nmcli: honor IP options for VPNs

[yan12125]

SUMMARY

This can be used for split tunneling - I extended a test as an example.

ISSUE TYPE

• Feature Pull Request

COMPONENT NAME

nmcli

ADDITIONAL INFORMATION

Here is a complete example. gw4_ignore_auto is used as VPNs often come with a default route for 0.0.0.0/0.

- name: >-
    Create a VPN L2TP connection for ansible_user to connect on vpn.example.com
    authenticating with user 'brittany' and pre-shared key as 'Brittany123'. Split tunneling
    is configured and only traffic to 192.168.200.0/24 goes throught the VPN.
  community.general.nmcli:
    type: vpn
    conn_name: my-vpn-connection
    vpn:
        permissions: "{{ ansible_user }}"
        service-type: org.freedesktop.NetworkManager.l2tp
        gateway: vpn.example.com
        password-flags: 2
        user: brittany
        ipsec-enabled: true
        ipsec-psk: "0s{{ 'Brittany123' | ansible.builtin.b64encode }}"
        gw4_ignore_auto: true
        routes4: '192.168.200.0/24'
    autoconnect: false
    state: present

This example is based on an existing example. I'm not sure if it's a good idea to include such a complex usage in examples.

community.general/plugins/modules/net_tools/nmcli.py

Lines 1344 to 1359 in 2a449eb

	- name: >-
	Create a VPN L2TP connection for ansible_user to connect on vpn.example.com
	authenticating with user 'brittany' and pre-shared key as 'Brittany123'
	community.general.nmcli:
	type: vpn
	conn_name: my-vpn-connection
	vpn:
	permissions: "{{ ansible_user }}"
	service-type: org.freedesktop.NetworkManager.l2tp
	gateway: vpn.example.com
	password-flags: 2
	user: brittany
	ipsec-enabled: true
	ipsec-psk: "0s{{ 'Brittany123' | ansible.builtin.b64encode }}"
	autoconnect: false
	state: present

[ansibullbot]

cc @alcamie101
click here for bot help

[felixfontein]

Looks good to me. Will keep this open for some more days so others can comment on this as well.

[patchback]

Backport to stable-5: 💚 backport PR created

✅ Backport PR branch: patchback/backports/stable-5/946c48d14874f92cff38afb17ad276af2e05294d/pr-5228

Backported as #5252

🤖 @patchback
I'm built with octomachinery and
my source is open — https://github.com/sanitizers/patchback-github-app.

[felixfontein]

@yan12125 thanks for fixing this!

[yan12125]

Glad to help :)