification)
+- `ipv4_verify_unicast_source_reachable_via_type` (String) Source reachable type
+- `ipv6_access_group_egress_acl1` (String) Access-list name
+- `ipv6_access_group_egress_compress_level` (Number) Specify ACL compression in hardware
+- `ipv6_access_group_egress_interface_statistics` (Boolean) Per interface statistics in hardware
+- `ipv6_access_group_ingress_acl1` (String) Access-list name
+- `ipv6_access_group_ingress_compress_level` (Number) Specify ACL compression in hardware
+- `ipv6_access_group_ingress_interface_statistics` (Boolean) Per interface statistics in hardware
 - `ipv6_addresses` (Attributes List) IPv6 address (see [below for nested schema](#nestedatt--ipv6_addresses))
 - `ipv6_autoconfig` (Boolean) Enable slaac on Mgmt interface
 - `ipv6_enable` (Boolean) Enable IPv6 on interface
 - `ipv6_link_local_address` (String) IPv6 address
 - `ipv6_link_local_zone` (String) IPv6 address zone
+- `ipv6_verify_unicast_source_reachable_via_allow_default` (Boolean) Allow default route to match when checking source address
+- `ipv6_verify_unicast_source_reachable_via_allow_self_ping` (Boolean) Allow router to ping itself (opens vulnerability in verification)
+- `ipv6_verify_unicast_source_reachable_via_type` (String) Source reachable type
 - `l2transport` (Boolean) l2transport sub-interface
 - `l2transport_encapsulation_dot1q_second_dot1q` (String) End of VLAN range
 - `l2transport_encapsulation_dot1q_vlan_id` (String) Single VLAN id or start of VLAN range

docs/data-sources/snmp_server.md

@@ -26,52 +26,52 @@ data "iosxr_snmp_server" "example" {
 
 ### Read-Only
 
-- `bfd` (Boolean) Enable BFD traps
-- `bgp_bgp4_mib_updown` (Boolean) Enable CISCO-BGP4-MIB v2 up/down traps
-- `bgp_cbgp2_updown` (Boolean) Enable CISCO-BGP4-MIB v2 up/down traps
-- `bridgemib` (Boolean) Enable SNMP Trap for Bridge MIB
 - `communities` (Attributes List) The UNENCRYPTED (cleartext) community string (see [below for nested schema](#nestedatt--communities))
-- `config` (Boolean) Enable SNMP config traps
 - `contact` (String) Text for mib Object sysContact
-- `copy_complete` (Boolean) Enable CISCO-CONFIG-COPY-MIB ccCopyCompletion traps
-- `entity` (Boolean) Enable SNMP entity traps
-- `entity_redundancy_all` (Boolean) Enable all CISCO-ENTITY-REDUNDANCY-MIB traps
-- `entity_state_operstatus` (Boolean) Enable entity oper status enable notification
-- `ethernet_oam_events` (Boolean) Enable all OAM event traps
-- `fru_ctrl` (Boolean) Enable SNMP entity FRU control traps
 - `groups` (Attributes List) Name of the group (see [below for nested schema](#nestedatt--groups))
 - `id` (String) The path of the retrieved object.
-- `isis_adjacency_change` (String) isisAdjacencyChange
-- `isis_all` (String) Enable all IS-IS traps
-- `isis_area_mismatch` (String) isisAreaMismatch
-- `isis_attempt_to_exceed_max_sequence` (String) isisAttemptToExceedMaxSequence
-- `isis_authentication_failure` (String) isisAuthenticationFailure
-- `isis_authentication_type_failure` (String) isisAuthenticationTypeFailure
-- `isis_corrupted_lsp_detected` (String) isisCorruptedLSPDetected
-- `isis_database_overload` (String) isisDatabaseOverload
-- `isis_id_len_mismatch` (String) isisIDLenMismatch
-- `isis_lsp_error_detected` (String) isisLSPErrorDetected
-- `isis_lsp_too_large_to_propagate` (String) isisLSPTooLargeToPropagate
-- `isis_manual_address_drops` (String) isisManualAddressDrops
-- `isis_max_area_addresses_mismatch` (String) isisMaxAreaAddressesMismatch
-- `isis_orig_lsp_buff_size_mismatch` (String) isisOrigLSPBuffSizeMismatch
-- `isis_own_lsp_purge` (String) isisOwnLSPPurge
-- `isis_protocols_supported_mismatch` (String) isisProtocolsSupportedMismatch
-- `isis_rejected_adjacency` (String) isisRejectedAdjacency
-- `isis_sequence_number_skip` (String) isisSequenceNumberSkip
-- `isis_version_skew` (String) isisVersionSkew
-- `l2vpn_all` (Boolean) Enable all L2VPN traps
-- `l2vpn_vc_down` (Boolean) Enable VC down traps
-- `l2vpn_vc_up` (Boolean) Enable VC up traps
 - `location` (String) Text for mib Object sysLocation
-- `ntp` (Boolean) Enable SNMP Cisco Ntp traps
-- `power` (Boolean) Enable SNMP entity power traps
-- `rf` (Boolean) Enable SNMP RF-MIB traps
-- `sensor` (Boolean) Enable SNMP entity sensor traps
-- `system` (Boolean) Enable SNMP SYSTEMMIB-MIB traps
 - `trap_source_both` (String) Assign an interface for the source address of all traps
+- `traps_bfd` (Boolean) Enable BFD traps
+- `traps_bgp_bgp4_mib_updown` (Boolean) Enable CISCO-BGP4-MIB v2 up/down traps
+- `traps_bgp_cbgp2_updown` (Boolean) Enable CISCO-BGP4-MIB v2 up/down traps
+- `traps_bridgemib` (Boolean) Enable SNMP Trap for Bridge MIB
+- `traps_config` (Boolean) Enable SNMP config traps
+- `traps_copy_complete` (Boolean) Enable CISCO-CONFIG-COPY-MIB ccCopyCompletion traps
+- `traps_entity` (Boolean) Enable SNMP entity traps
+- `traps_entity_redundancy_all` (Boolean) Enable all CISCO-ENTITY-REDUNDANCY-MIB traps
+- `traps_entity_state_operstatus` (Boolean) Enable entity oper status enable notification
+- `traps_ethernet_oam_events` (Boolean) Enable all OAM event traps
+- `traps_fru_ctrl` (Boolean) Enable SNMP entity FRU control traps
+- `traps_isis_adjacency_change` (String) isisAdjacencyChange
+- `traps_isis_all` (String) Enable all IS-IS traps
+- `traps_isis_area_mismatch` (String) isisAreaMismatch
+- `traps_isis_attempt_to_exceed_max_sequence` (String) isisAttemptToExceedMaxSequence
+- `traps_isis_authentication_failure` (String) isisAuthenticationFailure
+- `traps_isis_authentication_type_failure` (String) isisAuthenticationTypeFailure
+- `traps_isis_corrupted_lsp_detected` (String) isisCorruptedLSPDetected
+- `traps_isis_database_overload` (String) isisDatabaseOverload
+- `traps_isis_id_len_mismatch` (String) isisIDLenMismatch
+- `traps_isis_lsp_error_detected` (String) isisLSPErrorDetected
+- `traps_isis_lsp_too_large_to_propagate` (String) isisLSPTooLargeToPropagate
+- `traps_isis_manual_address_drops` (String) isisManualAddressDrops
+- `traps_isis_max_area_addresses_mismatch` (String) isisMaxAreaAddressesMismatch
+- `traps_isis_orig_lsp_buff_size_mismatch` (String) isisOrigLSPBuffSizeMismatch
+- `traps_isis_own_lsp_purge` (String) isisOwnLSPPurge
+- `traps_isis_protocols_supported_mismatch` (String) isisProtocolsSupportedMismatch
+- `traps_isis_rejected_adjacency` (String) isisRejectedAdjacency
+- `traps_isis_sequence_number_skip` (String) isisSequenceNumberSkip
+- `traps_isis_version_skew` (String) isisVersionSkew
+- `traps_l2vpn_all` (Boolean) Enable all L2VPN traps
+- `traps_l2vpn_vc_down` (Boolean) Enable VC down traps
+- `traps_l2vpn_vc_up` (Boolean) Enable VC up traps
+- `traps_ntp` (Boolean) Enable SNMP Cisco Ntp traps
+- `traps_power` (Boolean) Enable SNMP entity power traps
+- `traps_rf` (Boolean) Enable SNMP RF-MIB traps
+- `traps_sensor` (Boolean) Enable SNMP entity sensor traps
 - `traps_snmp_linkdown` (Boolean) Enable SNMPv2-MIB linDownp traps
 - `traps_snmp_linkup` (Boolean) Enable SNMPv2-MIB linkUp traps
+- `traps_system` (Boolean) Enable SNMP SYSTEMMIB-MIB traps
 - `users` (Attributes List) Name of the user (see [below for nested schema](#nestedatt--users))
 
 <a id="nestedatt--communities"></a>

docs/guides/changelog.md

@@ -7,6 +7,12 @@ description: |-
 
 # Changelog
 
+## 0.2.7 (unreleased)
+
+- Add `ipv4_verify_unicast_source_reachable_via` and `ipv4_access_group` attributes to `iosxr_interface` resource and data source
+- Add `ipv6_verify_unicast_source_reachable_via` and `ipv6_access_group` attributes to `iosxr_interface` resource and data source
+- BREAKING CHANGE: Rename traps related attributes of `iosxr_snmp_server` resource and data source to `traps_*`
+
 ## 0.2.6
 
 - Add `auto_cost` attributes to `iosxr_router_ospf` and `iosxr_router_ospf_vrf` resources and data sources

docs/resources/interface.md

@@ -30,18 +30,38 @@ resource "iosxr_interface" "example" {
       name = "PMAP-OUT"
     }
   ]
-  shutdown                = true
-  mtu                     = 9000
-  bandwidth               = 100000
-  description             = "My Interface Description"
-  load_interval           = 30
-  vrf                     = "VRF1"
-  ipv4_address            = "1.1.1.1"
-  ipv4_netmask            = "255.255.255.0"
-  ipv6_link_local_address = "fe80::1"
-  ipv6_link_local_zone    = "0"
-  ipv6_autoconfig         = false
-  ipv6_enable             = true
+  shutdown                                                 = true
+  mtu                                                      = 9000
+  bandwidth                                                = 100000
+  description                                              = "My Interface Description"
+  load_interval                                            = 30
+  vrf                                                      = "VRF1"
+  ipv4_address                                             = "1.1.1.1"
+  ipv4_netmask                                             = "255.255.255.0"
+  ipv4_verify_unicast_source_reachable_via_type            = "any"
+  ipv4_verify_unicast_source_reachable_via_allow_self_ping = true
+  ipv4_verify_unicast_source_reachable_via_allow_default   = false
+  ipv4_access_group_ingress_acl1                           = "ACL1"
+  ipv4_access_group_ingress_hardware_count                 = true
+  ipv4_access_group_ingress_interface_statistics           = true
+  ipv4_access_group_ingress_compress_level                 = 0
+  ipv4_access_group_egress_acl                             = "ACL1"
+  ipv4_access_group_egress_hardware_count                  = true
+  ipv4_access_group_egress_interface_statistics            = true
+  ipv4_access_group_egress_compress_level                  = 0
+  ipv6_verify_unicast_source_reachable_via_type            = "any"
+  ipv6_verify_unicast_source_reachable_via_allow_self_ping = true
+  ipv6_verify_unicast_source_reachable_via_allow_default   = false
+  ipv6_access_group_ingress_acl1                           = "ACL2"
+  ipv6_access_group_ingress_interface_statistics           = true
+  ipv6_access_group_ingress_compress_level                 = 0
+  ipv6_access_group_egress_acl1                            = "ACL2"
+  ipv6_access_group_egress_interface_statistics            = true
+  ipv6_access_group_egress_compress_level                  = 0
+  ipv6_link_local_address                                  = "fe80::1"
+  ipv6_link_local_zone                                     = "0"
+  ipv6_autoconfig                                          = false
+  ipv6_enable                                              = true
   ipv6_addresses = [
     {
       address       = "2001::1"
@@ -94,14 +114,40 @@ resource "iosxr_interface" "example" {
 - `flow_ipv6_egress_monitors` (Attributes List) Specify a flow monitor for packets (see [below for nested schema](#nestedatt--flow_ipv6_egress_monitors))
 - `flow_ipv6_ingress_monitor_samplers` (Attributes List) Specify a flow monitor and sampler for incoming packets (see [below for nested schema](#nestedatt--flow_ipv6_ingress_monitor_samplers))
 - `flow_ipv6_ingress_monitors` (Attributes List) Specify a flow monitor for packets (see [below for nested schema](#nestedatt--flow_ipv6_ingress_monitors))
+- `ipv4_access_group_egress_acl` (String) Access-list name
+- `ipv4_access_group_egress_compress_level` (Number) Specify ACL compression in hardware
+  - Range: `0`-`3`
+- `ipv4_access_group_egress_hardware_count` (Boolean) Count packets in hardware
+- `ipv4_access_group_egress_interface_statistics` (Boolean) Per interface statistics in hardware
+- `ipv4_access_group_ingress_acl1` (String) Access-list name
+- `ipv4_access_group_ingress_compress_level` (Number) Specify ACL compression in hardware
+  - Range: `0`-`3`
+- `ipv4_access_group_ingress_hardware_count` (Boolean) Count packets in hardware
+- `ipv4_access_group_ingress_interface_statistics` (Boolean) Per interface statistics in hardware
 - `ipv4_address` (String) IP address
 - `ipv4_netmask` (String) IP subnet mask
 - `ipv4_point_to_point` (Boolean) Enable point-to-point handling for this interface.
+- `ipv4_verify_unicast_source_reachable_via_allow_default` (Boolean) Allow default route to match when checking source address
+- `ipv4_verify_unicast_source_reachable_via_allow_self_ping` (Boolean) Allow router to ping itself (opens vulnerability in verification)
+- `ipv4_verify_unicast_source_reachable_via_type` (String) Source reachable type
+  - Choices: `any`, `rx`
+- `ipv6_access_group_egress_acl1` (String) Access-list name
+- `ipv6_access_group_egress_compress_level` (Number) Specify ACL compression in hardware
+  - Range: `0`-`3`
+- `ipv6_access_group_egress_interface_statistics` (Boolean) Per interface statistics in hardware
+- `ipv6_access_group_ingress_acl1` (String) Access-list name
+- `ipv6_access_group_ingress_compress_level` (Number) Specify ACL compression in hardware
+  - Range: `0`-`3`
+- `ipv6_access_group_ingress_interface_statistics` (Boolean) Per interface statistics in hardware
 - `ipv6_addresses` (Attributes List) IPv6 address (see [below for nested schema](#nestedatt--ipv6_addresses))
 - `ipv6_autoconfig` (Boolean) Enable slaac on Mgmt interface
 - `ipv6_enable` (Boolean) Enable IPv6 on interface
 - `ipv6_link_local_address` (String) IPv6 address
 - `ipv6_link_local_zone` (String) IPv6 address zone
+- `ipv6_verify_unicast_source_reachable_via_allow_default` (Boolean) Allow default route to match when checking source address
+- `ipv6_verify_unicast_source_reachable_via_allow_self_ping` (Boolean) Allow router to ping itself (opens vulnerability in verification)
+- `ipv6_verify_unicast_source_reachable_via_type` (String) Source reachable type
+  - Choices: `any`, `rx`
 - `l2transport` (Boolean) l2transport sub-interface
 - `l2transport_encapsulation_dot1q_second_dot1q` (String) End of VLAN range
 - `l2transport_encapsulation_dot1q_vlan_id` (String) Single VLAN id or start of VLAN range