---
- debug: msg="START TRANSPORT:NXAPI nxos_acl sanity test"

- name: "Setup: Cleanup possibly existing acl."
  nxos_acl: &remove
    name: TEST_ACL
    seq: 10
    state: absent
    provider: "{{ nxapi }}"
  ignore_errors: yes

- name: "Configure ACL"
  nxos_acl: &configure
    name: TEST_ACL
    seq: 10
    action: permit
    proto: tcp
    src: 1.1.1.1/24
    src_port_op: range
    src_port1: 5
    src_port2: 20
    ack: 'enable'
    dscp: 'af43'
    dest: any
    urg: 'enable'
    psh: 'enable'
    established: 'enable'
    log: 'enable'
    fin: 'enable'
    rst: 'enable'
    syn: 'enable'
    time_range: 'ans-range'
    state: present
    provider: "{{ nxapi }}"
  register: result

- assert: &true
    that:
      - "result.changed == true"

- name: "Check Idempotence"
  nxos_acl: *configure
  register: result

- assert: &false
    that:
      - "result.changed == false"

- name: "Remove ACL"
  nxos_acl: *remove
  register: result

- assert: *true

- name: "Check Idempotence"
  nxos_acl: *remove
  register: result

- assert: *false

- debug: msg="END TRANSPORT:NXAPI nxos_acl sanity test"