\\n main()\\n File \\"/tmp/ansible\_b\_9Rr0/ansible\_module\_ios\_config.py\\", line 512, in main\\n load\_config(module, command
> s)\\n File \\"/tmp/ansible\_b\_9Rr0/ansible\_modlib.zip/ansible/module\_utils/network/ios/ios.py\\", line 168, in load\_config\\n File \\"/tmp/ansible\_b\_9Rr0/ansible\_modlib.zip/ansible/module\_utils/connection.py\\", line 149, in \_\_rpc\_\_\\nansible.module\_utils.connection.Conn
> ectionError: operation requires privilege escalation\\n",
> "module\_stdout": "",
> "msg": "MODULE FAILURE",
> "rc": 1
> }
> to retry, use: --limit @/home/pffs/ansible-scripts/test.retry
>
> PLAY RECAP \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
> dmvpn-1 : ok=0 changed=0 unreachable=0 failed=1
> \`\`\`
If you do a search for that error, you’ll find more resources. Some have solved it by downgrading their Ansible version, while others have done so by adjusting other parameters.
I hope this has been helpful!
Laz
---
### Author:  [@ruben.trazanet](https://forum.networklessons.com/u/ruben.trazanet)
#### Post date: [November 28, 2021, 8:40pm UTC](https://forum.networklessons.com/t/network-automation-and-orchestration/6319/10 "2021-11-28T20:40:59Z")
Hi Team,
Great lesson!! I tried to run a playbook connecting from a Centos 8 (ansible 2.9.27) to a cisco Cisco IOS XE Software, Version 16.06.07 by using ssh keys. I followed the lesson where ssh key connectivity is explained and I am able to connect with success. Despite all the changes I tried I always receive: fatal: [Cisco1941]: FAILED! =\> {“ansible\_facts”: {“discovered\_interpreter\_python”: “/usr/libexec/platform-python”}, “changed”: false, “msg”: “not a valid RSA private key file”}.
I uncommented this to disable SSH key host checking in ansible.cfg
host\_key\_checking = False
the key has 2048 module
I also tried
ansible-playbook --private-key=/root/.ssh/id\_rsa -u root playbooks/show\_version.yml
Any suggestions
Thanks in advanced for your support
Ruben
---
### Author:  [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [December 7, 2021, 12:17pm UTC](https://forum.networklessons.com/t/network-automation-and-orchestration/6319/11 "2021-12-07T12:17:01Z")
Hello Ruben,
What kind of SSH key do you have? Does it show up as OPENSSH or RSA?
```auto
[root@localhost test-ansible]# cat ~/.ssh/id_rsa | grep "KEY"
-----BEGIN OPENSSH PRIVATE KEY-----
-----END OPENSSH PRIVATE KEY-----
```
I think it has to do with the key format. The output above is from a CentOS 8 test machine.
Rene
---
### Author:  [@ruben.trazanet](https://forum.networklessons.com/u/ruben.trazanet)
#### Post date: [December 7, 2021, 7:10pm UTC](https://forum.networklessons.com/t/network-automation-and-orchestration/6319/12 "2021-12-07T19:10:41Z")
> [@ReneMolenaar](#):
>
> `cat ~/.ssh/id_rsa | grep "KEY"`
Hi Rene,
I am using a centos8 and the outpout of the command indicates openssh:
```auto
[root@centos8-ansible ssh]# cat ~/.ssh/id_rsa | grep "KEY"
-----BEGIN OPENSSH PRIVATE KEY-----
-----END OPENSSH PRIVATE KEY-----
```
I can however connect to the router from centos with no issues:
```auto
[root@centos8-ansible ssh]# ssh root@10.100.50.29
Cisco1941#
```
It is failing when using ansible playbook. Is there anyway to address this or should I use Ubuntu instead of Centos8?
I will in any case deploy Ubuntu and give it a go. I will keep you posted.
Thanks
Ruben Sanchez
Hi Rene,
I found out the root cause. Paramiko doesn’t support openssh. The workaround is PEM:
```auto
sudo ssh-keygen -p -m PEM -f ~/.ssh/id_rsa. Now I get
ruben@Ubuntu-20:~$ cat ~/.ssh/id_rsa | grep "KEY"
-----BEGIN RSA PRIVATE KEY-----
-----END RSA PRIVATE KEY-----
```
and playbooks are running with no issues. You put me in the right direction.
Thank you
Ruben Sanchez
---
### Author:  [@lagapidis](https://forum.networklessons.com/u/lagapidis)
#### Post date: [December 9, 2021, 7:10am UTC](https://forum.networklessons.com/t/network-automation-and-orchestration/6319/13 "2021-12-09T07:10:27Z")
Hello Ruben
It’s great to hear that you found the root cause and resolved the issue! It’s helpful to have this information on the forum.
Thanks for updating your post!
Laz
---
### Author:  [@lennarnoc2020](https://forum.networklessons.com/u/lennarnoc2020)
#### Post date: [December 28, 2021, 4:07pm UTC](https://forum.networklessons.com/t/network-automation-and-orchestration/6319/14 "2021-12-28T16:07:52Z")
Hi Rene, while following the steps, the ssh connection was refused. I’m getting a Connection refused error when trying to ssh into the host IP.
---
### Author:  [@rod.deluhery](https://forum.networklessons.com/u/rod.deluhery)
#### Post date: [December 29, 2021, 2:35pm UTC](https://forum.networklessons.com/t/network-automation-and-orchestration/6319/15 "2021-12-29T14:35:27Z")
in the ansible lab, copying a html file to the web root directory. question on this topic. is there a way to do this so the html file in on the ansible server itself, or another server? so doing a network copy (scp copy) from one host to another?
thanks!
---
### Author:  [@lagapidis](https://forum.networklessons.com/u/lagapidis)
#### Post date: [January 3, 2022, 7:06am UTC](https://forum.networklessons.com/t/network-automation-and-orchestration/6319/16 "2022-01-03T07:06:39Z")
Hello Michel
The SSH connectivity can sometimes be tricky, and it occasionally depends upon the versions you are using. The best way to troubleshoot this would be to debug SSH on the Cisco device to see the reason behind the refused connection so that you can further correct the problem. Take a look at this NetworkLessons note on [SSH connectivity troubleshooting](https://notes.networklessons.com/ssh-connectivity-troubleshooting) for some additional info.
Let us know how you get along and if you require any additional help.
I hope this has been helpful!
Laz
---
### Author:  [@lagapidis](https://forum.networklessons.com/u/lagapidis)
#### Post date: [January 3, 2022, 7:12am UTC](https://forum.networklessons.com/t/network-automation-and-orchestration/6319/17 "2022-01-03T07:12:41Z")
Hello Rod
Anything you can do with the CLI can be automated. So if you are able to copy the HTML file to another server, either the ansible server or another server, using the CLI, then you can automate it using automation.
Before creating a playbook, the first thing that you should do is determine what you want to achieve, and how this can be achieved using the CLI. You then automate those CLI commands using the process described in the lesson.
I hope this has been helpful!
Laz
---
### Author:  [@AZEAHMED](https://forum.networklessons.com/u/AZEAHMED)
#### Post date: [April 16, 2023, 5:54am UTC](https://forum.networklessons.com/t/network-automation-and-orchestration/6319/18 "2023-04-16T05:54:16Z")
Hello Rene,
chef, puppet and ansible are config management tool. Are there any tools available to upgrade the router/server operating system . Any insight will appreciated.
P.S\> Found paid product below wanted to know about open source tool.
> **[Automating Software Upgrades | Itential Network Automation](https://www.itential.com/solutions/network-configuration-management/software-upgrades/)**
>
> Network teams need to modernize the way they accomplish software upgrades, leveraging automation to finally bring every device in their network up to current versions.
Thanks,
Mu
---
### Author:  [@lagapidis](https://forum.networklessons.com/u/lagapidis)
#### Post date: [April 19, 2023, 4:25am UTC](https://forum.networklessons.com/t/network-automation-and-orchestration/6319/19 "2023-04-19T04:25:14Z")
Hello Muhammad
Take a look at this answer here:
> [@Tools to upgrade the OS of routers or servers](https://forum.networklessons.com/t/tools-to-upgrade-the-os-of-routers-or-servers/35998/2):
>
> Hello Muhammad There are several tools available that can be used to automate the upgrading of router and server operating systems. First of all, Chef, Ansible as well as Puppet are all not only configuration management tools, but all three can be used for the purpose of upgrading server OS or router firmware. Specifically: Ansible: It is not only a configuration management tool, but it can also be used to automate software upgrades and manage patches for servers. Chef: It provides tools fo…
I hope this has been helpful!
Laz