enable
configure

no ip domain-lookup
hostname {{ host_name }}
{# TODO: hardcoded address and vlan tag! #}
interface vlan 1
ip address 192.168.42.200 255.255.255.0
exit
no spanning-tree

crypto key generate rsa
crypto key generate dsa
ip ssh server
ip ssh pubkey-auth

username "root" password {{ ansible_become_password }} privilege 15
{% for ssh_key in ssh_keys_root %}
crypto key pubkey-chain ssh user-key "root" rsa
key-string row "{{ ssh_key }}"
exit
{% endfor %}

enable password {{ ansible_become_password }}
end

write