Ansible for Network Automation Flashcards

What is the 'ansible.netcommon.httpapi' connection plugin used for in network automation?

Answer: It connects to network devices via their REST APIs (HTTP/HTTPS) instead of SSH, used by platforms like Arista EOS eAPI, Cisco NX-OS NX-API, and FortiOS

The httpapi connection plugin enables REST API-based network automation for devices that expose HTTP/HTTPS APIs, providing structured JSON/XML data exchange.

How do you handle network device configuration backup automation with Ansible?

Answer: Use facts modules or backup-specific modules (ios_config with backup: true) combined with template modules to save timestamped configuration files

Many network modules include 'backup: true' parameters that automatically save device configuration with timestamps, or you can use facts modules to capture and save running configs.

What is 'RESTCONF' and which Ansible connection plugin supports it?

Answer: RESTCONF is an HTTP-based protocol for accessing YANG-modeled network data; Ansible supports it via the 'ansible.netcommon.httpapi' plugin with RESTCONF-specific modules

RESTCONF (RFC 8040) provides HTTP access to NETCONF-managed data models (YANG), accessed through httpapi connection with the 'ansible.netcommon.restconf_*' modules.

What is the 'ansible.utils' collection used for in network automation contexts?

Answer: It provides filter plugins and modules for manipulating network data: IP address validation, prefix lookups, interface normalization, structured data manipulation

The 'ansible.utils' collection provides powerful data manipulation tools essential for network automation, especially IP address operations and structured data handling.

How do you implement a network change workflow with approval gates using Ansible Tower?

Answer: Use Ansible Tower Workflow Job Templates with Approval nodes that pause execution until a human approves, then proceed with change deployment Job Templates

Tower Workflow Approval nodes create human-gated automation pipelines where network changes require explicit approval before deployment.

What Ansible network module approach enables atomic configuration changes with automatic rollback on failure for network devices?

Answer: Use NAPALM modules (napalm_install_config) with candidate configuration approach: load → compare → commit or discard on failure

NAPALM's candidate configuration model loads changes into a staging area, allows comparison, then commits atomically or discards on failure—preventing partial configuration states.