- DMVPN (4)
- IPv6 (1)
- MPLS (1)
- Network Automation (19)
- Network Security (4)
- Network Services (8)
- Quality of Service (2)
- SDN (10)
recent posts
- BGP Security best Practices for ISPs and Enterprise Networks
- Protecting BGP with Filtering and RPKI
- BGP Security
- Security Architecture: More Than Just Firewalls
- DMVPN Dual Hub Dual Cloud – Full Redundancy Design
- DMVPN Dual Hub Single Cloud: Hub Redundancy Without Losing Path Control
- DMVPN Single Hub Dual Cloud: Why Redundancy Does Not Always Mean Optimal Failover
- DMVPN Single Hub Single Cloud: Design Behavior Across Phase 1, 2 and 3
- L3VPN is not just about labels, MP-BGP, or VRFs
- IPv6 Prefix Delegation and SLAAC
- WFQ, CBWFQ and LLQ Explained in a Practical Way
- How Traffic is Classified, Marked, and Queued
- NAT
- Proxy ARP
- DNS and HTTP GET with IP SLA
- Cisco IRB (Integrated Routing and Bridging)
- GLBP Weighting
- DNS Server on Cisco IOS
- DHCP Proxy over PPP
- ARP authorized
- QoS in Cisco SD-WAN
- Application-based traffic steering And AAR
- Creating Extranets and Access to Shared Services
- Enforcing Security Perimeters with Service Insertion
- Cisco SD-WAN TLOC Extension
- Cisco SD-WAN Security Features
- Traffic Engineering at Sites with Multiple Routers
- Isolating Guest Users from the Corporate VPN
- Cisco SD-WAN Hub-and-Spoke Topology
- Cisco SD-WAN Onboarding
-
In this lab project, I built an AI-powered network assistant that: The Idea Instead of manually running commands like: show ip interface briefshow interface Gi0/1show logging | include BGP We can simply ask: The AI determines the required CLI commands, executes them safely, analyzes the results, and provides structured conclusions. The workflow looks like this:…
-
In this post, I’ll walk through several small but powerful Ansible playbook examples.Each example focuses on a specific concept such as variables, loops, conditions, filters, lookups, and facts. These are small puzzle pieces — but together they form the foundation of automation. Variables in a Playbook + Filters It defines a variable directly inside the…
-
When automating network devices with Ansible, collecting device information (facts) is usually the first step. In this lab, we will: Ansible Configuration (ansible.cfg) Inventory File (invt.yaml) We created a group called routers. This allows us to target: Playbook – Gathering Facts Let see each section separately: Task 1 – Gather Facts This module: gather_subset: interfaces…
-
Here is a small but powerful automation tool that: This is a practical example of combining Network Automation + AI-driven operations. In order to use OpenAI API you should have credit there. Project Structure: testbed.yaml: Workflow Overview: Connect to device↓Run show ip interface brief↓Genie parses CLI → structured JSON↓Reduce JSON to only relevant fields↓Send structured…
-
pyATS is a powerful network automation and testing framework designed to help network engineers validate, test, and troubleshoot their infrastructures in a structured and reliable way. Instead of manually checking device configurations and network behavior, pyATS allows you to automate these tasks using Python, making your workflows faster, more consistent, and less error-prone. It is…
