- DMVPN (4)
- IPv6 (1)
- MPLS (1)
- Network Automation (19)
- Network Security (4)
- Network Services (8)
- Quality of Service (2)
- SDN (10)
recent posts
- BGP Security best Practices for ISPs and Enterprise Networks
- Protecting BGP with Filtering and RPKI
- BGP Security
- Security Architecture: More Than Just Firewalls
- DMVPN Dual Hub Dual Cloud – Full Redundancy Design
- DMVPN Dual Hub Single Cloud: Hub Redundancy Without Losing Path Control
- DMVPN Single Hub Dual Cloud: Why Redundancy Does Not Always Mean Optimal Failover
- DMVPN Single Hub Single Cloud: Design Behavior Across Phase 1, 2 and 3
- L3VPN is not just about labels, MP-BGP, or VRFs
- IPv6 Prefix Delegation and SLAAC
- WFQ, CBWFQ and LLQ Explained in a Practical Way
- How Traffic is Classified, Marked, and Queued
- NAT
- Proxy ARP
- DNS and HTTP GET with IP SLA
- Cisco IRB (Integrated Routing and Bridging)
- GLBP Weighting
- DNS Server on Cisco IOS
- DHCP Proxy over PPP
- ARP authorized
- QoS in Cisco SD-WAN
- Application-based traffic steering And AAR
- Creating Extranets and Access to Shared Services
- Enforcing Security Perimeters with Service Insertion
- Cisco SD-WAN TLOC Extension
- Cisco SD-WAN Security Features
- Traffic Engineering at Sites with Multiple Routers
- Isolating Guest Users from the Corporate VPN
- Cisco SD-WAN Hub-and-Spoke Topology
- Cisco SD-WAN Onboarding
-
In this lab project, I built an AI-powered network assistant that: Receives questions via Telegram Decides which Cisco IOS commands are needed Connects to the router via SSH Executes read-only commands Analyzes the output using GPT-4o-mini Returns structured findings and recommendations The Idea Instead of manually running commands like: show ip interface briefshow interface Gi0/1show…
-
In this post, I’ll walk through several small but powerful Ansible playbook examples.Each example focuses on a specific concept such as variables, loops, conditions, filters, lookups, and facts. These are small puzzle pieces — but together they form the foundation of automation. Variables in a Playbook + Filters It defines a variable directly inside the…
-
When automating network devices with Ansible, collecting device information (facts) is usually the first step. In this lab, we will: Configure Ansible Define an inventory file Use cisco.ios.ios_facts Save the output to a JSON file Print selected device information Ansible Configuration (ansible.cfg) Inventory File (invt.yaml) We created a group called routers. This allows us to…
-
Here is a small but powerful automation tool that: Connects to Cisco IOS-XE routers using pyATS Parses show ip interface brief using Genie Reduces the structured data Sends it to an LLM (OpenAI) Receives an AI-based health analysis Prints a structured troubleshooting summary This is a practical example of combining Network Automation + AI-driven operations.…
-
pyATS is a powerful network automation and testing framework designed to help network engineers validate, test, and troubleshoot their infrastructures in a structured and reliable way. Instead of manually checking device configurations and network behavior, pyATS allows you to automate these tasks using Python, making your workflows faster, more consistent, and less error-prone. It is…
