-
Notifications
You must be signed in to change notification settings - Fork 173
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Move platform guide to this repo (#1024)
* Move platform guide to this repo * [pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.ci * fix platform guides * fix rendering option --------- Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
- Loading branch information
1 parent
746d4e5
commit d63b2ec
Showing
2 changed files
with
95 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,94 @@ | ||
.. _ios_platform_options: | ||
|
||
*************************************** | ||
IOS Platform Options | ||
*************************************** | ||
|
||
The `Cisco IOS <https://galaxy.ansible.com/ui/repo/published/cisco/ios>`_ collection supports Enable Mode (Privilege Escalation). This page offers details on how to use Enable Mode on IOS in Ansible. | ||
|
||
.. contents:: | ||
:local: | ||
|
||
Connections available | ||
================================================================================ | ||
|
||
.. table:: | ||
:class: documentation-table | ||
|
||
==================== ========================================== | ||
.. CLI | ||
==================== ========================================== | ||
Protocol SSH | ||
|
||
Credentials uses SSH keys / SSH-agent if present | ||
|
||
accepts ``-u myuser -k`` if using password | ||
|
||
Indirect Access by a bastion (jump host) | ||
|
||
Connection Settings ``ansible_connection: ansible.netcommon.network_cli`` | ||
|
||
Enable_mode supported: use ``ansible_become: true`` with | ||
``ansible_become_method: enable`` and ``ansible_become_password:`` | ||
|
||
Returned Data Format ``stdout[0].`` | ||
==================== ========================================== | ||
|
||
The ``ansible_connection: local`` has been deprecated. Please use ``ansible_connection: ansible.netcommon.network_cli`` instead. | ||
|
||
Using CLI in Ansible | ||
==================== | ||
|
||
Example CLI ``group_vars/ios.yml`` | ||
---------------------------------- | ||
|
||
.. code-block:: yaml | ||
|
||
ansible_connection: ansible.netcommon.network_cli | ||
ansible_network_os: cisco.ios.ios | ||
ansible_user: myuser | ||
ansible_password: !vault... | ||
ansible_become: true | ||
ansible_become_method: enable | ||
ansible_become_password: !vault... | ||
ansible_ssh_common_args: '-o ProxyCommand="ssh -W %h:%p -q bastion01"' | ||
|
||
|
||
- If you are using SSH keys (including an ssh-agent) you can remove the ``ansible_password`` configuration. | ||
- If you are accessing your host directly (not through a bastion/jump host) you can remove the ``ansible_ssh_common_args`` configuration. | ||
- If you are accessing your host through a bastion/jump host, you cannot include your SSH password in the ``ProxyCommand`` directive. To prevent secrets from leaking out (for example in ``ps`` output), SSH does not support providing passwords through environment variables. | ||
|
||
Example CLI task | ||
---------------- | ||
|
||
.. code-block:: yaml | ||
|
||
- name: Backup current switch config (ios) | ||
cisco.ios.ios_config: | ||
backup: yes | ||
register: backup_ios_location | ||
when: ansible_network_os == 'cisco.ios.ios' | ||
|
||
Warning | ||
-------- | ||
Never store passwords in plain text. We recommend using SSH keys to authenticate SSH connections. Ansible supports ssh-agent to manage your SSH keys. If you must use passwords to authenticate SSH connections, we recommend encrypting them with Ansible Vault. | ||
|
||
Cisco IOS-XE platform support matrix | ||
=================================== | ||
|
||
The following platforms and software versions have been certified by Cisco to work with this version of Ansible. | ||
|
||
.. table:: Platform / Software Minimum Requirements | ||
:align: center | ||
|
||
=================== ===================== | ||
Supported Platforms Minimum NX-OS Version | ||
=================== ===================== | ||
Cisco IOS-XE 9000 17.03.2 and later | ||
Cisco IOS-XE 8000 17.03.6 and later | ||
=================== ===================== | ||
|
||
Notes | ||
----- | ||
|
||
`Setting Timeout Option <https://docs.ansible.com/ansible/latest/network/getting_started/network_connection_options.html#timeout-options>`_ |