Ansible cheetsheet (old)

ansible all -m ios_config -a "username=pi-telecom password=inerftdhj lines='logging host 10.100.205.134 transport udp port 16000'" -i '10.168.100.181,' -c local

ansible t4 -i t4 -c local -m ios_command -a "username=gorohov password=telecom1 authorize=true commands='show ver'"

ansible all -i 10.222.222.2, -c local -m ios_command -a "host=10.222.222.2 username=ciscoasa password=inerftdhj auth_pass=belomor authorize=true commands='show run'"`

41 ansible vld1 -i hosts -c local -m ios_command -a "username=cisco password=Cisco6o66o6 authorize=true commands='show ver'" 42 ansible vld -i hosts -c local -m ios_command -a "host=10.222.223.139 username=cisco password=Cisco6o66o6 authorize=true commands='show ver'" 43 ansible vld -i hosts -c local -m ios_command -a "username=cisco password=Cisco6o66o6 authorize=true commands='show ver'" 44 ansible -c local -m ios_command -a "host=10.222.222.5 username=cisco password=Cisco6o66o6 authorize=true commands='show ver'" ansible vld -i hosts -m raw -a "show version" -u cisco -k 62 sudo pip install pexpect 63 vim raw_telnet.yml 64 ansible-playbook raw_telnet.yml -e '{"COMMAND":"show stp"} 65 ansible-playbook raw_telnet.yml -e '{"COMMAND":"show ver"} 66 ansible-playbook raw_telnet.yml -e '{"COMMAND":"show snmp"}

файлы переменных, относящиеся к конкретным хостам, нужно сохранять в папку host_vars, относящиеся к конкретным группам - в папку group_vars.

vault 2 ansible-vault encrypt_string

vars: passwd: !vault | $ANSIBLE_VAULT;1.1;AES256 35623933636433346136666633623638383532393936373131376235383064633639393932386638 3633616338633063313364393562633365333736386264310a653734343864383637376263613366 31616261623436623130383438326464313166616436343035316139653330643735626535666339 6262663038366232660a313236353737346131376663656161653933383639363065636463343934 6166

tasks:

password: ""

`ansible-playbook uri.yml --ask-vault-pass

example

ansible atz -m ping --ask-pass -u pi-telecom -i hosts -c local ansible-playbook raw_ssh.yml --ask-vault-pass ansible-playbook nogit/vlan.yml --ask-pass -u pi-telecom -i ./nogit/host ansible all -i '10.0.3.248,' -m ping -u ubuntu ansible-playbook nogit/vlan.yml -i '10.168.100.141,'

sho interface ansible all -m ios_command -a "commands='show runn int GigabitEthernet5/4'" --ask-pass -u pi-telecom -i '10.168.100.5,' -c local

add vlan ansible all -m ios_config -a "parents='interface GigabitEthernet1/0/1' lines='switchport trunk allowed vlan add 60'" --ask-pass -u pi-telecom -i '10.168.100.134,' -c local

write memory ansible all -m ios_command -a "commands='write'" --ask-pass -u pi-telecom -i '10.168.100.134,' -c local

ansible ospa -m ios_command -a "username=pi-telecom password=inerftdhj commands='show vlan | i 60'" -i nogit/host -c local > /tmp/1

ansible all -m ios_command -a "username=pi-telecom password=inerftdhj commands='show vlan | i 60'" -i '10.168.100.5,' -c local

ansible all -m ios_config -a "username=pi-telecom password=inerftdhj parents='interface FastEthernet0/10' lines='switchport access vlan 60' lines='description OSPA' lines='no switchport voice vlan 32'" -i '10.168.100.108,' -c local

ansible all -m ios_config -a "username=pi-telecom password=inerftdhj parents='interface FastEthernet0/10' lines='no switchport access vlan 60' after='no description OSPA'" -i '10.168.100.108,' -c local ansible all -m ios_config -a "username=pi-telecom password=inerftdhj parents='interface FastEthernet0/10' lines='switchport voice vlan 32'" -i '10.168.100.108,' -c local

ansible ospa -m ios_command -a "username=pi-telecom password=inerftdhj commands='show running-config'" -i nogit/host -c local > /tmp/1

sho runn | i aaa aaa authentication login network-admins local group ACS-Group aaa authorization exec network-admins local

vlan60 switchport trunk allowed vlan add 60

switchport access vlan 60 no switchport voice vlan 32

ansible all -m ios_command -a "username=ciscoasa password=inerftdhj auth_pass=belomor commands='show runn'" -i '10.222.222.2,' -c local

ansible galaxy

ansible-galaxy init /etc/ansible/roles/openvpn --offline