Networking on Kastuv Tuladhar

Network Design Blueprint

Thu, 01 Oct 2026 13:00:00 +0100

List of Infographics

Design Charter; Standards; Soft Skills etc

Wireless Standard

Art of Network Troubleshooting

Healthcare IT Jargon

Requirements Gathering for enterprise Network

Sample Questions

These are some sample questionnaires that needs to be asked to customer before vendor can work on Solutions or define Scope of Work (SOW).

General Questions

Who are the key stakeholders in this deployment?
What compliances are we trying to meet?
Any typical pain points in the overall network?
Growth plan for next 3 years which can impact this project? - additional endpoints, IoT, automation of network, etc
Network visibility requirements
Any architectural and security governing guidelines which needs to be met?
what level of integration is required from network monitoring perspective?

Campus Wired

What business problems are target to solve. Something from previous deployment?
Which groups are responsible for the integration and deployment of Campus wired side?
how many wired endpoints are planned to be connected?
wired and wireless on same switch stack?
distribution switches or IDFs
how many IDFs and MDFs
what kind of fiber runs from IDFs to MDFs?
how many wired endpoints be brought into single IDF?
how many AP connections will be brought into single IDF?
OOB management for switches?
Remote console management for switches?
how many VLANs to be used?
dedicated voice and data VLAN?
need for wired guest network?
need for test/dev network in SDA fabric?
layer 2 flooding requirements
are there any silent hosts in the network?
Do you leverage Virtual Desktops and imaging software for end user PCs and Laptops?
Do you have any monitoring and/or security scan software that is outside of the fabric that will try and establish connections inside the fabric?
All endpoints should run DHCP, do you have any devices that do not support DHCP and must be statically assigned IPv4 addresses on the endpoint?
Does your critical networks require connectivity through the fabric? Can we isolate critical traffic to only a single local fabric edge node?
Describe your critical client protocols. Are they communicating via Unicast with neighbor discovery, broadcast, L2 multicast, static?
Are you using PTP (Precision Time Protocol), NTP/SNTP (Network Time Protocol). If so where do the time servers reside?
Are there any critical network devices that are in the fabric that will require communication to a destination/source outside the fabric?
What size (endpoint count) are your proposing for VLANs?
Do you plan on connecting L2 switches to fabric edge ports for extending infrastructure?
Are there any devices that would require a connection through multiple NIC connections? (MLAG, port-channel, active/standby)
Please describe you mDNS requirements for devices that will need auto discovery or leverage L2 multicast to establish communications across the fabric.
multicast requirements for applications or paging systems?
Any specific AV or tele-conferencing requirements?
are dual uplinks from all switches a capability with your current fiber runs?
uplink bandwidth requirements?
is IPv6 planned to be used in the network?
Do you have any requirements for L3 gateways to be firewalls for endpoint isolation?
Diagrams describing your current high level vision for the network
Diagrams for physical layout of the hospital locations of IDF/MDF closets
Diagrams for each PLC line with breakdown of any vendor “pods” that will be connected into the fabric.
List of IP address pools allocated for the sites
List of VLAN name and number requirements you have
Hostname standard
Explain any 3rd party vendors you are planning on integrating with this solution. Example Palo Alto for firewall.
Proposed VLAN standard, name and numbers
Golden Config Templates

Campus Wireless

What are the wireless use cases?
How many SSIDs are planned to be used? Please list all SSIDs expected to be deployed. Which primary authentication mechanism(s) will be deployed for each SSID? For example: WebAuth, Pre-Shared Key, or 802.1x."
What are the segmentation requirements for wireless, such as VN, Subnet, and SGTs?
How each of these SSIDs be authenticated?
Any captive portal or CWA requirements?
Where will the Guest Portal be located? ISE, WLC, or Web Server?
will there be wired guest network in SDA space?
are there any high-density wireless requirements? If yes, which part of the network?
is mGig desired?
outdoor wireless required?
approximate data throughput in the wireless network?
desire to use local wireless controllers or centralized controllers?
Do you need the wireless network to be Fabric enabled or OTT?
will guest network be offloaded out via local internet or centralized guest anchor controller?
Are there any current or planned architectural designs or heat maps?
Can a 20ms latency be achieved between all the APs and the WLC?
Are there specific RF requirements, such as band, channel, data rate.. etc.?
Are there any mounting restrictions? AP / antenna mounting
Is blanket coverage required, or are there areas where coverage is not needed?
Which RF survey tool, such as Ekahau or Hamina, will be used by the surveyor?
How many concurrent clients are expected in total, and what is the expected count per use case?
Is WiFi 6E ( 6 Ghz) Required anywhere?
Any Mesh requirements ?
Do you have clients that support single band only?
Is WPA3 supported by the Clients?
AVC / QoS Requirements?
mDNS / Bonjour requirement ?
will APs use an external DHCP server with option 43 to connect to the WLC?
Are you going to use tri-radio ?
Do you have Workgroup bridge in the network ?
will all the APs be connected to RJ45 and powered up with UPOE?
Do you have requirements to connect APs via Fiber with DC/AC/Power Injector ?
What is the estimated total number of endpoints (Mac-Address) that connect to the wireless environment?
“How would you describe the current scalability of your network and plans for future growth? "
Please list currently configured RF profiles and highlight any areas where these are necessary.
Please indicate any security mechanisms used to secure the AP’s wired connection, i.e., 802.1x
Please indicate if location services are in operation and the designed location accuracy.
Please indicate if Voice or Video Over WLAN requirements
What types of wireless client devices will connect to the network? For any known special-purpose devices (tags, barcode scanners, IoT devices, etc.), please list the make and model number and include any device-specific requirements, such as: single band operation, 802.11 technology limitations, specific beaconing rates, etc.
Are you anticipating persistent WiFi interference or non-WiFi signal noise? If yes, please provide a list of the systems causing interference and the channels affected
what are the naming and labeling convention ?
Is there AAA Override requirement?
is there a location tracking requirements ( wayfinding, real-time tracking, BLE tags, asset tracking)?
Are wired and wireless networks restricted to separate physical switch stacks ?
Wi-Fi 6/6E for client access in the OT spaces
Wireless data traffic should be offloaded to right VRF and VLAN on the switch
GUEST network should be wireless only network
No plans on outdoor wireless connectivity
High-density to be considered in cafeteria, meeting halls and AGV/RGV paths
is WPA3 required?
Wireless Clients’ specifications?
Do you have devices that require static IPs?
Is there any area with high temperature dust or vibration environment that requires wireless coverage

Security

Approximately how many NADs (switches/wireless controllers/etc…) using TACACS?
Will guest wireless be required? Sponsored vs Self Registered?
What is the backend directory services provider? Onsite MS Active Directory, Azure AD, etc…
What is your PKI Infrastructure today?
Load Balancing - Load balancers to be used or redundant RADIUS server config on NADs?
Will posture for corporate workstations be required? Posture checks for patches, virus DATs, certain files/versions/reg keys/etc….
Will workstations be MDM managed? If so, which MDM provider?
Statement - for ISE profiling purposes, highly recommended best practice to use DHCP everywhere for endpoints. For devices that require static IP, use DHCP reservations. Important to stress this point with 3rd party vendors deploying their hardware.
Which team creates/writes NAC policy requirements?
Which team would manage NAC (Identity Services Engine, ISE)?
is zero-trust desired to be implemented in this project or near future?
will there be local firewalls at the site?
what networks will terminate on the firewalls?
which team manages firewalls and security infrastructure?
Centralized management of firewalls?
Direct internet requirement from the site?

WAN

What business problems are target to solve. Something from previous deployment?
WAN SLAs from the provider?
WAN connections speed?
WAN transport types?
WAN MTU size?
common WAN for IT and OT?
how is macro segmentation over WAN addressed today?
any micro-segmentation requirement over WAN today?
any multicast requirements over WAN today?
Where are RPs located?
what is the approximate size of the routing table today?
is IPv6 planned to be used in the network?
is WAN designed to be Active/Active or Active/Standby?
Any plans for leveraging automation over WAN?

Internet & Cloud

What business problems are target to solve. Something from previous deployment?
Dedicated internet connectivity from the site?
who will access dedicated internet from the site? Guest? corp users?
speed and transport type of internet circuits?
any remote access VPN requirements locally to the site?
will local internet be used for OOB connectivity?
will local internet be used for any failover connectivity?
any plans on using LTE/5G based backup links?
how will cloud be accessed? Locally via internet or dedicated links?
any firewalls on the cloud based links?
what clouds are being used actively? - AWS, Azure, GCP?

Applications

Any critical applications to be mindful of
application visibility requirements
any application SLAs from client side?
what is dominant application traffic flow: north-south or east-west?
are application servers located in the data center or local?
where are shared services like DHCP, DNS, IPAM, AD, etc located?

Environmental & HA

uptime and SLAs
MTTRs from providers
HA requirement
power requirement - redundant utility feeds
Multiple power supplies in MDF and IDF switches?
UPS in MDF and IDFs?
is OOB network planned for this network?

Daily CLIs doze 💉

Thu, 29 Jun 2023 13:00:00 +0100

Random list of Commands that I use everyday to pretend I am smarter 🤓.

Cisco IOS-XE

Expand for details

switches.txt
 1# Revert your config without reload in 5 ... 
 2# https://networkproguide.com/cisco-configuration-archive-rollback-the-undo-button/
 3
 4CISCO-SW# conf t
 5CISCO-SW(config)#archive
 6CISCO-SW(config-archive)#path bootflash:
 7CISCO-SW(config-archive)#maximum 5
 8CISCO-SW(config-archive)#exit
 9CISCO-SW(config)#end
 10CISCO-SW#wr
 11CISCO-SW#term mon
 12CISCO-SW#configure terminal revert timer 1
 13Rollback Confirmed Change: Backing up current running config to bootflash:-Jul-25-15-02-21.613-1
 14Enter configuration commands, one per line. End with CNTL/Z.
 15CISCO-SW(config)#hostname NPGT
 16NPGT(config)#end
 17NPGT#
 18*Jul 25 15:03:21.723: %ARCHIVE_DIFF-5-ROLLBK_CNFMD_CHG_ROLLBACK_START: Start rolling to: bootflash:- Jul-25-15-02-21.613-1
 19*Jul 25 15:03:22.235: Rollback: Acquired Configuration lock.
 20CISCO-SW#
 21
 22
 23
 24# Monitor Capture -- pretty cool ;)
 25
 26
 27! why doesn't tacacs work?
 28! what are these weird %SESSION_MGR-5-FAIL log messages on the trunk link?
 29! why is there a policy on the trunk interface when running "sh access-session int gi1/0/48 detail"?
 30! how is the policy PMAP_DefaultWiredDot1xOpenAuth_MAB_1X getting set? "sh run int gi1/0/48"
 31! and "sh derived-config int gi1/0/48" doesn't show any AAA configuration?
 32int gi1/0/48
 33 no access-session monitor
 34
 35! pause or sleep when bouncing an interface
 36! note: leaving this configured all of the time can cause problems. if you try to configure something with a password or
 37! key later, say because you are updating the RADIUS and TACACS keys, and the key had a $ (dollar sign) int it,
 38! it will be interpreted by the shell processing as a variable.
 39! have fun figuring out why your new RADIUS and TACACS key doesn't work.
 40shell processing full
 41!
 42int gi1/0/1
 43 shutdown
 44 switch access vlan 2
 45 sleep 5
 46 no shutdown
 47
 48! clear stack-port counters
 49! CLEAR ALL THE THINGS! meme
 50sh switch stack-port detail
 51clear counters
 52
 53! have that annoying stack cable with lots of CRC errors because the onsite tech didn't seat the cable properly?
 54! disable the stack port until they can go back and fix it. helps keep the switches in the switch stack from
 55! unexpectedly reloading on their own.
 56! interestingly, the CRC errors will still increase even though the stack port is down. even if you disable both ends of the cable.
 57switch 1 stack port 1 disable
 58
 59! reload command, the console port, and switch stacks
 60! the reload command will cause another switch in the stack to become the active switch and then reload the entire stack.
 61! the new active switch will remain the active switch even after the reload, ignoring any switch priority configuration.
 62! annoying, right? (note: this behavior is probably IOS XE version specific ) this means you lose console access to
 63! the switch stack until you or someone else can move the console cable to the active switch.
 64! fix, use the redundacy reload shelf command
 65cat03--#reload
 66Reload command is being issued on Active unit, this will reload the whole stack
 67Proceed with reload? [confirm]
 68
 69Chassis 1 relo
 70The network connection was aborted by the local system. <-- This is a console server message.
 71
 72cat9300#redundancy reload shelf
 73Reload the entire shelf [confirm]
 74Preparing to reload this shelf
 75
 76Chassis 2 reloading, reason - Reload command
 77Sep 21 11:49:59.621: %PMAN-5-EXITACTION: F0/0: pvp: Process manager is exiting: reload fp action requested
 78Sep 21 11:50:01.903
 79
 80
 81Initializing Hardware...... <-- Look ma, normal bootup messages.
 82
 83! The reload reason will change in the output of sh logging onboard switch 1 uptime detail
 84! reload command
 85cat9300#sh logging onboard switch 1 uptime detail
 86. . .
 8712/31/2023 13:37:00 Reload Command 0 0 1 17 0
 88
 89! redundancy reload shelf command
 90cat9300#sh logging onboard switch 1 uptime detail
 91. . .
 9212/31/2023 00:13:37 Admin reload CLI 0 0 1 17 0
 93
 94# Sample EEM script
 95! This EEM script below will trigger if the used memory from “show platform software status control-processor brief” is reaching 95% of total: 3871936
 96event manager applet HighMemUtil auth bypass
 97event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.12 get-type next entry-op gt entry-val 3678339 exit-time 20 poll-interval 5
 98action 1.0 syslog msg "------HIGH MEMORY Utilization detected--------"
 99action 1.1 cli command "enable"
100action 1.2 cli command "terminal length 0"
101action 1.3 cli command "show version | append flash:mem-eem.txt"
102action 1.4 cli command "show processes memory sorted | append flash:mem-eem.txt"
103action 1.5 cli command "show processes memory platform sorted | append flash:mem-eem.txt"
104action 1.6 cli command "show platform software status control-processor brief | append flash:mem-eem.txt"
105action 1.7 cli command "Show platform software mount | append flash:mem-eem.txt"
106action 1.8 cli command "show processes memory platform accounting | append flash:mem-eem.txt"
107action 2.1 cli command "terminal default length"
108action 2.2 cli command "end"
109
110
111# Switch Stack Port Issues/Errors
112
113sh switch stack-ports detail
114sh platform hardware fed switch 1 fwd-asic register read register-name SifRacDataCrcErrorCnt-0
115sh platform hardware fed switch 1 fwd-asic register read register-name SifRacRwCrcErrorCnt-0
116sh platform hardware fed switch 1 fwd-asic register read register-name SifRacInvaldRingWordCnt-0
117sh platform hardware fed switch 1 fwd-asic register read register-name SifRacPcsCodeWordErrorCnt-0
118sh platform hardware fed switch 1 fwd-asic register read register-name SifMessageStatus
119sh platform software stack-mgr switch 1 r0 sdp-counters 
120!
121sh platform hardware fed switch 2 fwd-asic register read register-name SifRacDataCrcErrorCnt-0
122sh platform hardware fed switch 2 fwd-asic register read register-name SifRacRwCrcErrorCnt-0
123sh platform hardware fed switch 2 fwd-asic register read register-name SifRacInvaldRingWordCnt-0
124sh platform hardware fed switch 2 fwd-asic register read register-name SifRacPcsCodeWordErrorCnt-0
125sh platform hardware fed switch 2 fwd-asic register read register-name SifMessageStatus
126sh platform software stack-mgr switch 2 r0 sdp-counters 
127!
128sh platform hardware fed switch 3 fwd-asic register read register-name SifRacDataCrcErrorCnt-0
129sh platform hardware fed switch 3 fwd-asic register read register-name SifRacRwCrcErrorCnt-0
130sh platform hardware fed switch 3 fwd-asic register read register-name SifRacInvaldRingWordCnt-0
131sh platform hardware fed switch 3 fwd-asic register read register-name SifRacPcsCodeWordErrorCnt-0
132sh platform hardware fed switch 3 fwd-asic register read register-name SifMessageStatus
133sh platform software stack-mgr switch 3 r0 sdp-counters 
134! stack discovery protocol counters
135sh platform software stack-mgr switch active R0 sdp-counters
136
137# Firmware Related
138
139! verify images
140verify flash:cat9k_iosxe.17.03.05.SPA.bin
141verify /md5 flash:cat9k_iosxe.17.03.05.SPA.bin
142
143! password recovery
144! Hold mode button, release -> rommon
145
146Switch: SWITCH_IGNORE_STARTUP_CFG=1
147Switch: boot
148
149!
150copy start run
151conf t
152(config)# no system ignore startupconfig switch all
153
154! DNS information
155sh ip dns view
156
157! parser_cmd logs
158sh platform software trace message ios switch 1 r0 | in parser_cmd
159show logging process iosrp | in parser_cmd
160
161! is traffic being evenly distributed across the physical interfaces in an etherchannel?
162! probably not
163sh interfaces po1 counters ethernet
164
165! test etherchannel load-balancing
166sh platform software fed switch active etherchannel 1 load-balance ipv4 192.0.2.2 192.0.2.1 
167
168! test ECMP load-balancing
169show ip cef exact-route 192.0.2.2 192.0.2.1
170
171! auto-LAG
172port-channel auto
173
174! identify connected devices
175sh device classifier attached
176
177! device classifier profiles
178sh device classifier profile type builtin
179
180! device-tracking
181sh device-tracking database details
182
183! use a switch to do an snmp get on another switch
184! OID for whyReload
185cat9300(config)# snmp-server manager 
186cat9300(config)# end
187cat9300# snmp get v2c 198.51.100.20 cisco oid 1.3.6.1.4.1.9.2.1.2.0
188SNMP Response: reqid 1, errstat 0, erridx 0 
189 lsystem.2.0 = PowerOn
190
191! list TCAM utilization
192sh platform hardware fed switch 1 fwd-asic resource tcam utilization 
193
194! my favorite uptime and reload reason command
195sh logging onboard switch 1 uptime detail
196
197! IOS 17
198show tech-support confidential # hides confidential data from TAC
199
200! list some of the hidden show commands
201! there are quite a few things under show platform that need TAC or BU documentation
202show tech-support all | include "show "
203
204! list interfaces with drops
205cat9300# term shell
206cat9300# sh int | grep "GigabitEthernet|output drops" | grep -v "drops: 0"
207
208! interface up / down time information
209sh int gi1/0/7 link
210
211! list the number of times an interface has flapped, divide result by 2
212sh logging | count 2/0/40.*(up|down)
213
214! stack cables have serial numbers
215show logging onboard switch active environment detail | in STACK
216
217! commands TAC had me run to verify a memory leak bug
218terminal length 0
219show version
220terminal exec prompt timestamp
221show processes memory sorted
222show processes memory platform sorted
223show platform software status control-processor brief
224show platform software mount switch active r0
225show memory allocating-process totals 
226show memory statistics
227show platform resources
228show platform software process list switch active r0 sort memory
229show process memory platform accounting
230show logging
231!
232show platform software memory smd switch active r0 brief
233!
234
235! information collected by device-sensor
236sh device-sensor cache interface gi1/0/7
237
238! cat9k beacon
239! turn on the super bright blue LED for the hardware team
240hw-module beacon slot 1 on
241sh beacon all
242hw-module beacon slot 1 off
243
244! spanning tree problems, lots of topolgy changes
245sh span de | in ^ VLAN|Times:
246
247! punted packets
248sh plat software fed swi act punt cause summary
249sh plat software fed swi act punt rates interfaces 
250sh plat software fed swi act punt packet-capture status
251sh plat software fed swi act cpu-interface
252
253! cts
254sh cts
255sh derived-config int gi1/0/20
256sh cts interface gi1/0/20
257sh cts authorization entries
258sh cts policy sgt
259sh derived-config | se cts
260
261! it's interesting to see the changes in the file structure with the different IOS versions
262show platform software chasfs r0
263
264! this use to work at some point
265! someone is fixing their file permissions
266sh platform software file contents r0 /tmp/chassis/local/rp/chasfs/rp/0/0/etc/issue
267
268! log logins
269conf t
270 login on-failure log
271 login on-success log
272 end
273!
274sh login failures
275
276! log config changes, also needed for the revert timer
277archive
278 log config
279 logging enable
280 logging size 500
281 notify syslog contenttype plaintext
282 hidekeys
283!
284sh archive log config all
285
286! why doesn't tacacs work? 
287! what are these weird %SESSION_MGR-5-FAIL log messages on the trunk link? 
288! why is there a policy on the trunk interface when running "sh access-session int gi1/0/48 detail"?
289! how is the policy PMAP_DefaultWiredDot1xOpenAuth_MAB_1X getting set? "sh run int gi1/0/48" and "sh derived-config int gi1/0/48" doesn't show any AAA configuration?
290int gi1/0/48
291 no access-session monitor
292 
293====================== CAT 3850 ======================
294
295# Interface Discards ?
296
297sh int te1/0/3
298sh int te1/0/3 | in drops:
299sh policy-map int te1/0/3
300sh controllers ethernet-controller tenGigabitEthernet 1/0/3
301sh controllers ethernet-controller tenGigabitEthernet 1/0/3 | in Excess Defer
302sh int te1/0/3 controller
303sh platform hardware fed switch 1 qos queue stats interface te1/0/3
304sh diagnostic events
305sh diagnostic result switch 1 test 7 detail
306sh platform hardware fed switch 1 fwd-asic drops exceptions asic 3
307sh platform hardware fed switch 1 qos queue config interface te1/0/3
308sh platform hardware fed switch 1 qos dscp-cos counters interface te1/0/3
309show platform hardware fed switch active sdm prefer # Shows sdm template
310
311show platform hardware fed switch 1 fwd-asic drops exceptions | ex _0_
312
313# test etherchannel load-balancing
314sh platform software fed switch active etherchannel 101 load-balance ipv4 192.0.2.2 192.0.2.1
315
316# Want 3850 to crash ( run it a couple dozen times... ) ?
317term shell
318for xx in `interface Ethernet`; do echo $xx `show int $xx controller | cut -c 1-33 | grep Excess Defer`; done
319
320! this is the command I should have been using
321sh controllers | in Gig|Excess Defer
322
323! 3850 beacon
324! turn on the super bright LED for the hardware team
325conf t
326 hw-module beacon on switch 1
327
328! why do have so many drops and discards?
329conf t
330qos queue-softmax-multiplier 1200
331
332! list interface qos queue configuration
333sh platform hardware fed switch active qos queue config interface tenGigabitEthernet 1/0/1
334
335
336====================== CAT 9500 ======================
337
338
339! MPLS testing
340show mpls forwarding exact-route label 100 ipv4 source 192.0.2.2 destination 192.0.2.1 detail
341
342! SDP - Stack Discovery Protocol
343! LMP - Link Management Protocol
344! L2 traffic to maintain the SVL
345! FSS - Front Side Stack - another name for StackWise Virtual
346! Nif-mgr = Network Interface Manager
347! FED = Forward Engine Driver
348sh platform software fed switch active fss counters
349sh platform software fed switch active fss err-pkt-counters latency
350sh platform software fed switch active fss err-pkt-counters seqerr
351
352!
353sh errdisable flap-values
354
355!
356sh romvar
357
358!
359sh plat hard fed swi active qos queue stats internal cpu policer
360
361!
362sh plat soft infrastructure lsmpi
363sh plat soft infrastructure lsmpi punt
364sh plat soft infrastructure lsmpi punt | ex 0 0 0 0 0 0
365
366
367! log discriminator, filter log messages
368! in this case, stop transceiver low power receive warnings from flooding logging
369logging discriminator LOWPOWER severity drops 3 facility drops SFF8472 mnemonics drops THRESHOLD_VIOLATION 
370logging buffered discriminator LOWPOWER 1024000
371logging console discriminator LOWPOWER
372logging monitor discriminator LOWPOWER
373logging source-interface GigabitEthernet0/0 vrf Mgmt-vrf
374logging host 198.51.100.9 vrf Mgmt-vrf discriminator LOWPOWER
375
376! list TCAM utilization
377sh platform hardware fed active fwd-asic resource tcam utilization
378
379! my favorite uptime and reload reason command
380sh logging onboard switch 1 rp active uptime detail
381
382! BGP nexthop table
383sh ip bgp attr nexthop rib-filter
384
385! BGP stuff
386route-map REPLACE_AS permit 10
387 set as-path replace {any | as-path-string}
388
389! BGP stuff
390neighbor 192.0.2.1 path-attribute discard 26 in
391neighbor 192.0.2.1 path-attribute treat-as-withdraw 26 in
392
393! BGP stuff
394bgp bestpath as-path multipath-relax
395
396! FED CPU packet capture
397clear platform hardware fed active cap trigger
398debug platform hardware fed active capture trigger ipv4 1.1.1.1 1.1.1.2 icmp
399debug platform hardware fed active capture trigger int hu1/0/52 ingress
400debug platform hardware fed active capture start
401sh platform hardware fed active capture trigger
402sh platform hardware fed active capture status
403sh platform hardware fed active capture packet
404sh platform hardware fed active capture detail ingress
405sh platform hardware fed active capture detail egress
406!
407sh platform hardware fed active capture psv ingress
408sh platform hardware fed active capture psv egress
409
410! some commands TAC had me run for what turned out to be a bad ASIC core
411show platform software infrastructure punt
412show platform software infrastructure detailed packet
413show platform software infrastructure lsmpi driver 0
414show platform software infrastructure lsmpi driver 1
415show platform software fed active punt cause summary
416show platform software fed active punt cpuq brief
417show platform software fed lsmpi stat
418!
419sh controller ethernet-controller hu1/0/51 phy detail
420sh controller ethernet-controller hu1/0/52 phy detail
421show platform software fed active ifm mapping
422show platform software fed active xcvr lpn 51 link_status 
423show platform software fed active xcvr lpn 52 link_status 
424diagnostic start module 1 test 4 port 51
425show diagnostic result module 1 test 4 detail
426
427! if you want to dig around in the underlying Linux system
428sh platform software mount
429sh platform software mount switch 1 r0 dir /etc
430sh platform software file contents switch 1 r0 /etc/passwd
431
432! EIGRP statistics of active states
433sh ip eigrp topology detail-links 
434
435P 0.0.0.0/0, 1 successors, FD is 28416, tag is 12345, serno 4431798, Stats m(22)M(58783)A(8007)c(14)
436 m = min duration
437 M = max duration
438 A = average duration
439 c = count of times active state was entered
440
441! MPLS testing
442show mpls forwarding exact-route label 100 ipv4 source 192.0.2.2 destination 192.0.2.1 detail
443
444! SDP - Stack Discovery Protocol
445! LMP - Link Management Protocol
446! L2 traffic to maintain the SVL
447! FSS - Front Side Stack - another name for StackWise Virtual
448! Nif-mgr = Network Interface Manager
449! FED = Forward Engine Driver
450sh platform software fed switch active fss counters
451sh platform software fed switch active fss err-pkt-counters latency
452sh platform software fed switch active fss err-pkt-counters seqerr
453
454! 
455sh errdisable flap-values
456
457! 
458sh romvar
459
460!
461sh plat hard fed swi active qos queue stats internal cpu policer
462
463!
464sh plat soft infrastructure lsmpi
465sh plat soft infrastructure lsmpi punt
466sh plat soft infrastructure lsmpi punt | ex 0 0 0 0 0 0
467```
468
469
470## Routers
471
472### Cisco ISR 4K, ASR 1K, Catalysts 8Ks
473
474```sh{lineNos=true,noClasses=false,hl_inline=false,anchorlinenos=true}
475! The flexible netflow equivalent of the old ip flow top-talkers
476flow monitor NETFLOW_OUTPUT
477 des Monitor IPv4 Output Flows
478 record netflow ipv4 original-output
479!
480flow monitor NETFLOW_INPUT
481 des Monitor IPv4 Input Flows
482 record netflow ipv4 original-input
483!
484int gi0/0/0
485 ip flow monitor NETFLOW_OUTPUT output
486 ip flow monitor NETFLOW_INPUT input
487!
488end
489!
490!
491sh flow monitor NETFLOW_OUTPUT cache sort highest counter packets top 30 format table
492sh flow monitor NETFLOW_INPUT cache sort highest counter bytes top 20 format table
493!
494
495! transceiver information
496sh hw-module interface gi0/0/5 transceiver idprom detail
497sh inv
498sh hw-module subslot 0/0 transceiver 2 idprom detail
499
500! reload reason history
501sh redundancy history reload
502sh logging onboard uptime
503
504
505# Policy Based Routing 
506## default is IP routing but this can alter default behavior if we apply policy on that interface.
507## Eg: Say we want to change the nexthop behavior from 10.10.10.10 to 20.20.20.20 for clients on 192.168.10.0/24 incoming from G0/0 on router(R1)
508
509R1# conf t
510 access-list 100 permit ip 192.168.10.0 0.0.0.255 any
511 route-map CLIENTS-TO-INET
512 match ip address 100 # Many other criterias
513 set ip next-hop 20.20.20.20 # Can also choose interface etc
514 int g0/0
515 ip policy route-map CLIENTS-TO-INET
516 show route-map
517 show ip policy # shows policy attached on the router
518
519# Cisco Express Forwarding (CEF)
520## Old way of IOS was to use "Process Switching", processor is involved with every packet flow. Debug uses process switching.
521## CEF is line card forwarding that uses FIB (best routes from RIB). ASIC is used. This is different that route-cache aka fast-switching.
522## Multicast, loopbacks and IP starting from 0 are not supported on CEF. CEF will punt it to fast-switching or process switching.
523conf t# ip cef # Enables CEF
524show ip cef
525show adjacency detail #shows mac of self and connected interface
526show processes cpu # Eg 1%/0%, first % is overall CPU and second % is interrupts. Pipe to "| in IP Input"
527show int g0/1 stats
528conf t# int g0/1# ip route-cache # Enables route-cache of fast switching.
529
530! online insertion and removal
531sh hw-module subslot all oir
532hw-module subslot 0/2 oir power-cycle
533hw-module subslot 0/2 stop
534sh hw-module subslot 0/2 oir
535
536! 4G LTE NIM
537sh cellular 0/2/0 all
538sh running-config | swe Cellular
539sh running-config controller cellular 0/2/0
540sh ip route | in Cellular
541sh int cellular 0/2/0
542
543! show transceiver RX and TX power
544sh hw-module subslot 0/0 transceiver 0 status
545
546! embedded packet capture
547monitor capture CAP interface GigabitEthernet0/0/1 both
548monitor capture CAP match ipv4 protocol tcp any any
549monitor capture CAP start
550monitor capture CAP stop
551show monitor capture CAP buffer brief
552show monitor capture CAP buffer detailed 
553monitor capture CAP export tftp://10.0.0.1/CAP.pcap
554no monitor capture CAP
555
556! MLPPP links
557show hw-module subslot 0/2 oir
558show ppp all
559show ppp summary
560show ppp ?
561show interface multilink1
562show interface Serial0/2/0:0
563show interface Serial0/2/1:0
564show interface Serial0/2/2:0
565show interface Serial0/2/3:0
566show controllers T1 0/2/0
567show controllers T1 0/2/1
568show controllers T1 0/2/2
569show controllers T1 0/2/3
570
571! sd-wan reload history
572show sdwan reboot history
573
574! why did it take me so long to learn this?
575logging dmvpn
576
577! sdwan stuff
578sh sdwan policy from-vsmart
579sh sdwan policy access-list-associations
580sh sdwan policy access-list-counters
581sh sdwan running-config | se access-list
582sh sdwan bfd session
583sh sdwan bfd history
584sh sdwan control connections
585sh sdwan control connection-history
586
587! tcp adjust-mss status
588sh ip tcp adjust stats interface gi0/0/0
589
590```
591
592## DC Nexus Switches
593
594### Nexus 9K/7K
595
596```sh{lineNos=true,noClasses=false,hl_inline=false,anchorlinenos=true}
597! Have a file that doesn't respond to the delete command
598! Command is considered a bug in CSCty07275
599! The fix created bug CSCus97711, because the command stopped working
600filesys delete /var/tmp/somesuperlarge.log
601
602! md5sum
603show file bootflash:n7700-s2-kickstart.7.3.0.DX.1.bin md5sum
604! troubleshoot interface discards
605sh int e1/39 | in discard
606sh queuing interface e1/39
607sh hardware internal ns buffer info pkt-stats
608sh hardware internal buffer info pkt-stats detail
609!
610sh hardware qos ns-buffer-profile 
611NS Buffer Profile: Mesh optimized
612!
613conf t
614 hardware qos ns-buffer-profile ultra-burst 
615
616! Nexus ethanalyzer
617! Only captures control plane traffic
618! Use a SPAN for data plane traffic
619ethanalyzer local interface inband capture-filter "icmp" detail 
620
621! troubleshoot command
622show troubleshoot l3 ipv4 192.0.2.2 src-ip 192.0.2.1 vrf default 
623
624! test NXOS ECMP 
625! N9k, fabric module needs to be specified
626show routing hash 192.0.2.2 192.0.2.1 module 21
627
628! route-map redistribution staistics
629show ip eigrp route-map statistics redistribute bgp 64496
630
631! LIST ALL THE COMMANDS
632sh cli list
633which
634
635! reset reason
636sh system reset-reason
637
638! BGP convergience information
639sh bgp convergence detail vrf all
640
641! increase the size of event history
642ip eigrp event-history rib size large
643
644! if you want to dig around in the underlying Linux system
645show system internal flash
646show system internal dir /var/log/external/
647show system internal file /var/log/external/messages | less
648
649! nexus becon feature
650! turn on the super bright LEDs for the hardware team
651(config)# int e1/1
652 beacon
653!
654blink chassis
655blink fan
656blink module
657blink powersupply
658!
659locator-led chassis
660locator-led fan
661locator-led module
662locator-led powersupply
663!
664sh locator-led status
665!
666no locator-led chassis! nexus becon feature
667(config)# int e1/1
668 beacon
669!
670blink chassis
671blink fan
672blink module
673blink powersupply
674!
675locator-led chassis
676locator-led fan
677locator-led module
678locator-led powersupply
679!
680sh locator-led status
681!
682no locator-led chassis
683
684! change the MAC address used with Spanning-tree BPDUs sent out on VPCs 
685! - from 0026.fxxx.0000
686! - to 0026.0bf1.fxxx
687! - where xxx is the VPC number in hex
688mac-address bpdu source version 2

Expand for details

Temp

Expand for details

Temp

SDWAN CLIs

Expand for details

Temp

Expand for details

Temp

Expand for details

Temp

Expand for details

Temp

Expand for details

Temp

Wireless

Wireless LAN Controllers (AireOS)

1# Basic Commands (Must Know)
2# ==========================
3show ap summary
4show wlan summary
5show interface summary
6show client detail 34:02:86:96:2f:b7

Cisco ASA

1! CPU and memory usage
2show process cpu-usage non-zero
3show process cpu-usage sorted
4show cpu usage
5show memory

Cisco DNAC Maglev CLI

 1# random stuff
 2maglev catalog settings validate
 3maglev catalog settings display
 4maglev catalog release_channel display -V
 5docker info | grep -e Stopped -e Prox
 6maglev catalog system_update_hook_bundle display -V
 7maglev catalog system_update_package display
 8maglev system_update_package status -V
 9maglev system_updater update_info
10curl -k -v https://www.ciscoconnectdna.com

Infoblox CLIs

 1
 2# Debug live and regex
 3 This is super helpful, especially for those times I want to quickly check something without going through the whole setting up a webex with support hassle.
 4
 5One we had to use recently to see database transactions:
 6set debug ibap on
 7
 8Then to display the relevant messages:
 9show log debug follow /regex/
10
11And when done:
12set debug ibap off

Citrix NetScaler CLIs

Clients (wins/Linux/Mac)

Windows CLI

1
2! computer name
3hostname
4[System.NET.DNS]::GetHostByName('')
5$env:COMPUTERNAME
6get-ciminstance -classname Win32_ComputerSystem
7 - computer model number