It is recommended to always use tls=true
when connecting with the API, even if you are only connecting to the device through a trusted network. The following options control how TLS/SSL is used:
It is recommended to always use tls=true
when connecting with the API, even if you are only connecting to the device through a trusted network. The following options control how TLS/SSL is used:
Setting to true
connects to the device without a certificate. This is discouraged to use in production and is susceptible to Man-in-the-Middle attacks, but might be useful when setting the device up. The default value is false
.
When using the community.routeros.command module module, make sure to not specify too long commands. Alternatively, add something like +cet512w
to the username (replace admin
with admin+cet512w
) to tell RouterOS to not wrap before 512 characters in a line (see issue for details).
Finally, the ansible.netcommon.network_cli connection plugin uses paramiko by default to connect to devices with SSH. You can set its
option to ssh_type
libssh
to use ansible-pylibssh instead, which offers Python bindings to libssh. See its documentation for details.
Finally, the ansible.netcommon.network_cli connection plugin uses paramiko by default to connect to devices with SSH. You can set its ssh_type
option to libssh
to use ansible-pylibssh instead, which offers Python bindings to libssh. See its documentation for details.