aironet-setup.yml

---
- hosts: all
  connection: local
  gather_facts: no

  tasks:

    - telnet:
        host: "{{ inventory_hostname }}"
        user: "{{ cisco_default }}"
        password: "{{ cisco_default }}"
        login_prompt: "Username: "
        prompts:
          - "[>|#|Password:|\\[512\\]:]"
        command:
          - enable
          - "{{ cisco_default }}"
          - configure terminal
          - ntp server ntp.nict.jp
          - clock timezone JST 9
          - snmp-server community muninconnect RO
          - "username {{ set_username }} password {{ set_password }}"
          - line vty 0 4
          - login local
          - exit
          - "hostname ap{{ inventory_hostname | regex_replace('^.*\\.(\\d*)$','\\1') }}"
          - ip domain-name cisco.com
          - crypt key generate rsa
          - 1024
          - ip ssh version 2
          - line vty 0 4
          - transport input ssh
          - "enable secret {{ set_auth_pass }}"
          - "no username {{ cisco_default }}"
      tags:
        - ssh-setup

    - ios_config:
        lines:
          - "dot11 ssid {{ ssid_g }}"
        provider: "{{ cli }}"
      tags:
        - setup

    - ios_config:
        lines:
          - authentication open
          - authentication key-management wpa version 2
          - guest-mode
          - "wpa-psk ascii {{ psk }}"
        parents: "dot11 ssid {{ ssid_g }}"
        provider: "{{ cli }}"
      tags:
        - setup

    - ios_config:
        lines:
          - encryption mode ciphers aes-ccm
          - "ssid {{ ssid_g }}"
          - no shutdown
        parents: interface Dot11Radio0
        provider: "{{ cli }}"
      tags:
        - setup

    - ios_config:
        lines:
          - "dot11 ssid {{ ssid_a }}"
        provider: "{{ cli }}"
      tags:
        - setup

    - ios_config:
        lines:
          - authentication open
          - authentication key-management wpa version 2
          - guest-mode
          - "wpa-psk ascii {{ psk }}"
        parents: "dot11 ssid {{ ssid_a }}"
        provider: "{{ cli }}"
      tags:
        - setup

    - ios_config:
        lines:
          - encryption mode ciphers aes-ccm
          - "ssid {{ ssid_a }}"
          - no shutdown
        parents: interface Dot11Radio1
        provider: "{{ cli }}"
      tags:
        - setup

  vars:
    ssid_g: igdaj11g
    ssid_a: igdaj11a
    psk: igdaj2017
    cisco_default: Cisco
    set_username: wifiuser
    set_password: wifiuserpass
    set_auth_pass: wifiuseradminpass
    cli:
      host: "{{ inventory_hostname }}"
      username: "{{ set_username }}"
      password: "{{ set_password }}"
      authorize: true
      auth_pass: "{{ set_auth_pass }}"