{"id":12181,"date":"2025-02-17T17:26:10","date_gmt":"2025-02-18T01:26:10","guid":{"rendered":"https:\/\/www.xh86.me\/?p=12181"},"modified":"2025-02-17T17:37:13","modified_gmt":"2025-02-18T01:37:13","slug":"ansible%e5%a4%87%e4%bb%bd%e7%bd%91%e7%bb%9c%e8%ae%be%e5%a4%87%e9%85%8d%e7%bd%ae","status":"publish","type":"post","link":"https:\/\/www.xh86.me\/?p=12181","title":{"rendered":"Ansible\u5907\u4efd\u7f51\u7edc\u8bbe\u5907\u914d\u7f6e"},"content":{"rendered":"

1. Ansible Inventory \u6587\u4ef6 (inventory.yml<\/code>)<\/strong><\/h1>\n

\u8fd9\u4e2a inventory.yml<\/code> \u6587\u4ef6\u5b9a\u4e49\u4e86\u4f60\u7684\u6240\u6709\u7f51\u7edc\u8bbe\u5907\uff0c\u5e76\u6309\u5382\u5546\u5206\u7c7b\uff1a<\/p>\n

all:\r\n  children:\r\n    arista_eos:\r\n      hosts:\r\n        arista-switch1:\r\n          ansible_host: 192.168.10.1\r\n          ansible_network_os: arista.eos.eos\r\n          ansible_user: admin\r\n          ansible_password: password\r\n\r\n    cisco_aci:\r\n      hosts:\r\n        cisco-apic1:\r\n          ansible_host: 192.168.20.1\r\n          ansible_network_os: cisco.aci.aci\r\n          ansible_user: admin\r\n          ansible_password: password\r\n\r\n    cisco_asa:\r\n      hosts:\r\n        cisco-firewall1:\r\n          ansible_host: 192.168.30.1\r\n          ansible_network_os: cisco.asa.asa\r\n          ansible_user: admin\r\n          ansible_password: password\r\n\r\n    cisco_dnac:\r\n      hosts:\r\n        cisco-dnac1:\r\n          ansible_host: 192.168.40.1\r\n          ansible_network_os: cisco.dnac.dnac\r\n          ansible_user: admin\r\n          ansible_password: password\r\n\r\n    cisco_intersight:\r\n      hosts:\r\n        cisco-intersight1:\r\n          ansible_host: 192.168.50.1\r\n          ansible_network_os: cisco.intersight.intersight\r\n          ansible_user: admin\r\n          ansible_password: password\r\n\r\n    cisco_ios:\r\n      hosts:\r\n        cisco-router1:\r\n          ansible_host: 192.168.60.1\r\n          ansible_network_os: cisco.ios.ios\r\n          ansible_user: admin\r\n          ansible_password: password\r\n\r\n    cisco_iosxr:\r\n      hosts:\r\n        cisco-xr1:\r\n          ansible_host: 192.168.70.1\r\n          ansible_network_os: cisco.iosxr.iosxr\r\n          ansible_user: admin\r\n          ansible_password: password\r\n\r\n    cisco_ise:\r\n      hosts:\r\n        cisco-ise1:\r\n          ansible_host: 192.168.80.1\r\n          ansible_network_os: cisco.ise.ise\r\n          ansible_user: admin\r\n          ansible_password: password\r\n\r\n    cisco_meraki:\r\n      hosts:\r\n        cisco-meraki1:\r\n          ansible_host: 192.168.90.1\r\n          ansible_network_os: cisco.meraki.meraki\r\n          ansible_user: admin\r\n          ansible_password: password\r\n\r\n    cisco_mso:\r\n      hosts:\r\n        cisco-mso1:\r\n          ansible_host: 192.168.100.1\r\n          ansible_network_os: cisco.mso.mso\r\n          ansible_user: admin\r\n          ansible_password: password\r\n\r\n    cisco_nxos:\r\n      hosts:\r\n        cisco-nexus1:\r\n          ansible_host: 192.168.110.1\r\n          ansible_network_os: cisco.nxos.nxos\r\n          ansible_user: admin\r\n          ansible_password: password\r\n\r\n    cisco_ucs:\r\n      hosts:\r\n        cisco-ucs1:\r\n          ansible_host: 192.168.120.1\r\n          ansible_network_os: cisco.ucs.ucs\r\n          ansible_user: admin\r\n          ansible_password: password\r\n\r\n    community_network:\r\n      hosts:\r\n        generic-network1:\r\n          ansible_host: 192.168.130.1\r\n          ansible_network_os: community.network.generic\r\n          ansible_user: admin\r\n          ansible_password: password\r\n\r\n    f5_networks:\r\n      hosts:\r\n        f5-lb1:\r\n          ansible_host: 192.168.140.1\r\n          ansible_network_os: f5networks.f5_modules.bigip\r\n          ansible_user: admin\r\n          ansible_password: password\r\n\r\n    fortinet_fortimanager:\r\n      hosts:\r\n        fortimanager1:\r\n          ansible_host: 192.168.150.1\r\n          ansible_network_os: fortinet.fortimanager.fortimanager\r\n          ansible_user: admin\r\n          ansible_password: password\r\n\r\n    fortinet_fortios:\r\n      hosts:\r\n        fortigate1:\r\n          ansible_host: 192.168.160.1\r\n          ansible_network_os: fortinet.fortios.fortios\r\n          ansible_user: admin\r\n          ansible_password: password\r\n\r\n    vyos:\r\n      hosts:\r\n        vyos-router1:\r\n          ansible_host: 192.168.170.1\r\n          ansible_network_os: vyos.vyos.vyos\r\n          ansible_user: admin\r\n          ansible_password: password\r\n\r\n    mikrotik:\r\n      hosts:\r\n        mikrotik1:\r\n          ansible_host: 192.168.180.1\r\n          ansible_network_os: community.routeros.routeros\r\n          ansible_user: admin\r\n          ansible_password: password\r\n<\/code><\/pre>\n
\n
2. Ansible Playbook (backup-config.yml<\/code>)<\/strong><\/h1>\n
<\/code><\/pre>\n
—
\n– name: Backup Network Devices Configuration
\nhosts: all
\ngather_facts: no
\ntasks:<\/p>\n
<\/code><\/pre>\n
# ========================= Arista EOS =========================
\n– name: Backup Arista EOS
\narista.eos.eos_config:
\nbackup: yes
\nwhen: ansible_network_os == “arista.eos.eos”
\nregister: eos_backup<\/p>\n
<\/code><\/pre>\n
# ========================= Cisco ACI =========================
\n– name: Backup Cisco ACI
\ncisco.aci.aci_config_snapshot:
\nstate: present
\nvalidate_certs: no
\noutput_path: “\/backup\/network\/{{ inventory_hostname }}_backup.json”
\nwhen: ansible_network_os == “cisco.aci.aci”<\/p>\n
<\/code><\/pre>\n
# ========================= Cisco ASA =========================
\n– name: Backup Cisco ASA
\ncisco.asa.asa_config:
\nbackup: yes
\nwhen: ansible_network_os == “cisco.asa.asa”
\nregister: asa_backup<\/p>\n
<\/code><\/pre>\n
# ========================= Cisco DNA Center =========================
\n– name: Backup Cisco DNAC
\ncisco.dnac.configuration_archive:
\nstate: present
\nwhen: ansible_network_os == “cisco.dnac.dnac”<\/p>\n
<\/code><\/pre>\n
# ========================= Cisco Intersight =========================
\n– name: Backup Cisco Intersight
\ncisco.intersight.intersight_backup:
\nstate: present
\nwhen: ansible_network_os == “cisco.intersight.intersight”<\/p>\n
<\/code><\/pre>\n
# ========================= Cisco IOS =========================
\n– name: Backup Cisco IOS
\ncisco.ios.ios_config:
\nbackup: yes
\nwhen: ansible_network_os == “cisco.ios.ios”
\nregister: ios_backup<\/p>\n
<\/code><\/pre>\n
# ========================= Cisco IOS-XR =========================
\n– name: Backup Cisco IOS-XR
\ncisco.iosxr.iosxr_config:
\nbackup: yes
\nwhen: ansible_network_os == “cisco.iosxr.iosxr”
\nregister: iosxr_backup<\/p>\n
<\/code><\/pre>\n
# ========================= Cisco ISE =========================
\n– name: Backup Cisco ISE
\ncisco.ise.ise_backup:
\nstate: present
\nwhen: ansible_network_os == “cisco.ise.ise”<\/p>\n
<\/code><\/pre>\n
# ========================= Cisco Meraki =========================
\n– name: Backup Cisco Meraki
\ncisco.meraki.meraki_config_backup:
\nstate: present
\nwhen: ansible_network_os == “cisco.meraki.meraki”<\/p>\n
<\/code><\/pre>\n
# ========================= Cisco MSO =========================
\n– name: Backup Cisco MSO
\ncisco.mso.mso_backup:
\nstate: present
\nwhen: ansible_network_os == “cisco.mso.mso”<\/p>\n
<\/code><\/pre>\n
# ========================= Cisco NX-OS =========================
\n– name: Backup Cisco NX-OS
\ncisco.nxos.nxos_config:
\nbackup: yes
\nwhen: ansible_network_os == “cisco.nxos.nxos”
\nregister: nxos_backup<\/p>\n
<\/code><\/pre>\n
# ========================= Cisco UCS =========================
\n– name: Backup Cisco UCS
\ncisco.ucs.ucs_backup:
\nstate: present
\nwhen: ansible_network_os == “cisco.ucs.ucs”<\/p>\n
<\/code><\/pre>\n
# ========================= Community Network =========================
\n– name: Backup Community Network Devices
\ncommunity.network.generic_command:
\ncommand: “show running-config”
\nwhen: ansible_network_os == “community.network.generic”
\nregister: generic_backup<\/p>\n
<\/code><\/pre>\n
# ========================= F5 Networks =========================
\n– name: Backup F5 Load Balancer
\nf5networks.f5_modules.bigip_config:
\nbackup: yes
\nwhen: ansible_network_os == “f5networks.f5_modules.bigip”
\nregister: f5_backup<\/p>\n
<\/code><\/pre>\n
# ========================= Fortinet FortiManager =========================
\n– name: Backup Fortinet FortiManager
\nfortinet.fortimanager.fmgr_config_backup:
\nstate: present
\nwhen: ansible_network_os == “fortinet.fortimanager.fortimanager”<\/p>\n
<\/code><\/pre>\n
# ========================= Fortinet FortiOS =========================
\n– name: Backup Fortinet FortiOS
\nfortinet.fortios.fortios_config:
\nbackup: yes
\nwhen: ansible_network_os == “fortinet.fortios.fortios”
\nregister: fortios_backup<\/p>\n
<\/code><\/pre>\n
# ========================= VyOS =========================
\n– name: Backup VyOS Router
\nvyos.vyos.vyos_config:
\nbackup: yes
\nwhen: ansible_network_os == “vyos.vyos.vyos”
\nregister: vyos_backup<\/p>\n
<\/code><\/pre>\n
# ========================= MikroTik RouterOS =========================
\n– name: Backup MikroTik RouterOS
\ncommunity.routeros.routeros_command:
\ncommands: “\/export”
\nwhen: ansible_network_os == “community.routeros.routeros”
\nregister: mikrotik_backup<\/p>\n
<\/code><\/pre>\n
# ========================= \u7edf\u4e00\u5b58\u50a8\u5907\u4efd\u6587\u4ef6 =========================
\n– name: Save Backups Locally
\ncopy:
\ncontent: “{{
\nios_backup.backup_path |
\ndefault(nxos_backup.backup_path) |
\ndefault(eos_backup.backup_path) |
\ndefault(asa_backup.backup_path) |
\ndefault(iosxr_backup.backup_path) |
\ndefault(fortios_backup.backup_path) |
\ndefault(mikrotik_backup.stdout[0]) |
\ndefault(generic_backup.stdout[0]) |
\ndefault(vyos_backup.backup_path) |
\ndefault(f5_backup.backup_path) |
\ndefault(”)
\n}}”
\ndest: “\/backup\/network\/{{ inventory_hostname }}_backup_{{ ansible_date_time.iso8601 }}.txt”<\/p>\n
\r\n<\/code><\/pre>\n
\n
3. \u6267\u884c\u5907\u4efd<\/strong><\/h1>\n
\u8fd0\u884c\uff1a<\/p>\n
ansible-playbook -i inventory.yml backup-config.yml\r\n<\/code><\/pre>\n
\n
4. \u6280\u672f\u6587\u6863<\/strong><\/h1>\n
4.1 \u76ee\u6807<\/strong><\/h2>\n
\u672c\u65b9\u6848\u4f7f\u7528 Ansible \u5907\u4efd\u591a\u4e2a\u5382\u5546\u7684\u7f51\u7edc\u8bbe\u5907\u914d\u7f6e\uff0c\u6db5\u76d6 Cisco\u3001Arista\u3001Fortinet\u3001VyOS\u3001MikroTik \u7b49\u8bbe\u5907\u3002<\/p>\n
4.2 \u76ee\u5f55\u7ed3\u6784<\/strong><\/h2>\n
\/etc\/ansible\/network-backup\/\r\n\u251c\u2500\u2500 inventory.yml        # \u8bbe\u5907\u6e05\u5355\r\n\u251c\u2500\u2500 backup-config.yml    # \u5907\u4efd Playbook\r\n\u251c\u2500\u2500 \/backup\/network\/     # \u5b58\u50a8\u5907\u4efd\u6587\u4ef6\r\n<\/pre>\n
4.3 \u5b9a\u65f6\u5907\u4efd<\/strong><\/h2>\n
\u4f7f\u7528 cron \u4efb\u52a1\uff1a<\/p>\n
crontab -e\r\n<\/pre>\n
\u6dfb\u52a0\uff1a<\/p>\n
0 3 * * * ansible-playbook -i \/etc\/ansible\/network-backup\/inventory.yml \/etc\/ansible\/network-backup\/backup-config.yml\r\n<\/pre>\n
\u6bcf\u5929\u51cc\u6668 3:00 \u5907\u4efd\u6240\u6709\u8bbe\u5907\u3002<\/p>\n
\u4f7f\u7528 systemd \u8ba1\u5212\u4efb\u52a1<\/h3>\n
\u521b\u5efa ansible-network-backup.service\uff1a<\/p>\n
\n
<\/div>\n
sudo vi \/etc\/systemd\/system\/ansible-network-backup.service
\n<\/code><\/div>\n<\/div>\n
\u6dfb\u52a0\u4ee5\u4e0b\u5185\u5bb9\uff1a<\/p>\n
[Unit]
\nDescription=Ansible Network Backup Service
\nAfter=network.target<\/p>\n
[Service]
\nExecStart=\/usr\/bin\/ansible-playbook -i \/home\/ansible\/network-backup\/inventory.yml \/home\/ansible\/network-backup\/backup-config.yml
\nUser=ansible<\/p>\n
[Install]
\nWantedBy=multi-user.target<\/p>\n
<\/code><\/code>\u542f\u52a8\u5e76\u542f\u7528\u81ea\u52a8\u5907\u4efd\uff1a<\/p>\n
\n
sudo systemctl enable ansible-network-backup
\nsudo systemctl start ansible-network-backup<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
1. Ansible Inventory \u6587\u4ef6 (inventory.yml) \u8fd9\u4e2a inventory.ym […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12,3],"tags":[],"class_list":["post-12181","post","type-post","status-publish","format-standard","hentry","category-linux","category-system"],"_links":{"self":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/12181","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=12181"}],"version-history":[{"count":5,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/12181\/revisions"}],"predecessor-version":[{"id":12186,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/12181\/revisions\/12186"}],"wp:attachment":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=12181"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=12181"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=12181"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}