Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/oliverl-21/ansible-role-ios_config
Ansible Role for multiple Cisco IOS/IOS-XE Config tasks
https://github.com/oliverl-21/ansible-role-ios_config
ansible ansible-role cisco cisco-device cisco-ios
Last synced: 4 days ago
JSON representation
Ansible Role for multiple Cisco IOS/IOS-XE Config tasks
- Host: GitHub
- URL: https://github.com/oliverl-21/ansible-role-ios_config
- Owner: oliverl-21
- Created: 2021-05-04T12:50:07.000Z (over 3 years ago)
- Default Branch: master
- Last Pushed: 2024-01-06T13:36:10.000Z (about 1 year ago)
- Last Synced: 2024-11-20T13:44:49.265Z (2 months ago)
- Topics: ansible, ansible-role, cisco, cisco-device, cisco-ios
- Language: Jinja
- Homepage:
- Size: 51.8 KB
- Stars: 1
- Watchers: 3
- Forks: 2
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
ansible-role-ios_config
=========
## Cisco IOS Config Ansible Role
### Current Tasks:
- Radius Server Definition
- ISE/802.1x Global Settings
- Device Sensor Configuration
- 802.1x Interface Config (paritally, logic for interface choice is missing)
- PnP ZTP workflow
### Feature:
- connect via Bastion/Jumphost based on Inventory Variable
- switched from Paramiko to libssh
### ToDo:
- DHCP Snooping Trusted Interface
- maybe ISE config (ND, NDG)
- Integrate with:
- [maxrainer.cisco_ise](https://galaxy.ansible.com/maxrainer/cisco_ise)
- [Cisco Ansible Collection](https://github.com/CiscoISE/ansible-ise)
- refine PnP ZTP Workflow
- and more common tasks
Requirements
------------
### Radius Server Definition:
- IP Address
- Hostname
- Radius-Key
- Radius Source Interface
### Interface Definition
- access VLAN
- fallback VLAN (optional)
- voice vlan (optional)
- low impact mode (optional)
### Switch to LibSSH
[Reference](https://www.ansible.com/blog/new-libssh-connection-plugin-for-ansible-network)
Usage of libssh Module (currently only linux)
```shell
pip3 install ansible-pylibssh
```
Switch to libssh for this Role
```yml
# roles/ios_config/default.yml
ansible_network_cli_ssh_type: libssh
```
Add the following to ansible.cfg to activate it globally
```ini
# ansible.cfg
[persistent_connection]
ssh_type = libssh
```
### Bastion/Jumphost Connection
To use a Bastion/Jumphost to connect to the Network Devices create:
```yaml
# inventory/group_vars/all/ansible_ssh.yml
ansible_ssh_proxy_command: >-
{% if bastion_host is defined and bastion_host != '' %}
ssh {{ hostvars[bastion_host]['ansible_user'] }}@{{ hostvars[bastion_host]['ansible_host'] }}
-o Port={{ hostvars[bastion_host]['ansible_ssh_port'] | default(22) }}
-W %h:%p
{% endif %}
ansible_ssh_common_args: >-
{% if bastion_host is defined and bastion_host != '' %}
-o ProxyCommand="{{ ansible_ssh_proxy_command }}"
{% endif %}
# Default bastion host for all hosts
bastion_host: ""
```
add ``` bastion_host: "your-host" ``` to your Inventory host/group vars where the Jumphost should be used. The Jumphost has to be defined in the Inventory
### Example
```yaml
# inventory/group_vars/ios.yml
---
ansible_user: admin
ansible_network_os: ios
bastion_host: tux01
```
```ini
# inventory/
[debian]
tux01 ansible_host=tux01.example.org
[debian:vars]
ansibler_user=tux
ansible_become_method=sudo
```
Role Variables
--------------
- fact_gather_enabled
- defaults to true
- push_config
- defines if config should be pushed to the Device or config diff should be stored locally
- ios_int_config_enabled
- enables interface configuration
- ios_sensor_config_enabled
- enables IOS Device Sensor Configuration
- ios_1xglobal_config_enabled
- enables IOS ISE/802.1x Global Config
- int_global_config_enabled
- enables 802.1x interface configuration
- pnp_config_enabled
- enables generation of PnP config should be used with fact_gather_enabled: false
Dependencies
------------
Roles: none
Collection:
- cisco.ios
- ansible.netcommon
Example Playbook
----------------
ToDo
```yaml
- name: example
hosts: csw02
gather_facts: false
connection: network_cli
roles:
- { role: ios_config, ios_config_enabled: false, ios_sensor_config_enabled: true, ios_1xglobal_config_enabled: true }
```
License
-------
GPL-3.0-or-later
Author Information
------------------
oliverl-21