cisco.dnac.network_profile_wireless_workflow_manager module – Resource module for managing network wireless profile in Cisco Catalyst Center

Note

This module is part of the cisco.dnac collection (version 6.42.0).

You might already have this collection installed if you are using the ansible package. It is not included in ansible-core. To check whether it is installed, run ansible-galaxy collection list.

To install it, use: ansible-galaxy collection install cisco.dnac. You need further requirements to be able to use this module, see Requirements for details.

To use it in a playbook, specify: cisco.dnac.network_profile_wireless_workflow_manager.

New in cisco.dnac 6.37.0

Synopsis

  • This module allows the creation and deletion of wireless profiles in Cisco Catalyst Center.

  • It enables configuring SSID details, assigning profile names, and managing additional interface settings, destination ports, and protocols.

  • This module interacts with Cisco Catalyst Center’s to create profile name, SSID details, additional interface details destination port and protocol.

Requirements

The below requirements are needed on the host that executes this module.

  • dnacentersdk >= 2.8.6

  • python >= 3.9

Parameters

Parameter

Comments

config

list / elements=dictionary / required

A list containing the details for network wireless profile creation.

additional_interfaces

list / elements=dictionary

Specifies additional interfaces to be added to this wireless profile. If the specified interface name and VLAN ID do not exist, they will be created.

interface_name

string / required

Name of the additional interface.

vlan_id

integer / required

VLAN ID for the interface. It must be a numeric value between 1 and 4094. This field is required if the VLAN interface and ID do not already exist.

ap_zones

list / elements=dictionary

Defines AP (Access Point) zones that need to be associated with the wireless network profile.

ap_zone_name

string / required

Name of the AP zone to be created and associated with the wireless profile.

rf_profile_name

string / required

Specifies the Radio Frequency (RF) profile to be assigned to the AP zone. This can be a predefined profile such as “HIGH”, “LOW”, “TYPICAL”, or a custom RF profile created by the user. For example, “HIGH”.

ssids

list / elements=string / required

A list of SSIDs to be linked to this AP zone. For example, [“SSID1”, “SSID2”].

day_n_templates

list / elements=string

List of Day-N template names assigned to the profile.

feature_template_designs

list / elements=dictionary

List of feature template designs to be assigned or removed to/from the wireless network profile. Feature templates provide advanced configuration capabilities for wireless infrastructure including AAA settings, SSID configurations, CleanAir parameters, and RRM settings. These templates enable standardized configuration deployment across wireless network profiles.

applicability_ssids

list / elements=string

A list of SSIDs to which this feature template applies. If “Default Advanced SSID Design” is selected for the ‘feature_templates’, this feature template will automatically apply to all SSIDs, regardless of this list’s content. For example, [“SSID1”, “SSID2”].

Default: ["All"]

design_type

string

The category or name of the feature template to be applied. This defines the functional area of the configuration (For example, AAA, SSID, CleanAir). Only one feature template category can be specified per entry in this list. For support values: - AAA_RADIUS_ATTRIBUTES_CONFIGURATION - ADVANCED_SSID_CONFIGURATION - CLEANAIR_CONFIGURATION - DOT11AX_CONFIGURATION - DOT11BE_STATUS_CONFIGURATION - EVENT_DRIVEN_RRM_CONFIGURATION - FLEX_CONFIGURATION - MULTICAST_CONFIGURATION - RRM_FRA_CONFIGURATION - RRM_GENERAL_CONFIGURATION

feature_templates

list / elements=string / required

A list of specific design names or IDs to apply within the chosen feature template category. These designs include various parameters and settings for wireless infrastructure configuration. If “Default Advanced SSID Design” is included in this list, it is comprehensive for SSID configuration, and no other template designs are typically needed for that specific SSID feature.

profile_name

string / required

Specify the name of the wireless profile that needs to be created.

site_names

list / elements=string

List of site names assigned to the profile. For example, [“Global/USA/New York/BLDNYC”].

ssid_details

list / elements=dictionary

Contains the SSID details required to update or configure the wireless network profile.

anchor_group_name

string

The name of the anchor group if SSID anchoring is required. SSID anchoring is used in mobility architectures where traffic for a particular SSID is tunneled to a designated anchor controller.

dot11be_profile_name

string

The 802.11be profile name to be assigned to this SSID. This profile defines advanced Wi-Fi 7 (802.11be) parameters to optimize network performance and efficiency.

enable_fabric

boolean

Set to `True` to enable fabric mode for this SSID. When enabled, the SSID operates within a Cisco SD-Access fabric network, leveraging policy-based segmentation and automation.

Choices:

  • false

  • true

interface_name

string

The name of the network interface where this SSID is configured. If specified, the SSID will be mapped to this interface instead of being part of a VLAN group.

local_to_vlan

integer

The VLAN ID to which the SSID is mapped. This must be a numeric value between 1 and 4094, ensuring proper network segmentation.

ssid_name

string / required

The name of the SSID (Service Set Identifier) to be configured.

vlan_group_name

string

The VLAN group name to which this SSID belongs, if applicable. VLAN groups allow multiple VLANs to be logically grouped for efficient traffic segmentation and policy enforcement.

config_verify

boolean

Set to `True` to enable configuration verification on Cisco Catalyst Center after applying the playbook config. This will ensure that the system validates the configuration state after the change is applied.

Choices:

  • false ← (default)

  • true

dnac_api_task_timeout

integer

Defines the timeout in seconds for API calls to retrieve task details. If the task details are not received within this period, the process will end, and a timeout notification will be logged.

Default: 1200

dnac_debug

boolean

Indicates whether debugging is enabled in the Cisco Catalyst Center SDK.

Choices:

  • false ← (default)

  • true

dnac_host

string / required

The hostname of the Cisco Catalyst Center.

dnac_log

boolean

Flag to enable/disable playbook execution logging.

When true and dnac_log_file_path is provided, - Create the log file at the execution location with the specified name.

When true and dnac_log_file_path is not provided, - Create the log file at the execution location with the name ‘dnac.log’.

When false, - Logging is disabled.

If the log file doesn’t exist, - It is created in append or write mode based on the “dnac_log_append” flag.

If the log file exists, - It is overwritten or appended based on the “dnac_log_append” flag.

Choices:

  • false ← (default)

  • true

dnac_log_append

boolean

Determines the mode of the file. Set to True for ‘append’ mode. Set to False for ‘write’ mode.

Choices:

  • false

  • true ← (default)

dnac_log_file_path

string

Governs logging. Logs are recorded if dnac_log is True.

If path is not specified, - When ‘dnac_log_append’ is True, ‘dnac.log’ is generated in the current Ansible directory; logs are appended. - When ‘dnac_log_append’ is False, ‘dnac.log’ is generated; logs are overwritten.

If path is specified, - When ‘dnac_log_append’ is True, the file opens in append mode. - When ‘dnac_log_append’ is False, the file opens in write (w) mode. - In shared file scenarios, without append mode, content is overwritten after each module execution. - For a shared log file, set append to False for the 1st module (to overwrite); for subsequent modules, set append to True.

Default: "dnac.log"

dnac_log_level

string

Sets the threshold for log level. Messages with a level equal to or higher than this will be logged. Levels are listed in order of severity [CRITICAL, ERROR, WARNING, INFO, DEBUG].

CRITICAL indicates serious errors halting the program. Displays only CRITICAL messages.

ERROR indicates problems preventing a function. Displays ERROR and CRITICAL messages.

WARNING indicates potential future issues. Displays WARNING, ERROR, CRITICAL messages.

INFO tracks normal operation. Displays INFO, WARNING, ERROR, CRITICAL messages.

DEBUG provides detailed diagnostic info. Displays all log messages.

Default: "WARNING"

dnac_password

string

The password for authentication at the Cisco Catalyst Center.

dnac_port

string

Specifies the port number associated with the Cisco Catalyst Center.

Default: "443"

dnac_task_poll_interval

integer

Specifies the interval in seconds between successive calls to the API to retrieve task details.

Default: 2

dnac_username

aliases: user

string

The username for authentication at the Cisco Catalyst Center.

Default: "admin"

dnac_verify

boolean

Flag to enable or disable SSL certificate verification.

Choices:

  • false

  • true ← (default)

dnac_version

string

Specifies the version of the Cisco Catalyst Center that the SDK should use.

Default: "2.2.3.3"

state

string

Specifies the desired state for the configuration. If “merged”, the module will create or update the configuration, adding new settings or modifying existing ones. If “deleted”, it will remove the specified settings.

Choices:

  • "merged" ← (default)

  • "deleted"

validate_response_schema

boolean

Flag for Cisco Catalyst Center SDK to enable the validation of request bodies against a JSON schema.

Choices:

  • false

  • true ← (default)

Notes

Note

  • SDK Method used are wireless.create_wireless_profile , wireless.update_application_policy, wireless.get_wireless_profile, site_design.assign_sites, wireless.get_interfaces wireless.create_interface

  • Paths used are GET dna/intent/api/v1/wirelessProfiles POST dna/intent/api/v1/wirelessProfiles/{ GET /dna/intent/api/v1/app-policy-intent DELETE /dna/intent/api/v1/app-policy-intent GET /dna/intent/api/v1/wirelessSettings/interfaces POST /dna/intent/api/v1/wirelessSettings/interfaces

  • Does not support check_mode

  • The plugin runs on the control node and does not use any ansible connection plugins instead embedded connection manager from Cisco Catalyst Center SDK

  • The parameters starting with dnac_ are used by the Cisco Catalyst Center Python SDK to establish the connection

Examples

---
- hosts: dnac_servers
  vars_files:
    - credentials.yml
  gather_facts: false
  connection: local
  tasks:
    - name: Create network wireless profile
      cisco.dnac.network_profile_wireless_workflow_manager:
        dnac_host: "{{ dnac_host }}"
        dnac_username: "{{ dnac_username }}"
        dnac_password: "{{ dnac_password }}"
        dnac_verify: "{{ dnac_verify }}"
        dnac_port: "{{ dnac_port }}"
        dnac_version: "{{ dnac_version }}"
        dnac_debug: "{{ dnac_debug }}"
        dnac_log: true
        dnac_log_level: DEBUG
        config_verify: true
        dnac_api_task_timeout: 1000
        dnac_task_poll_interval: 1
        state: merged
        config:
          - profile_name: Corporate_Wireless_Profile
            site_names:
              - Global/Headquarters
              - Global/BranchOffice
            ssid_details:
              - ssid_name: Corporate_WiFi
                enable_fabric: false
                dot11be_profile_name: Corporate_VLAN
                vlan_group_name: Corporate_VLAN_Group
              - ssid_name: Guest_WiFi
                enable_fabric: false
                dot11be_profile_name: Corporate_VLAN
                interface_name: guest_network
                local_to_vlan: 3002
            ap_zones:
              - ap_zone_name: HQ_AP_Zone
                rf_profile_name: HIGH
                ssids:
                  - Corporate_WiFi
              - ap_zone_name: Branch_AP_Zone
                rf_profile_name: TYPICAL
                ssids:
                  - Guest_WiFi
            additional_interfaces:
              - interface_name: Corp_Interface_1
                vlan_id: 100
              - interface_name: Guest_Interface_1
                vlan_id: 3002
            day_n_templates:
              - Wireless_Controller_Config
            feature_template_designs:
              - design_type: Advanced SSID Configuration
                feature_templates:
                  - Default Advanced SSID Design
                applicability_ssids:
                  - HQ_WiFi
                  - Branch_Secure

    - name: Create network wireless profile name only
      cisco.dnac.network_profile_wireless_workflow_manager:
        dnac_host: "{{ dnac_host }}"
        dnac_username: "{{ dnac_username }}"
        dnac_password: "{{ dnac_password }}"
        dnac_verify: "{{ dnac_verify }}"
        dnac_port: "{{ dnac_port }}"
        dnac_version: "{{ dnac_version }}"
        dnac_debug: "{{ dnac_debug }}"
        dnac_log: true
        dnac_log_level: DEBUG
        config_verify: true
        dnac_api_task_timeout: 1000
        dnac_task_poll_interval: 1
        state: merged
        config:
          - profile_name: Corporate_Wireless_Profile

    - name: Create network wireless profile assign to site
      cisco.dnac.network_profile_wireless_workflow_manager:
        dnac_host: "{{ dnac_host }}"
        dnac_username: "{{ dnac_username }}"
        dnac_password: "{{ dnac_password }}"
        dnac_verify: "{{ dnac_verify }}"
        dnac_port: "{{ dnac_port }}"
        dnac_version: "{{ dnac_version }}"
        dnac_debug: "{{ dnac_debug }}"
        dnac_log: true
        dnac_log_level: DEBUG
        config_verify: true
        dnac_api_task_timeout: 1000
        dnac_task_poll_interval: 1
        state: merged
        config:
          - profile_name: Corporate_Wireless_Profile
            site_names:
              - Global/USA/SAN JOSE/SJ_BLD20

    - name: Create network wireless profile with feature template assign to site
      cisco.dnac.network_profile_wireless_workflow_manager:
        dnac_host: "{{ dnac_host }}"
        dnac_username: "{{ dnac_username }}"
        dnac_password: "{{ dnac_password }}"
        dnac_verify: "{{ dnac_verify }}"
        dnac_port: "{{ dnac_port }}"
        dnac_version: "{{ dnac_version }}"
        dnac_debug: "{{ dnac_debug }}"
        dnac_log: true
        dnac_log_level: DEBUG
        config_verify: true
        dnac_api_task_timeout: 1000
        dnac_task_poll_interval: 1
        state: merged
        config:
          - profile_name: Corporate_Wireless_Profile
            site_names:
              - Global/USA/SAN JOSE/SJ_BLD20/FLOOR3
            feature_template_designs:
              - design_type: AAA_RADIUS_ATTRIBUTES_CONFIGURATION
                feature_templates:
                  - Default AAA_Radius_Attributes_Configuration

    - name: Update network wireless profile with feature template
      cisco.dnac.network_profile_wireless_workflow_manager:
        dnac_host: "{{ dnac_host }}"
        dnac_username: "{{ dnac_username }}"
        dnac_password: "{{ dnac_password }}"
        dnac_verify: "{{ dnac_verify }}"
        dnac_port: "{{ dnac_port }}"
        dnac_version: "{{ dnac_version }}"
        dnac_debug: "{{ dnac_debug }}"
        dnac_log: true
        dnac_log_level: DEBUG
        config_verify: true
        dnac_api_task_timeout: 1000
        dnac_task_poll_interval: 1
        state: merged
        config:
          - profile_name: Corporate_Wireless_Profile
            site_names:
              - Global/USA/SAN JOSE/SJ_BLD20/FLOOR3
            feature_template_designs:
              - design_type: AAA_RADIUS_ATTRIBUTES_CONFIGURATION
                feature_templates:
                  - Default AAA_Radius_Attributes_Configuration
              - design_type: CLEANAIR_CONFIGURATION
                feature_templates:
                  - SAMPLE
                  - Default CleanAir 6GHz Design

    - name: Create network wireless profile with SSID details
      cisco.dnac.network_profile_wireless_workflow_manager:
        dnac_host: "{{ dnac_host }}"
        dnac_username: "{{ dnac_username }}"
        dnac_password: "{{ dnac_password }}"
        dnac_verify: "{{ dnac_verify }}"
        dnac_port: "{{ dnac_port }}"
        dnac_version: "{{ dnac_version }}"
        dnac_debug: "{{ dnac_debug }}"
        dnac_log: true
        dnac_log_level: DEBUG
        config_verify: true
        dnac_api_task_timeout: 1000
        dnac_task_poll_interval: 1
        state: merged
        config:
          - profile_name: Corporate_Wireless_Profile
            ssid_details:
              - ssid_name: Guest_WiFi
                enable_fabric: false
                dot11be_profile_name: Corporate_VLAN
                interface_name: guest_network
                local_to_vlan: 3002
              - ssid_name: ODC_WiFi
                enable_fabric: false
                dot11be_profile_name: Corporate_VLAN
                interface_name: guest_network
                local_to_vlan: 3001

    - name: Update network wireless profile with additional SSID details
      cisco.dnac.network_profile_wireless_workflow_manager:
        dnac_host: "{{ dnac_host }}"
        dnac_username: "{{ dnac_username }}"
        dnac_password: "{{ dnac_password }}"
        dnac_verify: "{{ dnac_verify }}"
        dnac_port: "{{ dnac_port }}"
        dnac_version: "{{ dnac_version }}"
        dnac_debug: "{{ dnac_debug }}"
        dnac_log: true
        dnac_log_level: DEBUG
        config_verify: true
        dnac_api_task_timeout: 1000
        dnac_task_poll_interval: 1
        state: merged
        config:
          - profile_name: Corporate_Wireless_Profile
            ssid_details:
              - ssid_name: Guest_WiFi
                enable_fabric: false
                dot11be_profile_name: Corporate_VLAN
                interface_name: guest_network
                local_to_vlan: 3002
              - ssid_name: ODC_WiFi
                enable_fabric: false
                dot11be_profile_name: Corporate_VLAN
                interface_name: guest_network
                local_to_vlan: 3001
              - ssid_name: Corporate_WiFi
                enable_fabric: false
                dot11be_profile_name: Corporate_VLAN
                interface_name: guest_network
                local_to_vlan: 3003

    - name: Update wireless network profile
      cisco.dnac.network_profile_wireless_workflow_manager:
        dnac_host: "{{ dnac_host }}"
        dnac_username: "{{ dnac_username }}"
        dnac_password: "{{ dnac_password }}"
        dnac_verify: "{{ dnac_verify }}"
        dnac_port: "{{ dnac_port }}"
        dnac_version: "{{ dnac_version }}"
        dnac_debug: "{{ dnac_debug }}"
        dnac_log: true
        dnac_log_level: DEBUG
        config_verify: true
        dnac_api_task_timeout: 1000
        dnac_task_poll_interval: 1
        state: merged
        config:
          - profile_name: Corporate_Wireless_Profile
            site_names:
              - Global/FrontOffice
            ssid_details:
              - ssid_name: Guest_WiFi
                enable_fabric: false
                dot11be_profile_name: Corporate_VLAN
                interface_name: guest_network
                local_to_vlan: 3002
            ap_zones:
              - ap_zone_name: Branch_AP_Zone
                rf_profile_name: TYPICAL
                ssids:
                  - Guest_WiFi
            additional_interfaces:
              - interface_name: Guest_Interface_4
                vlan_id: 2002
            day_n_templates:
              - Wireless_Controller_Config

    - name: Delete wireless profile from Cisco Catalyst Center.
      cisco.dnac.network_profile_wireless_workflow_manager:
        dnac_host: "{{ dnac_host }}"
        dnac_username: "{{ dnac_username }}"
        dnac_password: "{{ dnac_password }}"
        dnac_verify: "{{ dnac_verify }}"
        dnac_port: "{{ dnac_port }}"
        dnac_version: "{{ dnac_version }}"
        dnac_debug: "{{ dnac_debug }}"
        dnac_log: true
        dnac_log_level: DEBUG
        config_verify: true
        dnac_api_task_timeout: 1000
        dnac_task_poll_interval: 1
        state: deleted
        config:
          - profile_name: Corporate_Wireless_Profile

Return Values

Common return values are documented here, the following are the fields unique to this module:

Key

Description

response_deleted

dictionary

Response returned when wireless profile deletion completes successfully. Contains details about profile removal and site disassociation.

Returned: always when state=deleted

Sample: {"changed": true, "msg": "Wireless profile(s) deleted and verified successfully", "response": [{"profile_name": "Corporate_Wireless_Profile", "sites_unassigned": "Sites successfully disassociated before deletion", "status": "Network Profile [ff0003b4-adab-4de4-af0e-0cf07d6df07f] Successfully Deleted"}], "status": "success"}

response_failed

dictionary

Response when wireless profile operations fail. Contains error details and information about what failed.

Returned: when operations fail

Sample: {"changed": false, "msg": "Failed to create/update wireless profile: API validation error", "response": [{"error": "Invalid SSID configuration: AP Zone SSID names does not exist.", "failed_operation": "profile_creation", "profile_name": "Corporate_Wireless_Profile"}], "status": "failed"}

response_merged

dictionary

Response returned when wireless profile operations complete successfully. Contains details about profile creation, updates, site assignments, and template associations.

Returned: always when state=merged

Sample: {"profile_create_basic": {"changed": true, "msg": "Wireless profile(s) created/updated and verified successfully", "response": [{"profile_name": "Corporate_Wireless_Profile", "profile_status": "Network Profile [ff0003b4-adab-4de4-af0e-0cf07d6df07f] Successfully Created"}], "status": "success"}, "profile_create_with_sites": {"changed": true, "msg": "Wireless profile(s) created/updated and verified successfully", "response": [{"profile_name": "Corporate_Wireless_Profile", "profile_status": "Network Profile [9a1c37bd-52a9-436c-af8c-35e64f788abd] Successfully Created", "site_status": "Sites ['Global/USA/SAN JOSE/SJ_BLD20/FLOOR3', 'Global/USA/SAN JOSE/SJ_BLD20/FLOOR1'] successfully associated to network profile: Corporate_Wireless_Profile"}], "status": "success"}, "profile_update_with_template_assignment": {"changed": true, "msg": "Wireless profile(s) created/updated and verified successfully", "response": [{"profile_name": "Corporate_Wireless_Profile", "profile_status": "Network Profile [bba6fd01-9d65-4bde-973a-a7ba6a9ad9b4] Successfully Updated", "template_status": "Templates successfully attached to network profile"}], "status": "success"}}

response_no_changes

dictionary

Response when no changes are required as the desired state already exists.

Returned: when configuration already matches desired state

Sample: {"changed": false, "msg": "No changes required, profile(s) already exist and match desired configuration", "response": [], "status": "success"}

response_partial_success

dictionary

Response when some operations succeed but others encounter issues. Contains details about successful operations and any warnings or failures.

Returned: when some operations succeed but others fail

Sample: {"changed": true, "msg": "Wireless profile(s) created/updated with warnings", "response": [{"profile_name": "Corporate_Wireless_Profile", "profile_status": "Network Profile [ff0003b4-adab-4de4-af0e-0cf07d6df07f] Successfully Created", "warnings": ["Some templates could not be attached due to permission issues", "Site assignment failed for 1 out of 3 sites"]}], "status": "success", "warnings": 2}

response_verification_failed

dictionary

Response when profile operations complete but verification fails. Indicates the operation may have succeeded but the final state doesn’t match expectations.

Returned: when config_verify=true and verification fails

Sample: {"changed": true, "msg": "Profile operation completed but verification failed", "response": [{"operation_status": "Network Profile [ff0003b4-adab-4de4-af0e-0cf07d6df07f] Successfully Created", "profile_name": "Corporate_Wireless_Profile", "verification_error": "Unable to verify the profile doesn't match expected state"}], "status": "failed"}

Authors

  • A Mohamed Rafeek (@mabdulk2)

  • Madhan Sankaranarayanan (@madhansansel)