Run Your First Command and Playbook

Put the concepts you learned to work with this quick tutorial. Install Ansible, execute a network configuration command manually, execute the same command with Ansible, then create a playbook so you can execute the command any time on multiple network devices.

Prerequisites

Before you work through this tutorial you need:

  • Ansible 2.5 (or higher) installed
  • One or more network devices that are compatible with Ansible
  • Basic Linux command line knowledge
  • Basic knowledge of network switch & router configuration

Install Ansible

Install Ansible using your preferred method. See Installation Guide. Then return to this tutorial.

Confirm the version of Ansible (must be >= 2.5):

  1. ansible --version

Establish a Manual Connection to a Managed Node

To confirm your credentials, connect to a network device manually and retrieve its configuration. Replace the sample user and device name with your real credentials. For example, for a VyOS router:

  1. ssh [email protected]
  2. show config
  3. exit

This manual connection also establishes the authenticity of the network device, adding its RSA key fingerprint to your list of known hosts. (If you have connected to the device before, you have already established its authenticity.)

Run Your First Network Ansible Command

Instead of manually connecting and running a command on the network device, you can retrieve its configuration with a single, stripped-down Ansible command:

  1. ansible all -i vyos.example.net, -c network_cli -u my_vyos_user -k -m vyos_facts -e ansible_network_os=vyos
  • The flags in this command set seven values:
    • the host group(s) to which the command should apply (in this case, all)
    • the inventory (-i, the device or devices to target - without the trailing comma -i points to an inventory file)
    • the connection method (-c, the method for connecting and executing ansible)
    • the user (-u, the username for the SSH connection)
    • the SSH connection method (-k, please prompt for the password)
    • the module (-m, the ansible module to run)
    • an extra variable ( -e, in this case, setting the network OS value)

NOTE: If you use ssh-agent with ssh keys, Ansible loads them automatically. You can omit -k flag.

Create and Run Your First Network Ansible Playbook

If you want to run this command every day, you can save it in a playbook and run it with ansible-playbook instead of ansible. The playbook can store a lot of the parameters you provided with flags at the command line, leaving less to type at the command line. You need two files for this - a playbook and an inventory file.

  1. ---
  2.  
  3. - name: Network Getting Started First Playbook
  4.   connection: network_cli
  5.   gather_facts: false
  6.   hosts: all
  7.   tasks:
  8.  
  9.     - name: Get config for VyOS devices
  10.       vyos_facts:
  11.         gather_subset: all
  12.  
  13.     - name: Display the config
  14.       debug:
  15.         msg: "The hostname is {{ ansible_net_hostname }} and the OS is {{ ansible_net_version }}"

The playbook sets three of the seven values from the command line above: the group (hosts: all), the connection method (connection: network_cli) and the module (in each task). With those values set in the playbook, you can omit them on the command line. The playbook also adds a second task to show the config output. When a module runs in a playbook, the output is held in memory for use by future tasks instead of written to the console. The debug task here lets you see the results in your shell.

  • Run the playbook with the command:
  1. ansible-playbook -i vyos.example.net, -u ansible -k -e ansible_network_os=vyos first_playbook.yml

The playbook contains one play with two tasks, and should generate output like this:

  1. $ ansible-playbook -i vyos.example.net, -u ansible -k -e ansible_network_os=vyos first_playbook.yml
  2.  
  3. PLAY [First Playbook]
  4. ***************************************************************************************************************************
  5.  
  6. TASK [Get config for VyOS devices]
  7. ***************************************************************************************************************************
  8. ok: [vyos.example.net]
  9.  
  10. TASK [Display the config]
  11. ***************************************************************************************************************************
  12. ok: [vyos.example.net] => {
  13.     "msg": "The hostname is vyos and the OS is VyOS"
  14. }
  • Now that you can retrieve the device config, try updating it with Ansible. Download first_playbook_ext.yml, which is an extended version of the first playbook:
  1. ---
  2.  
  3. - name: Network Getting Started First Playbook Extended
  4.   connection: network_cli
  5.   gather_facts: false
  6.   hosts: all
  7.   tasks:
  8.  
  9.     - name: Get config for VyOS devices
  10.       vyos_facts:
  11.         gather_subset: all
  12.  
  13.     - name: Display the config
  14.       debug:
  15.         msg: "The hostname is {{ ansible_net_hostname }} and the OS is {{ ansible_net_version }}"
  16.  
  17.     - name: Update the hostname
  18.       vyos_config:
  19.         backup: yes
  20.         lines:
  21.           - set system host-name vyos-changed
  22.  
  23.     - name: Get changed config for VyOS devices
  24.       vyos_facts:
  25.         gather_subset: all
  26.  
  27.     - name: Display the changed config
  28.       debug:
  29.         msg: "The hostname is {{ ansible_net_hostname }} and the OS is {{ ansible_net_version }}"

The extended first playbook has four tasks in a single play. Run it with the same command you used above. The output shows you the change Ansible made to the config:

  1. $ ansible-playbook -i vyos.example.net, -u ansible -k -e ansible_network_os=vyos first_playbook_ext.yml
  2.  
  3. PLAY [First Playbook]
  4. ************************************************************************************************************************************
  5.  
  6. TASK [Get config for VyOS devices]
  7. **********************************************************************************************************************************
  8. ok: [vyos.example.net]
  9.  
  10. TASK [Display the config]
  11. *************************************************************************************************************************************
  12. ok: [vyos.example.net] => {
  13.     "msg": "The hostname is vyos and the OS is VyOS"
  14. }
  15.  
  16. TASK [Update the hostname]
  17. *************************************************************************************************************************************
  18. changed: [vyos.example.net]
  19.  
  20. TASK [Get changed config for VyOS devices]
  21. *************************************************************************************************************************************
  22. ok: [vyos.example.net]
  23.  
  24. TASK [Display the changed config]
  25. *************************************************************************************************************************************
  26. ok: [vyos.example.net] => {
  27.     "msg": "The hostname is vyos-changed and the OS is VyOS"
  28. }
  29.  
  30. PLAY RECAP
  31. ************************************************************************************************************************************
  32. vyos.example.net           : ok=6    changed=1    unreachable=0    failed=0

This playbook is useful. However, running it still requires several command-line flags. Also, running a playbook against a single device is not a huge efficiency gain over making the same change manually. The next step to harnessing the full power of Ansible is to use an inventory file to organize your managed nodes into groups with information like the ansible_network_os and the SSH user.