Yes, there are ASA specific modules.  But those modules require ASA v9.3 
and use Cisco's REST API introduced in ASA v9.3.  For anyone not wishing to 
use the REST API or who does not have ASA v9.3, those ASA modules do not 
work.  In addition, it doesn't appear that those modules are ready for 
"production" use yet.  According to the developer on his own website - he 
is still testing, asking for help testing, He's still finding bugs (normal 
even after release).  Some his own, and some are bugs in Cisco's REST API.

Now - to post what I found wrong because you didn't publish it the first 
time....

Ansible's ios_command module tries to run the command "terminal length 0" 
to disable breaks which would require the user to interact and "continue" 
the output.  The problem with this is that the "terminal length 0" command 
only works on Cisco routers and switches.  The appropriate command for an 
ASA is "terminal pager 0".


On Friday, July 22, 2016 at 2:01:14 PM UTC-5, Peter Sprygada wrote:
>
> There are now ASA specific modules available in extras (
> https://github.com/ansible/ansible-modules-extras/tree/devel/network/asa) 
>  I would recommend using those for management of ASA devices.
>
> On Fri, Jul 22, 2016 at 12:25 PM, Tony Reveal <are...@gmail.com 
> <javascript:>> wrote:
>
>> Did you ever find a fix for this?  I'm seeing the same error when 
>> connecting to an ASA 5505.
>>
>>
>> On Wednesday, June 1, 2016 at 1:59:34 AM UTC-5, Ludi Fang wrote:
>>>
>>> *I could login the cisco device with SSH and run the show version 
>>> successfully.*
>>>
>>> -----------------------------------------------------------------------------------------------------------------
>>> [root@peklnelh03 ansible]# ssh xxxx...@10.106.65.xxx
>>> x...@10.106.65.xxx's password: 
>>> **********************************************************************
>>> This is a private property facility to be accessed and used for Lenovo
>>> internal systems. Unauthorized Access Prohibited!
>>> **********************************************************************
>>> ***********************************************************************
>>> *  Warning Notice:                                                    *
>>> *    ip verify reverse-path interface is not supported      *
>>> Type help or '?' for a list of available commands.
>>> CNSHPFW5510-01> show version
>>>
>>> Cisco Adaptive Security Appliance Software Version 8.2(5)51 
>>> Device Manager Version 5.2(4)
>>>
>>> ---------------------------------------------------------------------------------------------------------------------
>>> *However, I run the ios_command with ansible, I got this error:*
>>>
>>>
>>> *------------------------------------------------------------------------------------------------------------------------------------*
>>> TASK [ios_command] 
>>> *************************************************************
>>> fatal: [10.106.65.xxx]: FAILED! => {"changed": false, "commands": 
>>> "terminal length 0", "failed": true, "msg": "terminal length 0\r\n         
>>>         ^\r\nERROR: % Invalid input detected at '^' marker.\r\n\r> "}
>>>
>>> - hosts: ios
>>>   gather_facts: no
>>>   connection: local
>>>
>>>   tasks:
>>>   - name: LOGIN
>>>     include_vars: secrets.yaml
>>>
>>>   - name: PROVIDER
>>>     set_fact:
>>>       provider:
>>>         host: "{10.106.65.xxx}"
>>>         username: "{xxx}"
>>>         password: "{6785493@bcdD}"
>>>         auth_pass: "{cisco}"
>>>   - ios_command:
>>>       host: "10.106.65.xxxxx"
>>>       username: "xxxxxx"
>>>       password: "6785493@bcdD"
>>>       port: "22"
>>>       commands:
>>>         - show version
>>>     register: version
>>>   - debug: var=version.stdout_lines
>>>
>>> ---------------------------------------------------------------------------------------------------------------------
>>> *Could someone give me some advice to fix this issue?*
>>>
>>> -- 
>> You received this message because you are subscribed to the Google Groups 
>> "Ansible Project" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to ansible-proje...@googlegroups.com <javascript:>.
>> To post to this group, send email to ansible...@googlegroups.com 
>> <javascript:>.
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/ansible-project/5cc05fda-51a7-4b68-b24d-e47acdd2aff3%40googlegroups.com
>>  
>> <https://groups.google.com/d/msgid/ansible-project/5cc05fda-51a7-4b68-b24d-e47acdd2aff3%40googlegroups.com?utm_medium=email&utm_source=footer>
>> .
>>
>> For more options, visit https://groups.google.com/d/optout.
>>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/f44e9703-4f55-4824-8441-2ecb8e801f3c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to