---
- when:
  - r_aci_node_firewall_enabled | bool
  - not r_aci_node_use_firewalld | bool
  block:
  - name: Add iptables allow rules
    os_firewall_manage_iptables:
      name: "{{ item.service }}"
      action: add
      protocol: "{{ item.port.split('/')[1] }}"
      port: "{{ item.port.split('/')[0] }}"
    when: item.cond | default(True)
    with_items: "{{ r_aci_node_os_firewall_allow }}"
  - name: Add Multicast IGMP Rule
    command: iptables -I INPUT 1 -j ACCEPT -p igmp

- when:
  - r_aci_node_firewall_enabled | bool
  - r_aci_node_use_firewalld | bool
  block:
  - name: Add firewalld allow rules
    firewalld:
      port: "{{ item.port }}"
      permanent: true
      immediate: true
      state: enabled
    when: item.cond | default(True)
    with_items: "{{ r_aci_node_os_firewall_allow }}"
