A network operations team needs to automate configuration management across a network of Cisco IOS XE routers. Organization policy strictly forbids installing specialized agent software or extra daemons on network devices. Furthermore, the automation workflow requires a push model where playbooks written in YAML are executed from a central machine over standard SSH. Which configuration management tool meets all of these operational requirements?
- Ansible, which utilizes an agentless architecture to push configurations defined in YAML over standard SSH.Answer
- BPuppet, which natively utilizes an agentless architecture to push configurations defined in Ruby DSL over TCP 8140.
- CChef, which utilizes an agentless architecture to push configurations defined in JSON over HTTPS.
- DPuppet, which requires an agent-based architecture to push configurations defined in YAML over NETCONF.
Answer
Ansible, which utilizes an agentless architecture to push configurations defined in YAML over standard SSH.
Ansible is an agentless configuration management tool that uses SSH (or NETCONF) for network device communication, follows a push model from a central control node, and uses YAML data structure for Playbooks. This satisfies all specified security and operational constraints.
Step-by-Step Solution
Key Concept
Ansible Agentless Push Architecture and Attributes