Central Deployment using Infrastructure-as-a-Code?

RouterOS General
1

Hi,

anyone has tried to integrate their RouterOS with tools like Chef, Puppet, Ansible, SaltStack ? I don’t want to reinvent the wheel, I can’t find a “prior art” though except obviously dead https://github.com/netmanagers/puppet-mikrotik .

2

I would love to see something like this as well, but I haven’t found anything either.

I would imagine you could still use a playbook to make raw routeros calls via ssh, similar to what this guy does with iptables.

Otherwise, someone would probably have to write a python based ansible module to call the routeros API.

Most of the firewall examples I’ve found for ansible seem to be geared towards host based iptables configuration for servers.

3

I’m no programmer myself, but maybe looking at the python code for some of the existing firewalld and google compute engine networking modules might be a starting point for anyone with the skills to pick this up?

4

I’ll stay for now with clusterssh.

5

I’m in the process of trying to make a RouterOS base VM with Packer, which could in turn be provisioned with other tools such as those. I am experiencing an issue, but once solved, it would be a good starting point to then be provisioned with scripts. I mean, virtually all such programs have the ability to upload files over SFTP, and run SSH commands, so it’s all as simple as issuing “import filename”.



EDIT: Wait… you’re trying to automate provisions to existing real routers? Nevermind then… What I’m talking above is for a similar, but different purpose. The purpose being testing changes that would eventually be deployed using some tools.

6

Hi

I have written a separate program to configura mikrotik devices via API. I have posted it on forum.

7

To collect relevant information in one topic.

Control Mikrotik from Ansible, by local tempate generetion, scp upload and ssh import:
http://blog.hudecof.net/posts/2014/11/07/mikrotik-and-ansible.html

8

interesting topic, i am interested in this as well.

9

Maybe a little but off the topic, i have a series of scripts that sync any confic on a per device basis from a central router or a few routers email me if you are interested


Sent from my iPhone using Tapatalk

10

WERNER.VENTER.MAIL@GMAIL.COM.


Sent from my iPhone using Tapatalk

11

https://github.com/ansible/ansible-modules-extras/issues/2542

12

That issue has seen some activity in the past day.