From f7ff158b0ad686fb552806583db0a7289885f35b Mon Sep 17 00:00:00 2001 From: Vlad R Date: Mon, 27 Jun 2022 09:55:16 +0000 Subject: [PATCH] Added FQCN to current playbooks + minor changes --- ios_devices/device_audit.yml | 10 +++---- ios_devices/device_provisioning.yml | 41 +++++++++++++++----------- ios_devices/inventory.yml | 2 +- ios_devices/remove_user.yml | 17 +++++++++++ ios_devices/roles/common/vars/main.yml | 26 ++++++++-------- 5 files changed, 58 insertions(+), 38 deletions(-) create mode 100644 ios_devices/remove_user.yml diff --git a/ios_devices/device_audit.yml b/ios_devices/device_audit.yml index 6ea15a3..f0e533b 100644 --- a/ios_devices/device_audit.yml +++ b/ios_devices/device_audit.yml @@ -1,5 +1,6 @@ --- -## This playbook collects the device facts and prints out key information +## This playbook collects the device facts and prints out key information. It supports only basice device features and does not supply full information +## for devices which feature VRFs or multi-instance capabilities. - name: Audit devices and print key information hosts: baguleykit @@ -11,19 +12,16 @@ tasks: - name: Collect device configuration - ios_facts: + cisco.ios.ios_facts: gather_subset: all register: current_config - - debug: - msg: "ANSIBLE-{{ current_config.ansible_facts.ansible_net_model }}" - - name: Print device identity info debug: msg: "{{ current_config.ansible_facts.ansible_net_hostname }} is reachable and the OS is {{ current_config.ansible_facts.ansible_net_version }}. SN is {{ current_config.ansible_facts.ansible_net_serialnum }}. Model is {{current_config.ansible_facts.ansible_net_model }}" - name: Collect interface, routing and device runtime information - ios_command: + cisco.ios.ios_command: commands: - show ip interface brief - show interface description diff --git a/ios_devices/device_provisioning.yml b/ios_devices/device_provisioning.yml index b5600f4..ef86153 100644 --- a/ios_devices/device_provisioning.yml +++ b/ios_devices/device_provisioning.yml @@ -13,13 +13,13 @@ #Collect current device information - - name: Collect device facts - ios_facts: + - name: Collect current device facts + cisco.ios.ios_facts: gather_subset: all register: current_config - name: Configuring login banner - ios_banner: + cisco.ios.ios_banner: banner: login text: | |--------------------------------------------------------------------------| @@ -33,17 +33,17 @@ state: present - name: Configuring exec banner - ios_banner: + cisco.ios.ios_banner: banner: exec text: | |--------------------------------------------------------------------------| - |This device is managed, supported and it's configuration owned by the | - |Virgin Media Business Near Core Activations team in England | + |This device is managed, supported and its configuration is owned by the | + |Virgin Media Business Near Core Activations team in England. | |--------------------------------------------------------------------------| state: present - name: Configuring MOTD banner - ios_banner: + cisco.ios.ios_banner: banner: motd text: | @@ -58,6 +58,8 @@ servers: - server: uk.pool.ntp.org version: 2 + - server: 172.16.1.112 + version: 2 state: merged - name: Configuring logging levels @@ -71,7 +73,7 @@ state: merged - name: Configuring hostname and domain settings - ios_system: + cisco.ios.ios_system: hostname: "ANSIBLE-{{ current_config.ansible_facts.ansible_net_model }}" domain_name: siplab.net lookup_enabled: yes @@ -79,17 +81,20 @@ - 10.30.10.250 - 8.8.8.8 - - name: Configuring user account for automation jobs - ios_user: - name: ansible_user - hashed_password: - type: 9 - value: $9$CvE4F0G0ZTgz7E$Gj2TQ4HJasemYExfmYnAyJQzkGvLVqlGtcfWt3ZfVcI - privilege: 15 - state: present + - name: Configuring console and VTY settings + cisco.ios.ios_config: + lines: + - authorization exec default + - login authentication default + - logging synchronous + parents: + - "{{ item }}" + with_items: + - line vty 0 15 + - line con 0 - - name: Configuring system settings and commit changes to startup-config - ios_config: + - name: Configuring final system settings [AAA, services, timezone] and committing changes to startup-config + cisco.ios.ios_config: lines: - service timestamps debug datetime msec localtime show-timezone - service timestamps log datetime msec localtime show-timezone diff --git a/ios_devices/inventory.yml b/ios_devices/inventory.yml index 41a96ce..1c4d3da 100644 --- a/ios_devices/inventory.yml +++ b/ios_devices/inventory.yml @@ -1,7 +1,7 @@ baguleykit: hosts: 10.11.245.1: - + 172.16.1.90: homekit: hosts: 192.168.1.60: diff --git a/ios_devices/remove_user.yml b/ios_devices/remove_user.yml new file mode 100644 index 0000000..b678952 --- /dev/null +++ b/ios_devices/remove_user.yml @@ -0,0 +1,17 @@ +- name: Remove user from local database + hosts: baguleykit + gather_facts: false + connection: network_cli + roles: + - common + + tasks: + + - name: Removing user 'ansible_user' from database + cisco.ios.ios_user: + name: ansible_user + state: absent + + - name: Save changes to startup config + cisco.ios.ios_config: + save_when: modified \ No newline at end of file diff --git a/ios_devices/roles/common/vars/main.yml b/ios_devices/roles/common/vars/main.yml index 8c8fefe..ba65226 100644 --- a/ios_devices/roles/common/vars/main.yml +++ b/ios_devices/roles/common/vars/main.yml @@ -1,14 +1,14 @@ $ANSIBLE_VAULT;1.1;AES256 -36346232356431333538393163356337316264323466613066386161383765613837313361623732 -3933393635653661653234663932386231386462636633310a393465383862313435626439396635 -38623336326432666664616264303364313862616130656265363530643664666464646662653437 -3764366163333936300a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a626630323461343863653866383736 +35363831313434623535356362643730663231656263323730626237386337663365653965326463 +6137303466653031310a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