From 3b088009930464e008903c623c9b4db1a439028a Mon Sep 17 00:00:00 2001
From: pavel <pavel.larkin@ikeja.co.za>
Date: Wed, 26 Nov 2025 16:52:18 +0200
Subject: [PATCH] 1652

---
 files/ansible-playbooks/update-indoor3.yml | 54 +++++++++++++++++++++-
 1 file changed, 53 insertions(+), 1 deletion(-)

diff --git a/files/ansible-playbooks/update-indoor3.yml b/files/ansible-playbooks/update-indoor3.yml
index 22704bd..b55e45c 100644
--- a/files/ansible-playbooks/update-indoor3.yml
+++ b/files/ansible-playbooks/update-indoor3.yml
@@ -173,6 +173,58 @@
           - "dev2_conn_method={{ dev2_conn_method }}"
           - "lldp_dev2_ip={{ lldp_dev2_ip | default('<none>') }}"
 
+    # ------ LLDP IPv6 discovery for tunnel mode (Dev1 → Dev2 link-local) ------
+    - name: Discover DEV2 candidate IPv6 via LLDP on DEV1 (best-effort)
+      when: dev2_conn_method == "tunnel"
+      ansible.builtin.raw: >
+        {{ pathprefix }}
+        DIGITS="{{ dev2_lldp_digits }}";
+        cat /var/run/lldp_server.json 2>/dev/null \
+          | grep "${DIGITS}" -A 15 \
+          | grep 'address_ipv6' \
+          | awk -F'"' '{ print $4 }' \
+          | head -n1
+      register: dev2_lldp_ip6_raw
+      changed_when: false
+      failed_when: false
+
+    - name: Capture LLDP-derived DEV2 IPv6 (if any)
+      when: dev2_conn_method == "tunnel"
+      ansible.builtin.set_fact:
+        lldp_dev2_ip6: "{{ (dev2_lldp_ip6_raw.stdout | default('')) | trim }}"
+      changed_when: false
+
+    - name: Debug LLDP IPv6 candidate for DEV2 (new debug)
+      when: dev2_conn_method == "tunnel" and debugging | bool
+      delegate_to: localhost
+      ansible.builtin.debug:
+        msg:
+          - "LLDP candidate IPv6={{ lldp_dev2_ip6 | default('<none>') }}"
+
+    # Build the remote tunnel target: prefer LLDP IPv6 if present, else 192.168.1.1
+    - name: Build tunnel remote target for DEV2 (prefer LLDP IPv6 when available)
+      when: dev2_conn_method == "tunnel"
+      delegate_to: localhost
+      ansible.builtin.set_fact:
+        dev2_tunnel_target_host: >-
+          {{
+            (lldp_dev2_ip6 is defined and (lldp_dev2_ip6 | string | trim | length > 0))
+            | ternary(
+                '[' ~ (lldp_dev2_ip6 | string | trim) ~ '%' ~ (dev1_iface | string | trim) ~ ']',
+                dev2_host | string
+              )
+          }}
+        dev2_tunnel_target_port: "{{ dev2_port | string }}"
+      changed_when: false
+
+    - name: Debug tunnel remote target for DEV2 (IPv4/IPv6)
+      when: dev2_conn_method == "tunnel" and debugging | bool
+      delegate_to: localhost
+      ansible.builtin.debug:
+        msg:
+          - "dev2_tunnel_target={{ dev2_tunnel_target_host | default(dev2_host) }}:{{ dev2_tunnel_target_port | default(dev2_port) }}"
+
+
     # ------ LLDP IPv6 discovery for tunnel mode (Dev1 → Dev2 link-local) ------
     - name: Discover DEV2 candidate IPv6 via LLDP on DEV1 (best-effort)
       when: dev2_conn_method == "tunnel"
@@ -459,7 +511,7 @@
         HOST="{{ ansible_host | default(inventory_hostname) }}"
         sshpass -p '{{ dev1_pass }}' ssh -f -N {{ ssh_opts_common }} \
             -M -S "{{ _ctrl_sock }}" \
-            -L "127.0.0.1:{{ _local_port }}:{{ dev2_tunnel_target | default(dev2_host ~ ':' ~ dev2_port) }}" \
+            -L "127.0.0.1:{{ _local_port }}:{{ dev2_tunnel_target_host | default(dev2_host) }}:{{ dev2_tunnel_target_port | default(dev2_port) }}" \
             "${USER}@${HOST}"
       args:
         executable: /bin/bash