Cant login ssh with ansible because of cipher error from cisco

[PeoriaGarfield34010]

cSo I am trying to automate cisco configuration in Debian OS with Ansible, the problem is when I tried to test the playbook for connection and command with:

ansible student1 -m raw -a  "show version | include IOS"

I get this error:

fatal: [r1]: UNREACHABLE! => changed=false
  msg: 'Failed to connect to the host via ssh: Unable to negotiate with 10.30.1.231 port 2201: no matching cipher found. Their offer: aes128-cbc,3des-cbc,aes192-cbc,aes256-cbc'
  unreachable: true

Is there a way to pass the cipher to Ansible? When connecting using SSH, I always use -c aes128-cbc and it always works out, but I dont know how Ansible handles cipher in SSH. My devices are on cisco and its in a version where pubkey-chain doesnt exist, and its not mine as well. Any suggestion?

[ngkin2010]

https://ansible-docs.readthedocs.io/zh/stable-2.0/rst/intro_inventory.html

You may refer to the argument ansible_ssh_common_args

ansible_ssh_common_args
  This setting is always appended to the default command line for
  sftp, scp, and ssh. Useful to configure a ``ProxyCommand`` for a
  certain host (or group).

And your inventory file:

[servers]
x.x.x.x ansible_ssh_common_arg="-o Ciphers=aes128-cbc,3des-cbc"

[Grantham12]

Interesting topic for a blog. I have been searching the Internet for fun and came upon your website. Fabulous post. Thanks a ton for sharing your knowledge! It is great to see that some people still put in an effort into managing their websites. I'll be sure to check back again real soon.

MyAARPMedicare

[Callum5529]

Multiple options are available.

For using the CLI add --ssh-extra-args -c aes128-cbc

To use a config file:

In your /etc/ansible/ansible.cfg file, set:

[ssh_connection]
-C -o ControlMaster=auto -o ControlPersist=60s -c aes128-cbc

mythdhr