Junos OS

 View Only
last person joined: yesterday 

Ask questions and share experiences about Junos OS.
Back to discussions
Expand all | Collapse all

Juniper ssh ciphers conflicting with ansible-playbook

  • 1.  Juniper ssh ciphers conflicting with ansible-playbook

    Posted 03-20-2024 14:35

    I created a ansible-playbook as a POC. I want to be able to pull and push config. I'm using NAPLAM to do this. 

    I can sucessfully run the playbook to push a config, and it works, but the next time it stops working. I have narrow it down to this piece of configuation. When I remove this config snippet. I am able to succesfully connect to the juniper device. 
    [edit groups BASE-SYSTEM system services ssh]
    -     ciphers [ "aes128-gcm@openssh.com" "aes256-gcm@openssh.com" ];


    Also. I can ssh directly from the ansible node bash shell  and able to log in with the above removed and when it is present with no issue.

    ansible_ssh_common_args=-o Ciphers=aes128-gcm@openssh.com,aes256-gcm@openssh.com -o MACs=hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com -o KexAlgorithms=ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521

    I have tried to many variation of this . I have add this line above to the inventory file, and tried adding as an adhoc command, nothing is working. 

    Any ideas what could be the issue. 



    ------------------------------
    JONATHAN WARREN
    ------------------------------