Extreme ERIC_ECCLI Ansible modules only supports CLI connections today. This page offers details on how to use network_cli on ERIC_ECCLI in Ansible.
| CLI | |
|---|---|
| Protocol | SSH |
| Credentials |
uses SSH keys / SSH-agent if present accepts |
| Indirect Access | via a bastion (jump host) |
| Connection Settings | ansible_connection: network_cli |
| Enable Mode (Privilege Escalation) | not supported by ERIC_ECCLI |
| Returned Data Format | stdout[0]. |
ERIC_ECCLI does not support ansible_connection: local. You must use ansible_connection: network_cli.
group_vars/eric_eccli.yml
ansible_connection: network_cli ansible_network_os: eric_eccli ansible_user: myuser ansible_password: !vault... ansible_ssh_common_args: '-o ProxyCommand="ssh -W %h:%p -q bastion01"'
ansible_password configuration.ansible_ssh_common_args configuration.ProxyCommand directive. To prevent secrets from leaking out (for example in ps output), SSH does not support providing passwords via environment variables.- name: run show version on remote devices (eric_eccli)
eric_eccli_command:
commands: show version
when: ansible_network_os == 'eric_eccli'
Warning
Never store passwords in plain text. We recommend using SSH keys to authenticate SSH connections. Ansible supports ssh-agent to manage your SSH keys. If you must use passwords to authenticate SSH connections, we recommend encrypting them with Ansible Vault.
© 2012–2018 Michael DeHaan
© 2018–2019 Red Hat, Inc.
Licensed under the GNU General Public License version 3.
https://docs.ansible.com/ansible/2.9/network/user_guide/platform_eric_eccli.html