diff --git a/branch/main/api_facts_module.html b/branch/main/api_facts_module.html index b020ea2..72a72fa 100644 --- a/branch/main/api_facts_module.html +++ b/branch/main/api_facts_module.html @@ -192,7 +192,7 @@ see added in community.routeros 1.2.0

PEM formatted file that contains a CA certificate to be used for certificate validation.

-

See also validate_cert_hostname. Only used when tls=true and validate_certs=true.

+

See also validate_cert_hostname. Only used when tls=true and validate_certs=true.

@@ -201,7 +201,7 @@ see added in community.routeros 2.1.0

Use the specified encoding when communicating with the RouterOS device.

-

Default is ASCII. Note that UTF-8 requires librouteros 3.2.1 or newer.

+

Default is ASCII. Note that UTF-8 requires librouteros 3.2.1 or newer.

Default: "ASCII"

@@ -210,9 +210,9 @@ see

boolean

added in community.routeros 2.4.0

-

Set to true to connect without a certificate when tls=true.

-

See also validate_certs.

-

Note: this forces the use of anonymous Diffie-Hellman (ADH) ciphers. The protocol is susceptible to Man-in-the-Middle attacks, because the keys used in the exchange are not authenticated. Instead of simply connecting without a certificate to “make things work” have a look at validate_certs and ca_path.

+

Set to true to connect without a certificate when tls=true.

+

See also validate_certs.

+

Note: this forces the use of anonymous Diffie-Hellman (ADH) ciphers. The protocol is susceptible to Man-in-the-Middle attacks, because the keys used in the exchange are not authenticated. Instead of simply connecting without a certificate to “make things work” have a look at validate_certs and ca_path.

Choices:

gather_subset

list / elements=string

-

When supplied, this argument will restrict the facts collected to a given subset. Possible values for this argument include all, hardware, interfaces, and routing.

-

Can specify a list of values to include a larger subset. Values can also be used with an initial ! to specify that a specific subset should not be collected.

+

When supplied, this argument will restrict the facts collected to a given subset. Possible values for this argument include all, hardware, interfaces, and routing.

+

Can specify a list of values to include a larger subset. Values can also be used with an initial ! to specify that a specific subset should not be collected.

Default: ["all"]

@@ -247,8 +247,8 @@ see

port

integer

-

RouterOS api port. If tls is set, port will apply to TLS/SSL connection.

-

Defaults are 8728 for the HTTP API, and 8729 for the HTTPS API.

+

RouterOS api port. If tls is set, port will apply to TLS/SSL connection.

+

Defaults are 8728 for the HTTP API, and 8729 for the HTTPS API.

@@ -286,8 +286,8 @@ see

boolean

added in community.routeros 1.2.0

-

Set to true to validate hostnames in certificates.

-

See also validate_certs. Only used when tls=true and validate_certs=true.

+

Set to true to validate hostnames in certificates.

+

See also validate_certs. Only used when tls=true and validate_certs=true.

Choices:

  • false ← (default)

  • @@ -300,9 +300,9 @@ see

    boolean

    added in community.routeros 1.2.0

-

Set to false to skip validation of TLS certificates.

-

See also validate_cert_hostname. Only used when tls=true.

-

Note: instead of simply deactivating certificate validations to “make things work”, please consider creating your own CA certificate and using it to sign certificates used for your router. You can tell the module about your CA certificate with the ca_path option.

+

Set to false to skip validation of TLS certificates.

+

See also validate_cert_hostname. Only used when tls=true.

+

Note: instead of simply deactivating certificate validations to “make things work”, please consider creating your own CA certificate and using it to sign certificates used for your router. You can tell the module about your CA certificate with the ca_path option.

Choices:

  • false

  • @@ -422,7 +422,7 @@ see

    list / elements=string

All IPv4 addresses configured on the device.

-

Returned: gather_subset contains interfaces

+

Returned: gather_subset contains interfaces

@@ -430,7 +430,7 @@ see

list / elements=string

All IPv6 addresses configured on the device.

-

Returned: gather_subset contains interfaces

+

Returned: gather_subset contains interfaces

@@ -438,7 +438,7 @@ see

string

The CPU architecture of the device.

-

Returned: gather_subset contains default

+

Returned: gather_subset contains default

@@ -446,7 +446,7 @@ see

dictionary

A dictionary with BGP instance information.

-

Returned: gather_subset contains routing

+

Returned: gather_subset contains routing

@@ -454,7 +454,7 @@ see

dictionary

A dictionary with BGP peer information.

-

Returned: gather_subset contains routing

+

Returned: gather_subset contains routing

@@ -462,7 +462,7 @@ see

dictionary

A dictionary with BGP vpnv4 route information.

-

Returned: gather_subset contains routing

+

Returned: gather_subset contains routing

@@ -470,7 +470,7 @@ see

string

Current CPU load.

-

Returned: gather_subset contains default

+

Returned: gather_subset contains default

@@ -486,7 +486,7 @@ see

string

The configured hostname of the device.

-

Returned: gather_subset contains default

+

Returned: gather_subset contains default

@@ -494,7 +494,7 @@ see

dictionary

A hash of all interfaces running on the system.

-

Returned: gather_subset contains interfaces

+

Returned: gather_subset contains interfaces

@@ -502,7 +502,7 @@ see

integer

The available free memory on the remote device in MiB.

-

Returned: gather_subset contains hardware

+

Returned: gather_subset contains hardware

@@ -510,7 +510,7 @@ see

integer

The total memory on the remote device in MiB.

-

Returned: gather_subset contains hardware

+

Returned: gather_subset contains hardware

@@ -518,7 +518,7 @@ see

string

The model name returned from the device.

-

Returned: gather_subset contains default

+

Returned: gather_subset contains default

@@ -526,7 +526,7 @@ see

dictionary

The list of neighbors from the remote device.

-

Returned: gather_subset contains interfaces

+

Returned: gather_subset contains interfaces

@@ -534,7 +534,7 @@ see

dictionary

A dictionary with OSPF instances.

-

Returned: gather_subset contains routing

+

Returned: gather_subset contains routing

@@ -542,7 +542,7 @@ see

dictionary

A dictionary with OSPF neighbors.

-

Returned: gather_subset contains routing

+

Returned: gather_subset contains routing

@@ -550,7 +550,7 @@ see

dictionary

A dictionary for routes in all routing tables.

-

Returned: gather_subset contains routing

+

Returned: gather_subset contains routing

@@ -558,7 +558,7 @@ see

string

The serial number of the remote device.

-

Returned: gather_subset contains default

+

Returned: gather_subset contains default

@@ -566,7 +566,7 @@ see

dictionary

The available disk space on the remote device in MiB.

-

Returned: gather_subset contains hardware

+

Returned: gather_subset contains hardware

@@ -574,7 +574,7 @@ see

dictionary

The total disk space on the remote device in MiB.

-

Returned: gather_subset contains hardware

+

Returned: gather_subset contains hardware

@@ -582,7 +582,7 @@ see

string

The uptime of the device.

-

Returned: gather_subset contains default

+

Returned: gather_subset contains default

@@ -590,7 +590,7 @@ see

string

The operating system version running on the remote device.

-

Returned: gather_subset contains default

+

Returned: gather_subset contains default

diff --git a/branch/main/api_find_and_modify_module.html b/branch/main/api_find_and_modify_module.html index 6351a3f..e4931f2 100644 --- a/branch/main/api_find_and_modify_module.html +++ b/branch/main/api_find_and_modify_module.html @@ -193,7 +193,7 @@ see

boolean

Whether to allow that no match is found.

-

If not specified, this value is induced from whether require_matches_min is 0 or larger.

+

If not specified, this value is induced from whether require_matches_min is 0 or larger.

Choices:

@@ -216,7 +216,7 @@ see added in community.routeros 2.1.0

Use the specified encoding when communicating with the RouterOS device.

-

Default is ASCII. Note that UTF-8 requires librouteros 3.2.1 or newer.

+

Default is ASCII. Note that UTF-8 requires librouteros 3.2.1 or newer.

Default: "ASCII"

@@ -225,8 +225,8 @@ see

dictionary / required

Fields to search for.

-

The module will only consider entries in the given path that match all fields provided here.

-

Use YAML ~, or prepend keys with !, to specify an unset value.

+

The module will only consider entries in the given path that match all fields provided here.

+

Use YAML ~, or prepend keys with !, to specify an unset value.

Note that if the dictionary specified here is empty, every entry in the path will be matched.

@@ -235,9 +235,9 @@ see

boolean

added in community.routeros 2.4.0

-

Set to true to connect without a certificate when tls=true.

-

See also validate_certs.

-

Note: this forces the use of anonymous Diffie-Hellman (ADH) ciphers. The protocol is susceptible to Man-in-the-Middle attacks, because the keys used in the exchange are not authenticated. Instead of simply connecting without a certificate to “make things work” have a look at validate_certs and ca_path.

+

Set to true to connect without a certificate when tls=true.

+

See also validate_certs.

+

Note: this forces the use of anonymous Diffie-Hellman (ADH) ciphers. The protocol is susceptible to Man-in-the-Middle attacks, because the keys used in the exchange are not authenticated. Instead of simply connecting without a certificate to “make things work” have a look at validate_certs and ca_path.

Choices:

Path to query.

-

An example value is ip address. This is equivalent to running /ip address in the RouterOS CLI.

+

An example value is ip address. This is equivalent to running /ip address in the RouterOS CLI.

port

integer

-

RouterOS api port. If tls is set, port will apply to TLS/SSL connection.

-

Defaults are 8728 for the HTTP API, and 8729 for the HTTPS API.

+

RouterOS api port. If tls is set, port will apply to TLS/SSL connection.

+

Defaults are 8728 for the HTTP API, and 8729 for the HTTPS API.

@@ -328,8 +328,8 @@ see

boolean

added in community.routeros 1.2.0

-

Set to true to validate hostnames in certificates.

-

See also validate_certs. Only used when tls=true and validate_certs=true.

+

Set to true to validate hostnames in certificates.

+

See also validate_certs. Only used when tls=true and validate_certs=true.

Choices:

  • false ← (default)

  • @@ -342,9 +342,9 @@ see

    boolean

    added in community.routeros 1.2.0

-

Set to false to skip validation of TLS certificates.

-

See also validate_cert_hostname. Only used when tls=true.

-

Note: instead of simply deactivating certificate validations to “make things work”, please consider creating your own CA certificate and using it to sign certificates used for your router. You can tell the module about your CA certificate with the ca_path option.

+

Set to false to skip validation of TLS certificates.

+

See also validate_cert_hostname. Only used when tls=true.

+

Note: instead of simply deactivating certificate validations to “make things work”, please consider creating your own CA certificate and using it to sign certificates used for your router. You can tell the module about your CA certificate with the ca_path option.

Choices:

  • false

  • @@ -356,8 +356,8 @@ see

values

dictionary / required

-

On all entries matching the conditions in find, set the keys of this option to the values specified here.

-

Use YAML ~, or prepend keys with !, to specify to unset a value.

+

On all entries matching the conditions in find, set the keys of this option to the values specified here.

+

Use YAML ~, or prepend keys with !, to specify to unset a value.

@@ -413,7 +413,7 @@ see

Note

@@ -480,7 +480,7 @@ see

match_count

integer

-

The number of entries that matched the criteria in find.

+

The number of entries that matched the criteria in find.

Returned: success

Sample: 1

diff --git a/branch/main/api_info_module.html b/branch/main/api_info_module.html index b65102d..504d2e8 100644 --- a/branch/main/api_info_module.html +++ b/branch/main/api_info_module.html @@ -167,7 +167,7 @@ see
  • Allows to retrieve information for a path using the API.

  • This can be used to backup a path to restore it with the community.routeros.api_modify module.

  • -
  • Entries are normalized, dynamic and builtin entries are not returned. Use the handle_disabled and hide_defaults options to control normalization, the include_dynamic and include_builtin options to also return dynamic resp. builtin entries, and use unfiltered to return all fields including counters.

  • +
  • Entries are normalized, dynamic and builtin entries are not returned. Use the handle_disabled and hide_defaults options to control normalization, the include_dynamic and include_builtin options to also return dynamic resp. builtin entries, and use unfiltered to return all fields including counters.

  • Note that this module is still heavily in development, and only supports some paths. If you want to support new paths, or think you found problems with existing paths, please first create an issue in the community.routeros Issue Tracker.

  • @@ -194,7 +194,7 @@ see added in community.routeros 1.2.0

    PEM formatted file that contains a CA certificate to be used for certificate validation.

    -

    See also validate_cert_hostname. Only used when tls=true and validate_certs=true.

    +

    See also validate_cert_hostname. Only used when tls=true and validate_certs=true.

    @@ -203,7 +203,7 @@ see added in community.routeros 2.1.0

    Use the specified encoding when communicating with the RouterOS device.

    -

    Default is ASCII. Note that UTF-8 requires librouteros 3.2.1 or newer.

    +

    Default is ASCII. Note that UTF-8 requires librouteros 3.2.1 or newer.

    Default: "ASCII"

    @@ -212,9 +212,9 @@ see

    boolean

    added in community.routeros 2.4.0

    -

    Set to true to connect without a certificate when tls=true.

    -

    See also validate_certs.

    -

    Note: this forces the use of anonymous Diffie-Hellman (ADH) ciphers. The protocol is susceptible to Man-in-the-Middle attacks, because the keys used in the exchange are not authenticated. Instead of simply connecting without a certificate to “make things work” have a look at validate_certs and ca_path.

    +

    Set to true to connect without a certificate when tls=true.

    +

    See also validate_certs.

    +

    Note: this forces the use of anonymous Diffie-Hellman (ADH) ciphers. The protocol is susceptible to Man-in-the-Middle attacks, because the keys used in the exchange are not authenticated. Instead of simply connecting without a certificate to “make things work” have a look at validate_certs and ca_path.

    Choices:

    How to handle unset values.

    -

    exclamation prepends the keys with ! in the output with value null.

    -

    null-value uses the regular key with value null.

    -

    omit omits these values from the result.

    +

    exclamation prepends the keys with ! in the output with value null.

    +

    null-value uses the regular key with value null.

    +

    omit omits these values from the result.

    Choices:

    Path to query.

    -

    An example value is ip address. This is equivalent to running /ip address print in the RouterOS CLI.

    +

    An example value is ip address. This is equivalent to running /ip address print in the RouterOS CLI.

    Choices:

    port

    integer

    -

    RouterOS api port. If tls is set, port will apply to TLS/SSL connection.

    -

    Defaults are 8728 for the HTTP API, and 8729 for the HTTPS API.

    +

    RouterOS api port. If tls is set, port will apply to TLS/SSL connection.

    +

    Defaults are 8728 for the HTTP API, and 8729 for the HTTPS API.

    @@ -502,8 +502,8 @@ see

    boolean

    added in community.routeros 1.2.0

    -

    Set to true to validate hostnames in certificates.

    -

    See also validate_certs. Only used when tls=true and validate_certs=true.

    +

    Set to true to validate hostnames in certificates.

    +

    See also validate_certs. Only used when tls=true and validate_certs=true.

    Choices:

    • false ← (default)

    • @@ -516,9 +516,9 @@ see

      boolean

      added in community.routeros 1.2.0

    -

    Set to false to skip validation of TLS certificates.

    -

    See also validate_cert_hostname. Only used when tls=true.

    -

    Note: instead of simply deactivating certificate validations to “make things work”, please consider creating your own CA certificate and using it to sign certificates used for your router. You can tell the module about your CA certificate with the ca_path option.

    +

    Set to false to skip validation of TLS certificates.

    +

    See also validate_cert_hostname. Only used when tls=true.

    +

    Note: instead of simply deactivating certificate validations to “make things work”, please consider creating your own CA certificate and using it to sign certificates used for your router. You can tell the module about your CA certificate with the ca_path option.

    Choices:

    • false

    • diff --git a/branch/main/api_modify_module.html b/branch/main/api_modify_module.html index 8931bb0..b3fa9db 100644 --- a/branch/main/api_modify_module.html +++ b/branch/main/api_modify_module.html @@ -196,7 +196,7 @@ see added in community.routeros 1.2.0

    @@ -214,7 +214,7 @@ see added in community.routeros 2.1.0

    Use the specified encoding when communicating with the RouterOS device.

    -

    Default is ASCII. Note that UTF-8 requires librouteros 3.2.1 or newer.

    +

    Default is ASCII. Note that UTF-8 requires librouteros 3.2.1 or newer.

    Default: "ASCII"

    @@ -222,8 +222,8 @@ see

    ensure_order

    boolean

    -

    Whether to ensure the same order of the config as present in data.

    -

    Requires handle_absent_entries=remove.

    +

    Whether to ensure the same order of the config as present in data.

    +

    Requires handle_absent_entries=remove.

    Choices:

    • false ← (default)

    • @@ -236,9 +236,9 @@ see

      boolean

      added in community.routeros 2.4.0

    -

    Set to true to connect without a certificate when tls=true.

    -

    See also validate_certs.

    -

    Note: this forces the use of anonymous Diffie-Hellman (ADH) ciphers. The protocol is susceptible to Man-in-the-Middle attacks, because the keys used in the exchange are not authenticated. Instead of simply connecting without a certificate to “make things work” have a look at validate_certs and ca_path.

    +

    Set to true to connect without a certificate when tls=true.

    +

    See also validate_certs.

    +

    Note: this forces the use of anonymous Diffie-Hellman (ADH) ciphers. The protocol is susceptible to Man-in-the-Middle attacks, because the keys used in the exchange are not authenticated. Instead of simply connecting without a certificate to “make things work” have a look at validate_certs and ca_path.

    Choices:

    • false ← (default)

    • @@ -250,9 +250,9 @@ see

    handle_absent_entries

    string

    -

    How to handle entries that are present in the current config, but not in data.

    -

    ignore ignores them.

    -

    remove removes them.

    +

    How to handle entries that are present in the current config, but not in data.

    +

    ignore ignores them.

    +

    remove removes them.

    Choices:

    • "ignore" ← (default)

    • @@ -264,10 +264,10 @@ see

    handle_entries_content

    string

    -

    For a single entry in data, this describes how to handle fields that are not mentioned in that entry, but appear in the actual config.

    -

    If ignore, they are not modified.

    -

    If remove, they are removed. If at least one cannot be removed, the module will fail.

    -

    If remove_as_much_as_possible, all that can be removed will be removed. The ones that cannot be removed will be kept.

    +

    For a single entry in data, this describes how to handle fields that are not mentioned in that entry, but appear in the actual config.

    +

    If ignore, they are not modified.

    +

    If remove, they are removed. If at least one cannot be removed, the module will fail.

    +

    If remove_as_much_as_possible, all that can be removed will be removed. The ones that cannot be removed will be kept.

    Choices:

    • "ignore" ← (default)

    • @@ -295,7 +295,7 @@ see

      string / required

    Path to query.

    -

    An example value is ip address. This is equivalent to running modification commands in /ip address in the RouterOS CLI.

    +

    An example value is ip address. This is equivalent to running modification commands in /ip address in the RouterOS CLI.

    Choices:

    • "caps-man aaa"

    • @@ -447,8 +447,8 @@ see

    port

    integer

    -

    RouterOS api port. If tls is set, port will apply to TLS/SSL connection.

    -

    Defaults are 8728 for the HTTP API, and 8729 for the HTTPS API.

    +

    RouterOS api port. If tls is set, port will apply to TLS/SSL connection.

    +

    Defaults are 8728 for the HTTP API, and 8729 for the HTTPS API.

    @@ -486,8 +486,8 @@ see

    boolean

    added in community.routeros 1.2.0

    -

    Set to true to validate hostnames in certificates.

    -

    See also validate_certs. Only used when tls=true and validate_certs=true.

    +

    Set to true to validate hostnames in certificates.

    +

    See also validate_certs. Only used when tls=true and validate_certs=true.

    Choices:

    • false ← (default)

    • @@ -500,9 +500,9 @@ see

      boolean

      added in community.routeros 1.2.0

    -

    Set to false to skip validation of TLS certificates.

    -

    See also validate_cert_hostname. Only used when tls=true.

    -

    Note: instead of simply deactivating certificate validations to “make things work”, please consider creating your own CA certificate and using it to sign certificates used for your router. You can tell the module about your CA certificate with the ca_path option.

    +

    Set to false to skip validation of TLS certificates.

    +

    See also validate_cert_hostname. Only used when tls=true.

    +

    Note: instead of simply deactivating certificate validations to “make things work”, please consider creating your own CA certificate and using it to sign certificates used for your router. You can tell the module about your CA certificate with the ca_path option.

    Choices:

    • false

    • diff --git a/branch/main/api_module.html b/branch/main/api_module.html index bab9b25..0fd902e 100644 --- a/branch/main/api_module.html +++ b/branch/main/api_module.html @@ -192,7 +192,7 @@ see

      string

    Will add selected arguments in selected path to RouterOS config.

    -

    Example address=1.1.1.1/32 interface=ether1.

    +

    Example address=1.1.1.1/32 interface=ether1.

    Equivalent in RouterOS CLI /ip address add address=1.1.1.1/32 interface=ether1.

    @@ -202,7 +202,7 @@ see added in community.routeros 1.2.0

    @@ -210,8 +210,8 @@ see

    string

    Execute any/arbitrary command in selected path, after the command we can add .id.

    -

    Example path system script and cmd run .id=*03 is equivalent in RouterOS CLI /system script run number=0.

    -

    Example path ip address and cmd print is equivalent in RouterOS CLI /ip address print.

    +

    Example path system script and cmd run .id=*03 is equivalent in RouterOS CLI /system script run number=0.

    +

    Example path ip address and cmd print is equivalent in RouterOS CLI /ip address print.

    @@ -220,7 +220,7 @@ see added in community.routeros 2.1.0

    Use the specified encoding when communicating with the RouterOS device.

    -

    Default is ASCII. Note that UTF-8 requires librouteros 3.2.1 or newer.

    +

    Default is ASCII. Note that UTF-8 requires librouteros 3.2.1 or newer.

    Default: "ASCII"

    @@ -237,7 +237,7 @@ see

    list / elements=string / required

    The list of attributes to return.

    -

    Every attribute used in a where clause need to be listed here.

    +

    Every attribute used in a extended_query.where[] clause need to be listed here.

    @@ -245,15 +245,15 @@ see

    list / elements=dictionary

    Allows to restrict the objects returned.

    -

    The conditions here must all match. An or condition needs at least one of its conditions to match.

    +

    The conditions here must all match. An extended_query.where[].or condition needs at least one of its conditions to match.

    attribute

    string

    -

    The attribute to match. Must be part of attributes.

    -

    Either or or all of attribute, is, and value have to be specified.

    +

    The attribute to match. Must be part of extended_query.attributes.

    +

    Either extended_query.where[].or or all of extended_query.where[].attribute, extended_query.where[].is, and extended_query.where[].value have to be specified.

    @@ -261,9 +261,9 @@ see

    string

    The operator to use for matching.

    -

    For equality use == or eq. For less use < or less. For more use > or more.

    -

    Use in to check whether the value is part of a list. In that case, value must be a list.

    -

    Either or or all of attribute, is, and value have to be specified.

    +

    For equality use == or eq. For less use < or less. For more use > or more.

    +

    Use in to check whether the value is part of a list. In that case, extended_query.where[].value must be a list.

    +

    Either extended_query.where[].or or all of extended_query.where[].attribute, extended_query.where[].is, and extended_query.where[].value have to be specified.

    Choices:

    • "=="

    • @@ -283,14 +283,14 @@ see

      list / elements=dictionary

    A list of conditions so that at least one of them has to match.

    -

    Either or or all of attribute, is, and value have to be specified.

    +

    Either extended_query.where[].or or all of extended_query.where[].attribute, extended_query.where[].is, and extended_query.where[].value have to be specified.

    attribute

    string / required

    -

    The attribute to match. Must be part of attributes.

    +

    The attribute to match. Must be part of extended_query.attributes.

    @@ -298,8 +298,8 @@ see

    string / required

    The operator to use for matching.

    -

    For equality use == or eq. For less use < or less. For more use > or more.

    -

    Use in to check whether the value is part of a list. In that case, value must be a list.

    +

    For equality use == or eq. For less use < or less. For more use > or more.

    +

    Use in to check whether the value is part of a list. In that case, extended_query.where[].or[].value must be a list.

    Choices:

    • "=="

    • @@ -318,15 +318,15 @@ see

    value

    any / required

    -

    The value to compare to. Must be a list for is=in.

    +

    The value to compare to. Must be a list for extended_query.where[].or[].is=in.

    value

    any

    -

    The value to compare to. Must be a list for is=in.

    -

    Either or or all of attribute, is, and value have to be specified.

    +

    The value to compare to. Must be a list for extended_query.where[].is=in.

    +

    Either extended_query.where[].or or all of extended_query.where[].attribute, extended_query.where[].is, and extended_query.where[].value have to be specified.

    @@ -334,9 +334,9 @@ see

    boolean

    added in community.routeros 2.4.0

    -

    Set to true to connect without a certificate when tls=true.

    -

    See also validate_certs.

    -

    Note: this forces the use of anonymous Diffie-Hellman (ADH) ciphers. The protocol is susceptible to Man-in-the-Middle attacks, because the keys used in the exchange are not authenticated. Instead of simply connecting without a certificate to “make things work” have a look at validate_certs and ca_path.

    +

    Set to true to connect without a certificate when tls=true.

    +

    See also validate_certs.

    +

    Note: this forces the use of anonymous Diffie-Hellman (ADH) ciphers. The protocol is susceptible to Man-in-the-Middle attacks, because the keys used in the exchange are not authenticated. Instead of simply connecting without a certificate to “make things work” have a look at validate_certs and ca_path.

    Choices:

    port

    integer

    -

    RouterOS api port. If tls is set, port will apply to TLS/SSL connection.

    -

    Defaults are 8728 for the HTTP API, and 8729 for the HTTPS API.

    +

    RouterOS api port. If tls is set, port will apply to TLS/SSL connection.

    +

    Defaults are 8728 for the HTTP API, and 8729 for the HTTPS API.

    @@ -393,7 +393,7 @@ see

    string

    Remove config/value from RouterOS by ‘.id’.

    -

    Example *03 will remove config/value with id=*03 in selected path.

    +

    Example *03 will remove config/value with id=*03 in selected path.

    Equivalent in RouterOS CLI /ip address remove numbers=1.

    Note number in RouterOS CLI is different from .id.

    @@ -426,7 +426,7 @@ see

    string

    Update config/value in RouterOS by ‘.id’ in selected path.

    -

    Example .id=*03 address=1.1.1.3/32 and path ip address will replace existing ip address with .id=*03.

    +

    Example .id=*03 address=1.1.1.3/32 and path ip address will replace existing ip address with .id=*03.

    Equivalent in RouterOS CLI /ip address set address=1.1.1.3/32 numbers=1.

    Note number in RouterOS CLI is different from .id.

    @@ -443,8 +443,8 @@ see

    boolean

    added in community.routeros 1.2.0

    -

    Set to true to validate hostnames in certificates.

    -

    See also validate_certs. Only used when tls=true and validate_certs=true.

    +

    Set to true to validate hostnames in certificates.

    +

    See also validate_certs. Only used when tls=true and validate_certs=true.

    Choices:

    • false ← (default)

    • @@ -457,9 +457,9 @@ see

      boolean

      added in community.routeros 1.2.0

    -

    Set to false to skip validation of TLS certificates.

    -

    See also validate_cert_hostname. Only used when tls=true.

    -

    Note: instead of simply deactivating certificate validations to “make things work”, please consider creating your own CA certificate and using it to sign certificates used for your router. You can tell the module about your CA certificate with the ca_path option.

    +

    Set to false to skip validation of TLS certificates.

    +

    See also validate_cert_hostname. Only used when tls=true.

    +

    Note: instead of simply deactivating certificate validations to “make things work”, please consider creating your own CA certificate and using it to sign certificates used for your router. You can tell the module about your CA certificate with the ca_path option.

    Choices:

    diff --git a/branch/main/command_module.html b/branch/main/command_module.html index 96acfc8..e3f70b1 100644 --- a/branch/main/command_module.html +++ b/branch/main/command_module.html @@ -179,7 +179,7 @@

    commands

    list / elements=string / required

    -

    List of commands to send to the remote RouterOS device over the configured provider. The resulting output from the command is returned. If the wait_for argument is provided, the module is not returned until the condition is satisfied or the number of retries has expired.

    +

    List of commands to send to the remote RouterOS device over the configured provider. The resulting output from the command is returned. If the wait_for argument is provided, the module is not returned until the condition is satisfied or the number of retries has expired.

    @@ -194,7 +194,7 @@

    match

    string

    -

    The match argument is used in conjunction with the wait_for argument to specify the match policy. Valid values are all or any. If the value is set to all then all conditionals in the wait_for must be satisfied. If the value is set to any then only one of the values must be satisfied.

    +

    The match argument is used in conjunction with the wait_for argument to specify the match policy. Valid values are all or any. If the value is set to all then all conditionals in the wait_for must be satisfied. If the value is set to any then only one of the values must be satisfied.

    Choices:

    • "any"

    • @@ -206,7 +206,7 @@

      retries

      integer

    -

    Specifies the number of retries a command should by tried before it is considered failed. The command is run on the target device every retry and evaluated against the wait_for conditions.

    +

    Specifies the number of retries a command should by tried before it is considered failed. The command is run on the target device every retry and evaluated against the wait_for conditions.

    Default: 10

    diff --git a/branch/main/docsite/api-guide.html b/branch/main/docsite/api-guide.html index 01f69ce..3cea60b 100644 --- a/branch/main/docsite/api-guide.html +++ b/branch/main/docsite/api-guide.html @@ -222,16 +222,16 @@

    Setting up encryption

    -

    It is recommended to always use tls: true when connecting with the API, even if you are only connecting to the device through a trusted network. The following options control how TLS/SSL is used:

    +

    It is recommended to always use tls=true when connecting with the API, even if you are only connecting to the device through a trusted network. The following options control how TLS/SSL is used:

    force_no_cert:
    -

    Setting to true connects to the device without a certificate. This is discouraged to use in production and is susceptible to Man-in-the-Middle attacks, but might be useful when setting the device up. The default value is false.

    +

    Setting to true connects to the device without a certificate. This is discouraged to use in production and is susceptible to Man-in-the-Middle attacks, but might be useful when setting the device up. The default value is false.

    validate_certs:
    -

    Setting to false disables any certificate validation. This is discouraged to use in production, but is needed when setting the device up. The default value is true.

    +

    Setting to false disables any certificate validation. This is discouraged to use in production, but is needed when setting the device up. The default value is true.

    validate_cert_hostname:
    -

    Setting to false (default) disables hostname verification during certificate validation. This is needed if the hostnames specified in the certificate do not match the hostname used for connecting (usually the device’s IP). It is recommended to set up the certificate correctly and set this to true; the default false is chosen for backwards compatibility to an older version of the module.

    +

    Setting to false (default) disables hostname verification during certificate validation. This is needed if the hostnames specified in the certificate do not match the hostname used for connecting (usually the device’s IP). It is recommended to set up the certificate correctly and set this to true; the default false is chosen for backwards compatibility to an older version of the module.

    ca_path:

    If you are not using a commerically trusted CA certificate to sign your device’s certificate, or have not included your CA certificate in Python’s truststore, you need to point this option to the CA certificate.

    diff --git a/branch/main/docsite/quoting.html b/branch/main/docsite/quoting.html index ae5d4e1..d62b2ba 100644 --- a/branch/main/docsite/quoting.html +++ b/branch/main/docsite/quoting.html @@ -134,7 +134,7 @@
  • The community.routeros.quote_argument filter quotes an argument with or without a value: 'comment=this is a "comment"' | community.routeros.quote_argument == 'comment="this is a \\"comment\\""'.

  • The community.routeros.join filter quotes a list of arguments and joins them to one string: ['foo=bar', 'comment=foo is bar'] | community.routeros.join == 'foo=bar comment="foo is bar"'.

  • The community.routeros.split filter splits a command into a list of arguments (with or without values): 'foo=bar comment="foo is bar"' | community.routeros.split == ['foo=bar', 'comment=foo is bar']

  • -
  • The community.routeros.list_to_dict filter splits a list of arguments with values into a dictionary: ['foo=bar', 'comment=foo is bar'] | community.routeros.list_to_dict == {'foo': 'bar', 'comment': 'foo is bar'}. It has two optional arguments: require_assignment (default value true) allows to accept arguments without values when set to false; and skip_empty_values (default value false) allows to skip arguments whose value is empty.

  • +
  • The community.routeros.list_to_dict filter splits a list of arguments with values into a dictionary: ['foo=bar', 'comment=foo is bar'] | community.routeros.list_to_dict == {'foo': 'bar', 'comment': 'foo is bar'}. It has two optional arguments: require_assignment (default value true) allows to accept arguments without values when set to false; and skip_empty_values (default value false) allows to skip arguments whose value is empty.

  • diff --git a/branch/main/docsite/ssh-guide.html b/branch/main/docsite/ssh-guide.html index 6501670..3f30112 100644 --- a/branch/main/docsite/ssh-guide.html +++ b/branch/main/docsite/ssh-guide.html @@ -151,7 +151,7 @@
  • When using the community.routeros.command module module, make sure to not specify too long commands. Alternatively, add something like +cet512w to the username (replace admin with admin+cet512w) to tell RouterOS to not wrap before 512 characters in a line (see issue for details).

  • -
  • Finally, the ansible.netcommon.network_cli connection plugin uses paramiko by default to connect to devices with SSH. You can set its ssh_type option to libssh to use ansible-pylibssh instead, which offers Python bindings to libssh. See its documentation for details.

  • +
  • Finally, the ansible.netcommon.network_cli connection plugin uses paramiko by default to connect to devices with SSH. You can set its ssh_type` option to libssh to use ansible-pylibssh instead, which offers Python bindings to libssh. See its documentation for details.

  • diff --git a/branch/main/facts_module.html b/branch/main/facts_module.html index a7a4d9f..fae481a 100644 --- a/branch/main/facts_module.html +++ b/branch/main/facts_module.html @@ -176,8 +176,8 @@

    gather_subset

    list / elements=string

    -

    When supplied, this argument will restrict the facts collected to a given subset. Possible values for this argument include all, hardware, config, interfaces, and routing.

    -

    Can specify a list of values to include a larger subset. Values can also be used with an initial ! to specify that a specific subset should not be collected.

    +

    When supplied, this argument will restrict the facts collected to a given subset. Possible values for this argument include all, hardware, config, interfaces, and routing.

    +

    Can specify a list of values to include a larger subset. Values can also be used with an initial ! to specify that a specific subset should not be collected.

    Default: ["!config"]

    @@ -274,7 +274,7 @@

    list / elements=string

    All IPv4 addresses configured on the device.

    -

    Returned: gather_subset contains interfaces

    +

    Returned: gather_subset contains interfaces

    @@ -282,7 +282,7 @@

    list / elements=string

    All IPv6 addresses configured on the device.

    -

    Returned: gather_subset contains interfaces

    +

    Returned: gather_subset contains interfaces

    @@ -290,7 +290,7 @@

    string

    The CPU architecture of the device.

    -

    Returned: gather_subset contains default

    +

    Returned: gather_subset contains default

    @@ -298,7 +298,7 @@

    dictionary

    A dictionary with BGP instance information.

    -

    Returned: gather_subset contains routing

    +

    Returned: gather_subset contains routing

    @@ -306,7 +306,7 @@

    dictionary

    A dictionary with BGP peer information.

    -

    Returned: gather_subset contains routing

    +

    Returned: gather_subset contains routing

    @@ -314,7 +314,7 @@

    dictionary

    A dictionary with BGP vpnv4 route information.

    -

    Returned: gather_subset contains routing

    +

    Returned: gather_subset contains routing

    @@ -322,7 +322,7 @@

    string

    The current active config from the device.

    -

    Returned: gather_subset contains config

    +

    Returned: gather_subset contains config

    @@ -332,7 +332,7 @@

    The current active config from the device in minimal form.

    This value is idempotent in the sense that if the facts module is run twice and the device’s config was not changed between the runs, the value is identical. This is achieved by running /export and stripping the timestamp from the comment in the first line.

    -

    Returned: gather_subset contains config

    +

    Returned: gather_subset contains config

    @@ -340,7 +340,7 @@

    string

    Current CPU load.

    -

    Returned: gather_subset contains default

    +

    Returned: gather_subset contains default

    @@ -356,7 +356,7 @@

    string

    The configured hostname of the device.

    -

    Returned: gather_subset contains default

    +

    Returned: gather_subset contains default

    @@ -364,7 +364,7 @@

    dictionary

    A hash of all interfaces running on the system.

    -

    Returned: gather_subset contains interfaces

    +

    Returned: gather_subset contains interfaces

    @@ -372,7 +372,7 @@

    integer

    The available free memory on the remote device in MiB.

    -

    Returned: gather_subset contains hardware

    +

    Returned: gather_subset contains hardware

    @@ -380,7 +380,7 @@

    integer

    The total memory on the remote device in MiB.

    -

    Returned: gather_subset contains hardware

    +

    Returned: gather_subset contains hardware

    @@ -388,7 +388,7 @@

    string

    The model name returned from the device.

    -

    Returned: gather_subset contains default

    +

    Returned: gather_subset contains default

    @@ -396,7 +396,7 @@

    dictionary

    The list of neighbors from the remote device.

    -

    Returned: gather_subset contains interfaces

    +

    Returned: gather_subset contains interfaces

    @@ -404,7 +404,7 @@

    dictionary

    A dictionary with OSPF instances.

    -

    Returned: gather_subset contains routing

    +

    Returned: gather_subset contains routing

    @@ -412,7 +412,7 @@

    dictionary

    A dictionary with OSPF neighbors.

    -

    Returned: gather_subset contains routing

    +

    Returned: gather_subset contains routing

    @@ -420,7 +420,7 @@

    dictionary

    A dictionary for routes in all routing tables.

    -

    Returned: gather_subset contains routing

    +

    Returned: gather_subset contains routing

    @@ -428,7 +428,7 @@

    string

    The serial number of the remote device.

    -

    Returned: gather_subset contains default

    +

    Returned: gather_subset contains default

    @@ -436,7 +436,7 @@

    dictionary

    The available disk space on the remote device in MiB.

    -

    Returned: gather_subset contains hardware

    +

    Returned: gather_subset contains hardware

    @@ -444,7 +444,7 @@

    dictionary

    The total disk space on the remote device in MiB.

    -

    Returned: gather_subset contains hardware

    +

    Returned: gather_subset contains hardware

    @@ -452,7 +452,7 @@

    string

    The uptime of the device.

    -

    Returned: gather_subset contains default

    +

    Returned: gather_subset contains default

    @@ -460,7 +460,7 @@

    string

    The operating system version running on the remote device.

    -

    Returned: gather_subset contains default

    +

    Returned: gather_subset contains default

    diff --git a/branch/main/list_to_dict_filter.html b/branch/main/list_to_dict_filter.html index 54b9e89..cf60fac 100644 --- a/branch/main/list_to_dict_filter.html +++ b/branch/main/list_to_dict_filter.html @@ -176,7 +176,7 @@

    Input

    list / elements=string / required

    -

    A list of assignments. Can be the result of the community.routeros.split filter.

    +

    A list of assignments. Can be the result of the community.routeros.split filter.

    @@ -197,7 +197,7 @@ example: input

    require_assignment

    boolean

    -

    Allows to accept arguments without values when set to false.

    +

    Allows to accept arguments without values when set to false.

    Choices:

    • false

    • @@ -209,7 +209,7 @@ example: input

    skip_empty_values

    boolean

    -

    Allows to skip arguments whose value is empty when set to true.

    +

    Allows to skip arguments whose value is empty when set to true.

    Choices:

    • false ← (default)