[
{
"vendor": "Cisco",
"os": "ios",
"cat": "BGP",
"concept": "bgp:peer",
"title": "neighbor remote-as",
"cmd": "router bgp 65001\n neighbor 10.0.0.2 remote-as 65002",
"desc": "eBGP session on IOS / IOS-XE",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "Cisco",
"os": "nxos",
"cat": "BGP",
"concept": "bgp:peer",
"title": "neighbor remote-as (NX-OS)",
"cmd": "router bgp 65001\n neighbor 10.0.0.2 remote-as 65002\n address-family ipv4 unicast",
"desc": "NX-OS BGP neighbor with AF",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "Juniper",
"os": "junos",
"cat": "BGP",
"concept": "bgp:peer",
"title": "bgp group neighbor",
"cmd": "set protocols bgp group EXT type external\nset protocols bgp group EXT peer-as 65002\nset protocols bgp group EXT neighbor 10.0.0.2",
"desc": "Junos eBGP group + neighbor",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "Arista",
"os": "eos",
"cat": "BGP",
"concept": "bgp:peer",
"title": "neighbor remote-as",
"cmd": "router bgp 65001\n neighbor 10.0.0.2 remote-as 65002",
"desc": "EOS eBGP neighbor",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "FRR",
"os": "frr",
"cat": "BGP",
"concept": "bgp:peer",
"title": "neighbor remote-as",
"cmd": "router bgp 65001\n neighbor 10.0.0.2 remote-as 65002\n neighbor 10.0.0.2 update-source lo",
"desc": "FRR vtysh eBGP — live on the 10-node lab",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": true
},
{
"vendor": "VyOS",
"os": "vyos",
"cat": "BGP",
"concept": "bgp:peer",
"title": "set protocols bgp neighbor",
"cmd": "set protocols bgp 65001 neighbor 10.0.0.2 remote-as 65002",
"desc": "VyOS BGP neighbor",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "Huawei",
"os": "vrp",
"cat": "BGP",
"concept": "bgp:peer",
"title": "peer as-number",
"cmd": "bgp 65001\n peer 10.0.0.2 as-number 65002\n peer 10.0.0.2 connect-interface LoopBack0",
"desc": "VRP BGP peer",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "Aruba",
"os": "aoscx",
"cat": "BGP",
"concept": "bgp:peer",
"title": "neighbor remote-as",
"cmd": "router bgp 65001\n neighbor 10.0.0.2 remote-as 65002",
"desc": "AOS-CX BGP neighbor",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "Extreme",
"os": "exos",
"cat": "BGP",
"concept": "bgp:peer",
"title": "configure bgp add neighbor",
"cmd": "enable bgp\nconfigure bgp as-number 65001\nconfigure bgp add neighbor 10.0.0.2 remote-as 65002",
"desc": "EXOS BGP neighbor",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "Fortinet",
"os": "fortios",
"cat": "BGP",
"concept": "bgp:peer",
"title": "config neighbor",
"cmd": "config router bgp\n set as 65001\n config neighbor\n edit 10.0.0.2\n set remote-as 65002\n next\n end\nend",
"desc": "FortiOS BGP neighbor",
"role": "firewall",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "Palo Alto",
"os": "panos",
"cat": "BGP",
"concept": "bgp:peer",
"title": "bgp peer-group peer",
"cmd": "set network virtual-router default protocol bgp enable yes\nset network virtual-router default protocol bgp local-as 65001\nset network virtual-router default protocol bgp peer-group EXT peer PEER peer-as 65002\nset network virtual-router default protocol bgp peer-group EXT peer PEER peer-address ip 10.0.0.2",
"desc": "PAN-OS BGP peer",
"role": "firewall",
"risk": "med",
"yang": null,
"live": false
},
{
"vendor": "Mikrotik",
"os": "routeros",
"cat": "BGP",
"concept": "bgp:peer",
"title": "/routing bgp connection",
"cmd": "/routing bgp connection add name=peer1 as=65001 remote.address=10.0.0.2 remote.as=65002",
"desc": "RouterOS 7 BGP connection",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "NVIDIA",
"os": "nvue",
"cat": "BGP",
"concept": "bgp:peer",
"title": "nv set vrf bgp neighbor",
"cmd": "nv set router bgp autonomous-system 65001\nnv set vrf default router bgp neighbor 10.0.0.2 remote-as 65002",
"desc": "Cumulus NVUE BGP neighbor",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "Nokia",
"os": "srlinux",
"cat": "BGP",
"concept": "bgp:peer",
"title": "protocols bgp neighbor",
"cmd": "set / network-instance default protocols bgp autonomous-system 65001\nset / network-instance default protocols bgp neighbor 10.0.0.2 peer-as 65002",
"desc": "SR Linux BGP neighbor",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "SONiC",
"os": "sonic",
"cat": "BGP",
"concept": "bgp:peer",
"title": "vtysh neighbor remote-as",
"cmd": "router bgp 65001\n neighbor 10.0.0.2 remote-as 65002",
"desc": "SONiC FRR-based BGP",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "Cisco",
"os": "ios",
"cat": "OSPF",
"concept": "ospf:network",
"title": "network area",
"cmd": "router ospf 1\n router-id 1.1.1.1\n network 10.0.0.0 0.0.0.255 area 0",
"desc": "Classic OSPF network statement",
"role": "router",
"risk": "med",
"yang": "ospf-network",
"live": false
},
{
"vendor": "Cisco",
"os": "nxos",
"cat": "OSPF",
"concept": "ospf:network",
"title": "ip router ospf",
"cmd": "feature ospf\nrouter ospf UNDERLAY\n router-id 1.1.1.1\ninterface Ethernet1/1\n ip router ospf UNDERLAY area 0.0.0.0",
"desc": "NX-OS interface-based OSPF",
"role": "router",
"risk": "med",
"yang": "ospf-network",
"live": false
},
{
"vendor": "Juniper",
"os": "junos",
"cat": "OSPF",
"concept": "ospf:network",
"title": "protocols ospf area interface",
"cmd": "set protocols ospf area 0.0.0.0 interface ge-0/0/0.0",
"desc": "Junos OSPF area interface",
"role": "router",
"risk": "med",
"yang": "ospf-network",
"live": false
},
{
"vendor": "Arista",
"os": "eos",
"cat": "OSPF",
"concept": "ospf:network",
"title": "network area",
"cmd": "router ospf 1\n router-id 1.1.1.1\n network 10.0.0.0/24 area 0",
"desc": "EOS OSPF network",
"role": "router",
"risk": "med",
"yang": "ospf-network",
"live": false
},
{
"vendor": "FRR",
"os": "frr",
"cat": "OSPF",
"concept": "ospf:network",
"title": "network area",
"cmd": "router ospf\n ospf router-id 1.1.1.1\n network 10.0.0.0/24 area 0",
"desc": "FRR OSPF — live on lab r1",
"role": "router",
"risk": "med",
"yang": "ospf-network",
"live": true
},
{
"vendor": "VyOS",
"os": "vyos",
"cat": "OSPF",
"concept": "ospf:network",
"title": "set protocols ospf area",
"cmd": "set protocols ospf parameters router-id 1.1.1.1\nset protocols ospf area 0 network 10.0.0.0/24",
"desc": "VyOS OSPF area network",
"role": "router",
"risk": "med",
"yang": "ospf-network",
"live": false
},
{
"vendor": "Huawei",
"os": "vrp",
"cat": "OSPF",
"concept": "ospf:network",
"title": "ospf network area",
"cmd": "ospf 1 router-id 1.1.1.1\n area 0.0.0.0\n network 10.0.0.0 0.0.0.255",
"desc": "VRP OSPF area",
"role": "router",
"risk": "med",
"yang": "ospf-network",
"live": false
},
{
"vendor": "Aruba",
"os": "aoscx",
"cat": "OSPF",
"concept": "ospf:network",
"title": "router ospf area",
"cmd": "router ospf 1\n router-id 1.1.1.1\n area 0.0.0.0",
"desc": "AOS-CX OSPF process",
"role": "router",
"risk": "med",
"yang": "ospf-network",
"live": false
},
{
"vendor": "Extreme",
"os": "exos",
"cat": "OSPF",
"concept": "ospf:network",
"title": "configure ospf add vlan",
"cmd": "enable ospf\nconfigure ospf routerid 1.1.1.1\nconfigure ospf add vlan UNDERLAY area 0.0.0.0",
"desc": "EXOS OSPF on VLAN",
"role": "router",
"risk": "med",
"yang": "ospf-network",
"live": false
},
{
"vendor": "Fortinet",
"os": "fortios",
"cat": "OSPF",
"concept": "ospf:network",
"title": "config router ospf",
"cmd": "config router ospf\n set router-id 1.1.1.1\n config area\n edit 0.0.0.0\n next\n end\n config network\n edit 1\n set prefix 10.0.0.0 255.255.255.0\n set area 0.0.0.0\n next\n end\nend",
"desc": "FortiOS OSPF network",
"role": "firewall",
"risk": "med",
"yang": null,
"live": false
},
{
"vendor": "Palo Alto",
"os": "panos",
"cat": "OSPF",
"concept": "ospf:network",
"title": "virtual-router ospf area",
"cmd": "set network virtual-router default protocol ospf enable yes\nset network virtual-router default protocol ospf router-id 1.1.1.1\nset network virtual-router default protocol ospf area 0.0.0.0 interface ethernet1/1 enable yes",
"desc": "PAN-OS OSPF area",
"role": "firewall",
"risk": "med",
"yang": null,
"live": false
},
{
"vendor": "Mikrotik",
"os": "routeros",
"cat": "OSPF",
"concept": "ospf:network",
"title": "/routing ospf interface-template",
"cmd": "/routing ospf instance add name=default router-id=1.1.1.1\n/routing ospf area add name=backbone area-id=0.0.0.0 instance=default\n/routing ospf interface-template add area=backbone networks=10.0.0.0/24",
"desc": "RouterOS 7 OSPF",
"role": "router",
"risk": "med",
"yang": "ospf-network",
"live": false
},
{
"vendor": "NVIDIA",
"os": "nvue",
"cat": "OSPF",
"concept": "ospf:network",
"title": "nv set vrf router ospf",
"cmd": "nv set vrf default router ospf enable on\nnv set vrf default router ospf router-id 1.1.1.1\nnv set interface swp1 router ospf area 0",
"desc": "NVUE OSPF on swp",
"role": "router",
"risk": "med",
"yang": "ospf-network",
"live": false
},
{
"vendor": "Nokia",
"os": "srlinux",
"cat": "OSPF",
"concept": "ospf:network",
"title": "protocols ospf instance",
"cmd": "set / network-instance default protocols ospf instance 1 router-id 1.1.1.1\nset / network-instance default protocols ospf instance 1 area 0.0.0.0 interface ethernet-1/1",
"desc": "SR Linux OSPF",
"role": "router",
"risk": "med",
"yang": "ospf-network",
"live": false
},
{
"vendor": "SONiC",
"os": "sonic",
"cat": "OSPF",
"concept": "ospf:network",
"title": "router ospf",
"cmd": "router ospf\n ospf router-id 1.1.1.1\n network 10.0.0.0/24 area 0",
"desc": "SONiC OSPF via vtysh",
"role": "router",
"risk": "med",
"yang": "ospf-network",
"live": false
},
{
"vendor": "Cisco",
"os": "ios",
"cat": "Interfaces",
"concept": "iface:ipv4",
"title": "ip address",
"cmd": "interface GigabitEthernet0/0\n description UPLINK\n ip address 10.0.0.1 255.255.255.0\n no shutdown",
"desc": "IOS IPv4 address",
"role": "router",
"risk": "low",
"yang": "iface-ipv4",
"live": false
},
{
"vendor": "Cisco",
"os": "nxos",
"cat": "Interfaces",
"concept": "iface:ipv4",
"title": "ip address (NX-OS)",
"cmd": "interface Ethernet1/1\n description UPLINK\n no switchport\n ip address 10.0.0.1/24\n no shutdown",
"desc": "NX-OS routed port",
"role": "router",
"risk": "low",
"yang": "iface-ipv4",
"live": false
},
{
"vendor": "Juniper",
"os": "junos",
"cat": "Interfaces",
"concept": "iface:ipv4",
"title": "family inet address",
"cmd": "set interfaces ge-0/0/0 description UPLINK\nset interfaces ge-0/0/0 unit 0 family inet address 10.0.0.1/24",
"desc": "Junos IPv4 unit",
"role": "router",
"risk": "low",
"yang": "iface-ipv4",
"live": false
},
{
"vendor": "Arista",
"os": "eos",
"cat": "Interfaces",
"concept": "iface:ipv4",
"title": "ip address",
"cmd": "interface Ethernet1\n description UPLINK\n no switchport\n ip address 10.0.0.1/24",
"desc": "EOS routed Ethernet",
"role": "router",
"risk": "low",
"yang": "iface-ipv4",
"live": false
},
{
"vendor": "FRR",
"os": "frr",
"cat": "Interfaces",
"concept": "iface:ipv4",
"title": "ip address",
"cmd": "interface eth0\n ip address 10.0.0.1/24\n description UPLINK",
"desc": "FRR interface address — live",
"role": "router",
"risk": "low",
"yang": "iface-ipv4",
"live": true
},
{
"vendor": "VyOS",
"os": "vyos",
"cat": "Interfaces",
"concept": "iface:ipv4",
"title": "set interfaces ethernet address",
"cmd": "set interfaces ethernet eth0 description UPLINK\nset interfaces ethernet eth0 address 10.0.0.1/24",
"desc": "VyOS ethernet address",
"role": "router",
"risk": "low",
"yang": "iface-ipv4",
"live": false
},
{
"vendor": "Huawei",
"os": "vrp",
"cat": "Interfaces",
"concept": "iface:ipv4",
"title": "ip address",
"cmd": "interface GigabitEthernet0/0/0\n description UPLINK\n ip address 10.0.0.1 255.255.255.0\n undo shutdown",
"desc": "VRP IPv4 address",
"role": "router",
"risk": "low",
"yang": "iface-ipv4",
"live": false
},
{
"vendor": "Aruba",
"os": "aoscx",
"cat": "Interfaces",
"concept": "iface:ipv4",
"title": "ip address 1/1/N",
"cmd": "interface 1/1/1\n description UPLINK\n no shutdown\n ip address 10.0.0.1/24",
"desc": "AOS-CX 1/1/N addressing",
"role": "router",
"risk": "low",
"yang": "iface-ipv4",
"live": false
},
{
"vendor": "Extreme",
"os": "exos",
"cat": "Interfaces",
"concept": "iface:ipv4",
"title": "configure vlan ipaddress",
"cmd": "configure vlan UNDERLAY ipaddress 10.0.0.1 255.255.255.0",
"desc": "EXOS VLAN-centric IP",
"role": "router",
"risk": "low",
"yang": "iface-ipv4",
"live": false
},
{
"vendor": "Fortinet",
"os": "fortios",
"cat": "Interfaces",
"concept": "iface:ipv4",
"title": "config system interface",
"cmd": "config system interface\n edit port1\n set alias UPLINK\n set ip 10.0.0.1 255.255.255.0\n set allowaccess ping https ssh\n next\nend",
"desc": "FortiOS interface IP",
"role": "firewall",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Palo Alto",
"os": "panos",
"cat": "Interfaces",
"concept": "iface:ipv4",
"title": "layer3 ip",
"cmd": "set network interface ethernet ethernet1/1 layer3 ip 10.0.0.1/24\nset network interface ethernet ethernet1/1 comment UPLINK",
"desc": "PAN-OS L3 interface",
"role": "firewall",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Mikrotik",
"os": "routeros",
"cat": "Interfaces",
"concept": "iface:ipv4",
"title": "/ip address add",
"cmd": "/ip address add address=10.0.0.1/24 interface=ether1 comment=UPLINK",
"desc": "RouterOS IP address",
"role": "router",
"risk": "low",
"yang": "iface-ipv4",
"live": false
},
{
"vendor": "NVIDIA",
"os": "nvue",
"cat": "Interfaces",
"concept": "iface:ipv4",
"title": "nv set interface ip",
"cmd": "nv set interface swp1 description UPLINK\nnv set interface swp1 ip address 10.0.0.1/24",
"desc": "NVUE swp address",
"role": "router",
"risk": "low",
"yang": "iface-ipv4",
"live": false
},
{
"vendor": "Nokia",
"os": "srlinux",
"cat": "Interfaces",
"concept": "iface:ipv4",
"title": "subinterface ipv4",
"cmd": "set / interface ethernet-1/1 admin-state enable\nset / interface ethernet-1/1 subinterface 0 ipv4 address 10.0.0.1/24",
"desc": "SR Linux subinterface",
"role": "router",
"risk": "low",
"yang": "iface-ipv4",
"live": false
},
{
"vendor": "SONiC",
"os": "sonic",
"cat": "Interfaces",
"concept": "iface:ipv4",
"title": "config interface ip add",
"cmd": "sudo config interface ip add Ethernet0 10.0.0.1/24",
"desc": "SONiC Click CLI address",
"role": "router",
"risk": "low",
"yang": "iface-ipv4",
"live": false
},
{
"vendor": "Cisco",
"os": "ios",
"cat": "Routing",
"concept": "static:route",
"title": "ip route",
"cmd": "ip route 0.0.0.0 0.0.0.0 10.0.0.2",
"desc": "IOS default static",
"role": "router",
"risk": "low",
"yang": "static-route",
"live": false
},
{
"vendor": "Juniper",
"os": "junos",
"cat": "Routing",
"concept": "static:route",
"title": "routing-options static",
"cmd": "set routing-options static route 0.0.0.0/0 next-hop 10.0.0.2",
"desc": "Junos default static",
"role": "router",
"risk": "low",
"yang": "static-route",
"live": false
},
{
"vendor": "Arista",
"os": "eos",
"cat": "Routing",
"concept": "static:route",
"title": "ip route",
"cmd": "ip route 0.0.0.0/0 10.0.0.2",
"desc": "EOS default static",
"role": "router",
"risk": "low",
"yang": "static-route",
"live": false
},
{
"vendor": "FRR",
"os": "frr",
"cat": "Routing",
"concept": "static:route",
"title": "ip route",
"cmd": "ip route 0.0.0.0/0 10.0.0.2",
"desc": "FRR static default — live",
"role": "router",
"risk": "low",
"yang": "static-route",
"live": true
},
{
"vendor": "VyOS",
"os": "vyos",
"cat": "Routing",
"concept": "static:route",
"title": "set protocols static route",
"cmd": "set protocols static route 0.0.0.0/0 next-hop 10.0.0.2",
"desc": "VyOS static default",
"role": "router",
"risk": "low",
"yang": "static-route",
"live": false
},
{
"vendor": "Huawei",
"os": "vrp",
"cat": "Routing",
"concept": "static:route",
"title": "ip route-static",
"cmd": "ip route-static 0.0.0.0 0.0.0.0 10.0.0.2",
"desc": "VRP static default",
"role": "router",
"risk": "low",
"yang": "static-route",
"live": false
},
{
"vendor": "Aruba",
"os": "aoscx",
"cat": "Routing",
"concept": "static:route",
"title": "ip route",
"cmd": "ip route 0.0.0.0/0 10.0.0.2",
"desc": "AOS-CX static default",
"role": "router",
"risk": "low",
"yang": "static-route",
"live": false
},
{
"vendor": "Extreme",
"os": "exos",
"cat": "Routing",
"concept": "static:route",
"title": "configure iproute add",
"cmd": "configure iproute add default 10.0.0.2",
"desc": "EXOS default route",
"role": "router",
"risk": "low",
"yang": "static-route",
"live": false
},
{
"vendor": "Fortinet",
"os": "fortios",
"cat": "Routing",
"concept": "static:route",
"title": "config router static",
"cmd": "config router static\n edit 1\n set dst 0.0.0.0 0.0.0.0\n set gateway 10.0.0.2\n set device port1\n next\nend",
"desc": "FortiOS static",
"role": "firewall",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Palo Alto",
"os": "panos",
"cat": "Routing",
"concept": "static:route",
"title": "virtual-router static",
"cmd": "set network virtual-router default routing-table ip static-route DEFAULT destination 0.0.0.0/0 nexthop ip-address 10.0.0.2 interface ethernet1/1",
"desc": "PAN-OS static",
"role": "firewall",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Mikrotik",
"os": "routeros",
"cat": "Routing",
"concept": "static:route",
"title": "/ip route add",
"cmd": "/ip route add dst-address=0.0.0.0/0 gateway=10.0.0.2",
"desc": "RouterOS default",
"role": "router",
"risk": "low",
"yang": "static-route",
"live": false
},
{
"vendor": "NVIDIA",
"os": "nvue",
"cat": "Routing",
"concept": "static:route",
"title": "nv set vrf static",
"cmd": "nv set vrf default router static 0.0.0.0/0 via 10.0.0.2",
"desc": "NVUE static default",
"role": "router",
"risk": "low",
"yang": "static-route",
"live": false
},
{
"vendor": "Nokia",
"os": "srlinux",
"cat": "Routing",
"concept": "static:route",
"title": "static-routes route",
"cmd": "set / network-instance default next-hop-groups group NH nexthop 1 ip-address 10.0.0.2\nset / network-instance default static-routes route 0.0.0.0/0 next-hop-group NH",
"desc": "SR Linux static",
"role": "router",
"risk": "low",
"yang": "static-route",
"live": false
},
{
"vendor": "SONiC",
"os": "sonic",
"cat": "Routing",
"concept": "static:route",
"title": "config route add",
"cmd": "sudo config route add prefix 0.0.0.0/0 nexthop 10.0.0.2",
"desc": "SONiC static default",
"role": "router",
"risk": "low",
"yang": "static-route",
"live": false
},
{
"vendor": "Cisco",
"os": "ios",
"cat": "VLAN",
"concept": "vlan:create",
"title": "vlan",
"cmd": "vlan 10\n name USERS",
"desc": "IOS VLAN create",
"role": "switch",
"risk": "low",
"yang": "vlan",
"live": false
},
{
"vendor": "Cisco",
"os": "nxos",
"cat": "VLAN",
"concept": "vlan:create",
"title": "vlan (NX-OS)",
"cmd": "vlan 10\n name USERS",
"desc": "NX-OS VLAN",
"role": "switch",
"risk": "low",
"yang": "vlan",
"live": false
},
{
"vendor": "Juniper",
"os": "junos",
"cat": "VLAN",
"concept": "vlan:create",
"title": "vlans vlan-id",
"cmd": "set vlans USERS vlan-id 10",
"desc": "Junos VLAN",
"role": "switch",
"risk": "low",
"yang": "vlan",
"live": false
},
{
"vendor": "Arista",
"os": "eos",
"cat": "VLAN",
"concept": "vlan:create",
"title": "vlan",
"cmd": "vlan 10\n name USERS",
"desc": "EOS VLAN",
"role": "switch",
"risk": "low",
"yang": "vlan",
"live": false
},
{
"vendor": "VyOS",
"os": "vyos",
"cat": "VLAN",
"concept": "vlan:create",
"title": "vif vlan",
"cmd": "set interfaces ethernet eth0 vif 10 description USERS\nset interfaces ethernet eth0 vif 10 address 10.10.10.1/24",
"desc": "VyOS 802.1Q vif",
"role": "switch",
"risk": "low",
"yang": "vlan",
"live": false
},
{
"vendor": "Huawei",
"os": "vrp",
"cat": "VLAN",
"concept": "vlan:create",
"title": "vlan",
"cmd": "vlan 10\n name USERS",
"desc": "VRP VLAN",
"role": "switch",
"risk": "low",
"yang": "vlan",
"live": false
},
{
"vendor": "Aruba",
"os": "aoscx",
"cat": "VLAN",
"concept": "vlan:create",
"title": "vlan",
"cmd": "vlan 10\nvlan 10 name USERS",
"desc": "AOS-CX VLAN",
"role": "switch",
"risk": "low",
"yang": "vlan",
"live": false
},
{
"vendor": "Extreme",
"os": "exos",
"cat": "VLAN",
"concept": "vlan:create",
"title": "create vlan",
"cmd": "create vlan USERS tag 10",
"desc": "EXOS tagged VLAN",
"role": "switch",
"risk": "low",
"yang": "vlan",
"live": false
},
{
"vendor": "Fortinet",
"os": "fortios",
"cat": "VLAN",
"concept": "vlan:create",
"title": "interface type vlan",
"cmd": "config system interface\n edit VLAN10\n set vdom root\n set interface port1\n set type vlan\n set vlanid 10\n set ip 10.10.10.1 255.255.255.0\n next\nend",
"desc": "FortiOS VLAN interface",
"role": "firewall",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Mikrotik",
"os": "routeros",
"cat": "VLAN",
"concept": "vlan:create",
"title": "/interface vlan add",
"cmd": "/interface vlan add name=USERS vlan-id=10 interface=bridge",
"desc": "RouterOS VLAN if",
"role": "switch",
"risk": "low",
"yang": "vlan",
"live": false
},
{
"vendor": "NVIDIA",
"os": "nvue",
"cat": "VLAN",
"concept": "vlan:create",
"title": "nv set bridge domain vlan",
"cmd": "nv set bridge domain br_default vlan 10\nnv set interface vlan10 ip address 10.10.10.1/24",
"desc": "NVUE bridge VLAN",
"role": "switch",
"risk": "low",
"yang": "vlan",
"live": false
},
{
"vendor": "Nokia",
"os": "srlinux",
"cat": "VLAN",
"concept": "vlan:create",
"title": "vlan id",
"cmd": "set / interface ethernet-1/1 vlan-tagging true\nset / interface ethernet-1/1 subinterface 10 vlan encap single-tagged vlan-id 10",
"desc": "SR Linux tagged subif",
"role": "switch",
"risk": "low",
"yang": "vlan",
"live": false
},
{
"vendor": "SONiC",
"os": "sonic",
"cat": "VLAN",
"concept": "vlan:create",
"title": "config vlan add",
"cmd": "sudo config vlan add 10",
"desc": "SONiC VLAN add",
"role": "switch",
"risk": "low",
"yang": "vlan",
"live": false
},
{
"vendor": "Cisco",
"os": "ios",
"cat": "EtherChannel",
"concept": "lacp:channel",
"title": "channel-group mode active",
"cmd": "interface range GigabitEthernet1/0/1-2\n channel-group 1 mode active\ninterface Port-channel1\n description LAG-UPLINK\n switchport mode trunk",
"desc": "IOS LACP EtherChannel",
"role": "switch",
"risk": "med",
"yang": "lacp",
"live": false
},
{
"vendor": "Cisco",
"os": "nxos",
"cat": "EtherChannel",
"concept": "lacp:channel",
"title": "channel-group (NX-OS)",
"cmd": "feature lacp\ninterface Ethernet1/1-2\n channel-group 1 mode active\ninterface port-channel1\n description LAG-UPLINK",
"desc": "NX-OS LACP port-channel",
"role": "switch",
"risk": "med",
"yang": "lacp",
"live": false
},
{
"vendor": "Juniper",
"os": "junos",
"cat": "EtherChannel",
"concept": "lacp:channel",
"title": "ae0 aggregated-ether-options",
"cmd": "set interfaces ae0 aggregated-ether-options lacp active\nset interfaces ge-0/0/0 ether-options 802.3ad ae0\nset interfaces ge-0/0/1 ether-options 802.3ad ae0",
"desc": "Junos AE LACP",
"role": "switch",
"risk": "med",
"yang": "lacp",
"live": false
},
{
"vendor": "Arista",
"os": "eos",
"cat": "EtherChannel",
"concept": "lacp:channel",
"title": "channel-group mode active",
"cmd": "interface Ethernet1-2\n channel-group 1 mode active\ninterface Port-Channel1\n description LAG-UPLINK",
"desc": "EOS LACP Port-Channel",
"role": "switch",
"risk": "med",
"yang": "lacp",
"live": false
},
{
"vendor": "Huawei",
"os": "vrp",
"cat": "EtherChannel",
"concept": "lacp:channel",
"title": "eth-trunk mode lacp-static",
"cmd": "interface Eth-Trunk1\n mode lacp-static\n description LAG-UPLINK\ninterface GigabitEthernet0/0/1\n eth-trunk 1",
"desc": "VRP Eth-Trunk LACP",
"role": "switch",
"risk": "med",
"yang": "lacp",
"live": false
},
{
"vendor": "Aruba",
"os": "aoscx",
"cat": "EtherChannel",
"concept": "lacp:channel",
"title": "lag 1 lacp",
"cmd": "interface lag 1\n description LAG-UPLINK\n no shutdown\n lacp mode active\ninterface 1/1/1\n lag 1",
"desc": "AOS-CX LAG",
"role": "switch",
"risk": "med",
"yang": "lacp",
"live": false
},
{
"vendor": "Extreme",
"os": "exos",
"cat": "EtherChannel",
"concept": "lacp:channel",
"title": "enable sharing grouping",
"cmd": "enable sharing 1 grouping 1,2 algorithm address-based L3_L4 lacp",
"desc": "EXOS sharing + LACP",
"role": "switch",
"risk": "med",
"yang": "lacp",
"live": false
},
{
"vendor": "NVIDIA",
"os": "nvue",
"cat": "EtherChannel",
"concept": "lacp:channel",
"title": "nv set interface bond",
"cmd": "nv set interface bond1 bond member swp1,swp2\nnv set interface bond1 bond lacp-bypass on\nnv set interface bond1 bond mlag id 1",
"desc": "NVUE bond + MLAG id",
"role": "switch",
"risk": "med",
"yang": "lacp",
"live": false
},
{
"vendor": "Nokia",
"os": "srlinux",
"cat": "EtherChannel",
"concept": "lacp:channel",
"title": "lag lacp",
"cmd": "set / interface lag1 admin-state enable\nset / interface lag1 lag lacp admin-state enable\nset / interface ethernet-1/1 ethernet aggregate-id lag1",
"desc": "SR Linux LAG",
"role": "switch",
"risk": "med",
"yang": "lacp",
"live": false
},
{
"vendor": "SONiC",
"os": "sonic",
"cat": "EtherChannel",
"concept": "lacp:channel",
"title": "config portchannel add",
"cmd": "sudo config portchannel add PortChannel0001\nsudo config portchannel member add PortChannel0001 Ethernet0",
"desc": "SONiC portchannel",
"role": "switch",
"risk": "med",
"yang": "lacp",
"live": false
},
{
"vendor": "Mikrotik",
"os": "routeros",
"cat": "EtherChannel",
"concept": "lacp:channel",
"title": "/interface bonding",
"cmd": "/interface bonding add name=bond1 mode=802.3ad slaves=ether1,ether2",
"desc": "RouterOS 802.3ad",
"role": "switch",
"risk": "med",
"yang": "lacp",
"live": false
},
{
"vendor": "Cisco",
"os": "nxos",
"cat": "VXLAN",
"concept": "vxlan:nve",
"title": "nve1 source-interface",
"cmd": "feature nv overlay\nfeature vn-segment-vlan-based\ninterface nve1\n no shutdown\n source-interface loopback1\n host-reachability protocol bgp",
"desc": "NX-OS NVE VTEP",
"role": "switch",
"risk": "med",
"yang": "vxlan-nve",
"live": false
},
{
"vendor": "Juniper",
"os": "junos",
"cat": "VXLAN",
"concept": "vxlan:nve",
"title": "switch-options vtep-source",
"cmd": "set switch-options vtep-source-interface lo0.0\nset switch-options route-distinguisher 1.1.1.1:1",
"desc": "Junos VTEP source",
"role": "switch",
"risk": "med",
"yang": "vxlan-nve",
"live": false
},
{
"vendor": "Arista",
"os": "eos",
"cat": "VXLAN",
"concept": "vxlan:nve",
"title": "interface Vxlan1",
"cmd": "interface Vxlan1\n vxlan source-interface Loopback1\n vxlan udp-port 4789\n vxlan vlan 10 vni 10010",
"desc": "EOS Vxlan1 VTEP",
"role": "switch",
"risk": "med",
"yang": "vxlan-nve",
"live": false
},
{
"vendor": "FRR",
"os": "frr",
"cat": "VXLAN",
"concept": "vxlan:nve",
"title": "interface vxlan",
"cmd": "interface vxlan10010\n vxlan vni 10010\n vxlan local-tunnelip 1.1.1.1",
"desc": "FRR VXLAN VTEP — live",
"role": "switch",
"risk": "med",
"yang": null,
"live": true
},
{
"vendor": "NVIDIA",
"os": "nvue",
"cat": "VXLAN",
"concept": "vxlan:nve",
"title": "nv set nve vxlan",
"cmd": "nv set nve vxlan source address 1.1.1.1\nnv set nve vxlan mac-learning off\nnv set evpn enable on",
"desc": "NVUE NVE source",
"role": "switch",
"risk": "med",
"yang": "vxlan-nve",
"live": false
},
{
"vendor": "SONiC",
"os": "sonic",
"cat": "VXLAN",
"concept": "vxlan:nve",
"title": "config vxlan add",
"cmd": "sudo config vxlan add vtep 1.1.1.1",
"desc": "SONiC VTEP add",
"role": "switch",
"risk": "med",
"yang": "vxlan-nve",
"live": false
},
{
"vendor": "Nokia",
"os": "srlinux",
"cat": "VXLAN",
"concept": "vxlan:nve",
"title": "tunnel-interface vxlan",
"cmd": "set / tunnel-interface vxlan1 vxlan-interface 1 type bridged\nset / tunnel-interface vxlan1 vxlan-interface 1 ingress vni 10010",
"desc": "SR Linux vxlan-interface",
"role": "switch",
"risk": "med",
"yang": "vxlan-nve",
"live": false
},
{
"vendor": "Aruba",
"os": "aoscx",
"cat": "VXLAN",
"concept": "vxlan:nve",
"title": "interface vxlan 1",
"cmd": "interface vxlan 1\n source ip 1.1.1.1\n no shutdown",
"desc": "AOS-CX VXLAN source",
"role": "switch",
"risk": "med",
"yang": "vxlan-nve",
"live": false
},
{
"vendor": "Cisco",
"os": "nxos",
"cat": "EVPN",
"concept": "evpn:vni",
"title": "evpn vni l2",
"cmd": "evpn\n vni 10010 l2\n rd auto\n route-target import auto\n route-target export auto",
"desc": "NX-OS EVPN L2 VNI",
"role": "switch",
"risk": "med",
"yang": "evpn-vni",
"live": false
},
{
"vendor": "Juniper",
"os": "junos",
"cat": "EVPN",
"concept": "evpn:vni",
"title": "protocols evpn vni",
"cmd": "set protocols evpn encapsulation vxlan\nset protocols evpn extended-vni-list 10010\nset routing-instances MACVRF instance-type mac-vrf",
"desc": "Junos EVPN-VXLAN",
"role": "switch",
"risk": "med",
"yang": "evpn-vni",
"live": false
},
{
"vendor": "Arista",
"os": "eos",
"cat": "EVPN",
"concept": "evpn:vni",
"title": "vlan-aware-bundle",
"cmd": "router bgp 65001\n address-family evpn\n neighbor SPINE activate\n vlan 10\n rd 1.1.1.1:10\n route-target both 10:10010\n redistribute learned",
"desc": "EOS EVPN vlan-aware",
"role": "switch",
"risk": "med",
"yang": "evpn-vni",
"live": false
},
{
"vendor": "FRR",
"os": "frr",
"cat": "EVPN",
"concept": "evpn:vni",
"title": "address-family l2vpn evpn",
"cmd": "router bgp 65001\n address-family l2vpn evpn\n neighbor 10.0.0.2 activate\n advertise-all-vni",
"desc": "FRR EVPN — live on lab leaf",
"role": "switch",
"risk": "med",
"yang": null,
"live": true
},
{
"vendor": "NVIDIA",
"os": "nvue",
"cat": "EVPN",
"concept": "evpn:vni",
"title": "nv set evpn vni",
"cmd": "nv set evpn enable on\nnv set vrf default router bgp address-family l2vpn-evpn enable on\nnv set nve vxlan flooding evpn",
"desc": "NVUE EVPN enable",
"role": "switch",
"risk": "med",
"yang": "evpn-vni",
"live": false
},
{
"vendor": "Nokia",
"os": "srlinux",
"cat": "EVPN",
"concept": "evpn:vni",
"title": "bgp-evpn bgp-instance",
"cmd": "set / network-instance MACVRF protocols bgp-evpn bgp-instance 1 vxlan-interface vxlan1.1\nset / network-instance MACVRF protocols bgp-evpn bgp-instance 1 evi 10",
"desc": "SR Linux bgp-evpn",
"role": "switch",
"risk": "med",
"yang": "evpn-vni",
"live": false
},
{
"vendor": "SONiC",
"os": "sonic",
"cat": "EVPN",
"concept": "evpn:vni",
"title": "advertise-all-vni",
"cmd": "router bgp 65001\n address-family l2vpn evpn\n neighbor 10.0.0.2 activate\n advertise-all-vni",
"desc": "SONiC EVPN via FRR",
"role": "switch",
"risk": "med",
"yang": "evpn-vni",
"live": false
},
{
"vendor": "Cisco",
"os": "ios",
"cat": "BFD",
"concept": "bfd:enable",
"title": "bfd interval + neighbor fall-over",
"cmd": "bfd-template single-hop FAST\n interval min-tx 300 min-rx 300 multiplier 3\nrouter bgp 65001\n neighbor 10.0.0.2 fall-over bfd",
"desc": "IOS BFD on BGP",
"role": "router",
"risk": "med",
"yang": null,
"live": false
},
{
"vendor": "Juniper",
"os": "junos",
"cat": "BFD",
"concept": "bfd:enable",
"title": "bgp bfd-liveness-detection",
"cmd": "set protocols bgp group EXT neighbor 10.0.0.2 bfd-liveness-detection minimum-interval 300\nset protocols bgp group EXT neighbor 10.0.0.2 bfd-liveness-detection multiplier 3",
"desc": "Junos BFD on BGP",
"role": "router",
"risk": "med",
"yang": null,
"live": false
},
{
"vendor": "Arista",
"os": "eos",
"cat": "BFD",
"concept": "bfd:enable",
"title": "neighbor bfd",
"cmd": "router bgp 65001\n neighbor 10.0.0.2 bfd",
"desc": "EOS BGP BFD",
"role": "router",
"risk": "med",
"yang": null,
"live": false
},
{
"vendor": "FRR",
"os": "frr",
"cat": "BFD",
"concept": "bfd:enable",
"title": "neighbor bfd",
"cmd": "router bgp 65001\n neighbor 10.0.0.2 bfd\nbfd\n peer 10.0.0.2\n detect-multiplier 3\n receive-interval 300\n transmit-interval 300",
"desc": "FRR BFD peer — live",
"role": "router",
"risk": "med",
"yang": null,
"live": true
},
{
"vendor": "VyOS",
"os": "vyos",
"cat": "BFD",
"concept": "bfd:enable",
"title": "set protocols bfd peer",
"cmd": "set protocols bfd peer 10.0.0.2 interval multiplier 3\nset protocols bgp 65001 neighbor 10.0.0.2 bfd",
"desc": "VyOS BFD + BGP",
"role": "router",
"risk": "med",
"yang": null,
"live": false
},
{
"vendor": "NVIDIA",
"os": "nvue",
"cat": "BFD",
"concept": "bfd:enable",
"title": "nv set router bfd",
"cmd": "nv set router bfd enable on\nnv set vrf default router bgp neighbor 10.0.0.2 bfd enable on",
"desc": "NVUE BGP BFD",
"role": "router",
"risk": "med",
"yang": null,
"live": false
},
{
"vendor": "Nokia",
"os": "srlinux",
"cat": "BFD",
"concept": "bfd:enable",
"title": "bfd for bgp neighbor",
"cmd": "set / bfd subinterface ethernet-1/1.0 admin-state enable\nset / network-instance default protocols bgp neighbor 10.0.0.2 failure-detection enable-bfd true",
"desc": "SR Linux BFD",
"role": "router",
"risk": "med",
"yang": null,
"live": false
},
{
"vendor": "Cisco",
"os": "ios",
"cat": "Spanning-Tree",
"concept": "stp:mode",
"title": "spanning-tree mode rapid-pvst",
"cmd": "spanning-tree mode rapid-pvst\nspanning-tree vlan 10 priority 4096",
"desc": "IOS Rapid-PVST + root",
"role": "switch",
"risk": "high",
"yang": null,
"live": false
},
{
"vendor": "Cisco",
"os": "nxos",
"cat": "Spanning-Tree",
"concept": "stp:mode",
"title": "spanning-tree mode",
"cmd": "spanning-tree mode rapid-pvst\nspanning-tree vlan 10 root primary",
"desc": "NX-OS Rapid-PVST",
"role": "switch",
"risk": "high",
"yang": null,
"live": false
},
{
"vendor": "Juniper",
"os": "junos",
"cat": "Spanning-Tree",
"concept": "stp:mode",
"title": "protocols rstp",
"cmd": "set protocols rstp bridge-priority 4k\nset protocols rstp interface ge-0/0/0 edge",
"desc": "Junos RSTP",
"role": "switch",
"risk": "high",
"yang": null,
"live": false
},
{
"vendor": "Arista",
"os": "eos",
"cat": "Spanning-Tree",
"concept": "stp:mode",
"title": "spanning-tree mode rapid-pvst",
"cmd": "spanning-tree mode rapid-pvst\nspanning-tree vlan 10 priority 4096",
"desc": "EOS Rapid-PVST",
"role": "switch",
"risk": "high",
"yang": null,
"live": false
},
{
"vendor": "Aruba",
"os": "aoscx",
"cat": "Spanning-Tree",
"concept": "stp:mode",
"title": "spanning-tree rpvst",
"cmd": "spanning-tree\nspanning-tree mode rpvst\nspanning-tree vlan 10 priority 4096",
"desc": "AOS-CX RPVST",
"role": "switch",
"risk": "high",
"yang": null,
"live": false
},
{
"vendor": "Extreme",
"os": "exos",
"cat": "Spanning-Tree",
"concept": "stp:mode",
"title": "configure stpd mode",
"cmd": "configure stpd s0 mode dot1w\nenable stpd s0 auto-bind vlan USERS",
"desc": "EXOS RSTP (dot1w)",
"role": "switch",
"risk": "high",
"yang": null,
"live": false
},
{
"vendor": "Huawei",
"os": "vrp",
"cat": "Spanning-Tree",
"concept": "stp:mode",
"title": "stp mode rstp",
"cmd": "stp enable\nstp mode rstp\nstp priority 4096",
"desc": "VRP RSTP",
"role": "switch",
"risk": "high",
"yang": null,
"live": false
},
{
"vendor": "Cisco",
"os": "ios",
"cat": "Security",
"concept": "acl:ipv4",
"title": "ip access-list extended",
"cmd": "ip access-list extended DENY-RFC1918\n deny ip 10.0.0.0 0.255.255.255 any\n permit ip any any\ninterface GigabitEthernet0/0\n ip access-group DENY-RFC1918 in",
"desc": "IOS extended ACL",
"role": "router",
"risk": "high",
"yang": "acl",
"live": false
},
{
"vendor": "Juniper",
"os": "junos",
"cat": "Security",
"concept": "acl:ipv4",
"title": "firewall family inet filter",
"cmd": "set firewall family inet filter DENY-RFC1918 term T1 from source-address 10.0.0.0/8\nset firewall family inet filter DENY-RFC1918 term T1 then discard\nset firewall family inet filter DENY-RFC1918 term T2 then accept\nset interfaces ge-0/0/0 unit 0 family inet filter input DENY-RFC1918",
"desc": "Junos inet filter",
"role": "router",
"risk": "high",
"yang": "acl",
"live": false
},
{
"vendor": "Arista",
"os": "eos",
"cat": "Security",
"concept": "acl:ipv4",
"title": "ip access-list",
"cmd": "ip access-list DENY-RFC1918\n deny ip 10.0.0.0/8 any\n permit ip any any\ninterface Ethernet1\n ip access-group DENY-RFC1918 in",
"desc": "EOS IP ACL",
"role": "router",
"risk": "high",
"yang": "acl",
"live": false
},
{
"vendor": "Fortinet",
"os": "fortios",
"cat": "Security",
"concept": "acl:ipv4",
"title": "config firewall policy",
"cmd": "config firewall policy\n edit 10\n set name DENY-RFC1918\n set srcintf port1\n set dstintf port2\n set srcaddr RFC1918\n set dstaddr all\n set schedule always\n set service ALL\n set action deny\n next\nend",
"desc": "FortiOS security policy",
"role": "firewall",
"risk": "high",
"yang": null,
"live": false
},
{
"vendor": "Palo Alto",
"os": "panos",
"cat": "Security",
"concept": "acl:ipv4",
"title": "rulebase security rules",
"cmd": "set rulebase security rules DENY-RFC1918 from trust\nset rulebase security rules DENY-RFC1918 to untrust\nset rulebase security rules DENY-RFC1918 source RFC1918\nset rulebase security rules DENY-RFC1918 destination any\nset rulebase security rules DENY-RFC1918 application any\nset rulebase security rules DENY-RFC1918 service any\nset rulebase security rules DENY-RFC1918 action deny",
"desc": "PAN-OS security rule",
"role": "firewall",
"risk": "high",
"yang": null,
"live": false
},
{
"vendor": "Mikrotik",
"os": "routeros",
"cat": "Security",
"concept": "acl:ipv4",
"title": "/ip firewall filter",
"cmd": "/ip firewall filter add chain=forward src-address=10.0.0.0/8 action=drop comment=DENY-RFC1918",
"desc": "RouterOS filter",
"role": "router",
"risk": "high",
"yang": "acl",
"live": false
},
{
"vendor": "NVIDIA",
"os": "nvue",
"cat": "Security",
"concept": "acl:ipv4",
"title": "nv set acl",
"cmd": "nv set acl DENY-RFC1918 type ipv4\nnv set acl DENY-RFC1918 rule 10 match ip source-ip 10.0.0.0/8\nnv set acl DENY-RFC1918 rule 10 action deny\nnv set interface swp1 acl DENY-RFC1918 inbound",
"desc": "NVUE IPv4 ACL",
"role": "router",
"risk": "high",
"yang": "acl",
"live": false
},
{
"vendor": "Cisco",
"os": "ios",
"cat": "System",
"concept": "ntp:server",
"title": "ntp server",
"cmd": "ntp server 10.0.0.10 prefer\nntp source Loopback0",
"desc": "IOS NTP",
"role": "router",
"risk": "low",
"yang": "ntp",
"live": false
},
{
"vendor": "Juniper",
"os": "junos",
"cat": "System",
"concept": "ntp:server",
"title": "system ntp server",
"cmd": "set system ntp server 10.0.0.10 prefer",
"desc": "Junos NTP",
"role": "router",
"risk": "low",
"yang": "ntp",
"live": false
},
{
"vendor": "Arista",
"os": "eos",
"cat": "System",
"concept": "ntp:server",
"title": "ntp server",
"cmd": "ntp server 10.0.0.10 prefer",
"desc": "EOS NTP",
"role": "router",
"risk": "low",
"yang": "ntp",
"live": false
},
{
"vendor": "FRR",
"os": "frr",
"cat": "System",
"concept": "ntp:server",
"title": "host chrony (lab)",
"cmd": "# FRR container uses host chrony\n# /etc/chrony/chrony.conf\nserver 10.0.0.10 iburst",
"desc": "Lab NTP via chrony",
"role": "router",
"risk": "low",
"yang": "ntp",
"live": true
},
{
"vendor": "VyOS",
"os": "vyos",
"cat": "System",
"concept": "ntp:server",
"title": "set system ntp server",
"cmd": "set system ntp server 10.0.0.10",
"desc": "VyOS NTP",
"role": "router",
"risk": "low",
"yang": "ntp",
"live": false
},
{
"vendor": "Huawei",
"os": "vrp",
"cat": "System",
"concept": "ntp:server",
"title": "ntp-service unicast-server",
"cmd": "ntp-service unicast-server 10.0.0.10",
"desc": "VRP NTP",
"role": "router",
"risk": "low",
"yang": "ntp",
"live": false
},
{
"vendor": "NVIDIA",
"os": "nvue",
"cat": "System",
"concept": "ntp:server",
"title": "nv set system ntp",
"cmd": "nv set system ntp server 10.0.0.10 iburst on",
"desc": "NVUE NTP",
"role": "router",
"risk": "low",
"yang": "ntp",
"live": false
},
{
"vendor": "Nokia",
"os": "srlinux",
"cat": "System",
"concept": "ntp:server",
"title": "system ntp server",
"cmd": "set / system ntp admin-state enable\nset / system ntp server 10.0.0.10",
"desc": "SR Linux NTP",
"role": "router",
"risk": "low",
"yang": "ntp",
"live": false
},
{
"vendor": "SONiC",
"os": "sonic",
"cat": "System",
"concept": "ntp:server",
"title": "config ntp add",
"cmd": "sudo config ntp add 10.0.0.10",
"desc": "SONiC NTP",
"role": "router",
"risk": "low",
"yang": "ntp",
"live": false
},
{
"vendor": "Cisco",
"os": "ios",
"cat": "Troubleshooting",
"concept": "show:bgp",
"title": "show ip bgp summary",
"cmd": "show ip bgp summary",
"desc": "IOS BGP summary",
"role": "router",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Cisco",
"os": "ios",
"cat": "Troubleshooting",
"concept": "show:route",
"title": "show ip route",
"cmd": "show ip route",
"desc": "IOS RIB",
"role": "router",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Cisco",
"os": "ios",
"cat": "Troubleshooting",
"concept": "show:intf",
"title": "show ip interface brief",
"cmd": "show ip interface brief",
"desc": "IOS interface brief",
"role": "router",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Cisco",
"os": "ios",
"cat": "Troubleshooting",
"concept": "show:ospf",
"title": "show ip ospf neighbor",
"cmd": "show ip ospf neighbor",
"desc": "IOS OSPF neighbors",
"role": "router",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Juniper",
"os": "junos",
"cat": "Troubleshooting",
"concept": "show:bgp",
"title": "show bgp summary",
"cmd": "show bgp summary",
"desc": "Junos BGP summary",
"role": "router",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Juniper",
"os": "junos",
"cat": "Troubleshooting",
"concept": "show:route",
"title": "show route",
"cmd": "show route",
"desc": "Junos inet.0",
"role": "router",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Arista",
"os": "eos",
"cat": "Troubleshooting",
"concept": "show:bgp",
"title": "show ip bgp summary",
"cmd": "show ip bgp summary",
"desc": "EOS BGP summary",
"role": "router",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Arista",
"os": "eos",
"cat": "Troubleshooting",
"concept": "show:route",
"title": "show ip route",
"cmd": "show ip route",
"desc": "EOS RIB",
"role": "router",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "FRR",
"os": "frr",
"cat": "Troubleshooting",
"concept": "show:bgp",
"title": "show ip bgp summary",
"cmd": "show ip bgp summary",
"desc": "FRR BGP summary — live",
"role": "router",
"risk": "low",
"yang": null,
"live": true
},
{
"vendor": "FRR",
"os": "frr",
"cat": "Troubleshooting",
"concept": "show:ospf",
"title": "show ip ospf neighbor",
"cmd": "show ip ospf neighbor",
"desc": "FRR OSPF neighbors — live",
"role": "router",
"risk": "low",
"yang": null,
"live": true
},
{
"vendor": "VyOS",
"os": "vyos",
"cat": "Troubleshooting",
"concept": "show:bgp",
"title": "show ip bgp summary",
"cmd": "show ip bgp summary",
"desc": "VyOS BGP summary",
"role": "router",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Huawei",
"os": "vrp",
"cat": "Troubleshooting",
"concept": "show:bgp",
"title": "display bgp peer",
"cmd": "display bgp peer",
"desc": "VRP BGP peers",
"role": "router",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "NVIDIA",
"os": "nvue",
"cat": "Troubleshooting",
"concept": "show:bgp",
"title": "nv show vrf router bgp",
"cmd": "nv show vrf default router bgp neighbor",
"desc": "NVUE BGP neighbors",
"role": "router",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "SONiC",
"os": "sonic",
"cat": "Troubleshooting",
"concept": "show:bgp",
"title": "show ip bgp summary",
"cmd": "show ip bgp summary",
"desc": "SONiC BGP summary",
"role": "router",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Microsoft",
"os": "powershell",
"cat": "Interfaces",
"concept": "iface:ipv4",
"title": "New-NetIPAddress",
"cmd": "New-NetIPAddress -InterfaceAlias Ethernet -IPAddress 10.0.0.1 -PrefixLength 24 -DefaultGateway 10.0.0.2",
"desc": "Windows host IPv4",
"role": "host",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Microsoft",
"os": "powershell",
"cat": "Troubleshooting",
"concept": "show:route",
"title": "Get-NetRoute",
"cmd": "Get-NetRoute -AddressFamily IPv4 | Format-Table -AutoSize",
"desc": "Windows route table",
"role": "host",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Microsoft",
"os": "powershell",
"cat": "Troubleshooting",
"concept": "show:intf",
"title": "Get-NetIPConfiguration",
"cmd": "Get-NetIPConfiguration | Format-List",
"desc": "Windows IP config",
"role": "host",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Linux",
"os": "linux",
"cat": "Interfaces",
"concept": "iface:ipv4",
"title": "ip addr add",
"cmd": "ip addr add 10.0.0.1/24 dev eth0\nip link set eth0 up",
"desc": "iproute2 address",
"role": "host",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Linux",
"os": "linux",
"cat": "Routing",
"concept": "static:route",
"title": "ip route add",
"cmd": "ip route add default via 10.0.0.2 dev eth0",
"desc": "iproute2 default",
"role": "host",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Linux",
"os": "linux",
"cat": "Troubleshooting",
"concept": "show:route",
"title": "ip route show",
"cmd": "ip route show table main",
"desc": "iproute2 RIB",
"role": "host",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Linux",
"os": "linux",
"cat": "EtherChannel",
"concept": "lacp:channel",
"title": "ip link bond",
"cmd": "ip link add bond0 type bond mode 802.3ad\nip link set eth0 master bond0\nip link set eth1 master bond0",
"desc": "Linux LACP bond",
"role": "host",
"risk": "med",
"yang": null,
"live": false
},
{
"vendor": "Wireshark",
"os": "tshark",
"cat": "Troubleshooting",
"concept": "show:bgp",
"title": "tshark BGP",
"cmd": "tshark -i eth0 -f \\\"tcp port 179\\\" -Y bgp -V",
"desc": "Capture BGP on the wire",
"role": "tool",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Wireshark",
"os": "tshark",
"cat": "Troubleshooting",
"concept": "show:ospf",
"title": "tshark OSPF",
"cmd": "tshark -i eth0 -f \\\"ip proto 89\\\" -Y ospf",
"desc": "Capture OSPF hellos",
"role": "tool",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Wireshark",
"os": "tshark",
"cat": "VXLAN",
"concept": "vxlan:nve",
"title": "tshark VXLAN",
"cmd": "tshark -i eth0 -f \\\"udp port 4789\\\" -Y vxlan",
"desc": "Capture VXLAN UDP/4789",
"role": "tool",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Cisco",
"os": "asa",
"cat": "Security",
"concept": "acl:ipv4",
"title": "access-list + access-group",
"cmd": "access-list OUTSIDE-IN extended deny ip 10.0.0.0 255.0.0.0 any\naccess-list OUTSIDE-IN extended permit ip any any\naccess-group OUTSIDE-IN in interface outside",
"desc": "ASA 9.24 ACL",
"role": "firewall",
"risk": "high",
"yang": null,
"live": false
},
{
"vendor": "Nokia",
"os": "sros",
"cat": "BGP",
"concept": "bgp:peer",
"title": "configure router bgp neighbor (SR OS)",
"cmd": "configure router bgp\n autonomous-system 65001\n group \\\"EXT\\\"\n peer-as 65002\n neighbor 10.0.0.2\n peer-as 65002\n exit\n exit",
"desc": "Classic SR OS BGP",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "Cisco",
"os": "iosxe",
"cat": "Telemetry",
"concept": "telemetry:gnmi",
"title": "telemetry ietf gnmi",
"cmd": "telemetry ietf subscription 1\n encoding encode-kvgpb\n source-address 1.1.1.1\n stream yang-push\n update-policy periodic 3000",
"desc": "IOS-XE model-driven telemetry",
"role": "router",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Arista",
"os": "eos",
"cat": "Telemetry",
"concept": "telemetry:gnmi",
"title": "management api gnmi",
"cmd": "management api gnmi\n transport grpc default\n ssl profile DEMO\nprovider eos-native",
"desc": "EOS gNMI transport",
"role": "router",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "Nokia",
"os": "srlinux",
"cat": "Telemetry",
"concept": "telemetry:gnmi",
"title": "system grpc",
"cmd": "set / system grpc-server mgmt admin-state enable\nset / system grpc-server mgmt port 57400\nset / system grpc-server mgmt services [ gnmi ]",
"desc": "SR Linux gNMI",
"role": "router",
"risk": "low",
"yang": null,
"live": false
},
{
"vendor": "NVIDIA",
"os": "nvue",
"cat": "Telemetry",
"concept": "telemetry:gnmi",
"title": "nv set system gnmi",
"cmd": "nv set system gnmi-server listening-address localhost\nnv set system gnmi-server port 9339",
"desc": "NVUE gNMI server",
"role": "router",
"risk": "low",
"yang": null,
"live": false
}
]
[
{
"vendor": "Cisco",
"os": "ios",
"cat": "BGP",
"concept": "bgp:peer",
"title": "neighbor remote-as",
"cmd": "router bgp 65001\n neighbor 10.0.0.2 remote-as 65002",
"desc": "eBGP session on IOS / IOS-XE",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "Cisco",
"os": "nxos",
"cat": "BGP",
"concept": "bgp:peer",
"title": "neighbor remote-as (NX-OS)",
"cmd": "router bgp 65001\n neighbor 10.0.0.2 remote-as 65002\n address-family ipv4 unicast",
"desc": "NX-OS BGP neighbor with AF",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "Juniper",
"os": "junos",
"cat": "BGP",
"concept": "bgp:peer",
"title": "bgp group neighbor",
"cmd": "set protocols bgp group EXT type external\nset protocols bgp group EXT peer-as 65002\nset protocols bgp group EXT neighbor 10.0.0.2",
"desc": "Junos eBGP group + neighbor",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "Arista",
"os": "eos",
"cat": "BGP",
"concept": "bgp:peer",
"title": "neighbor remote-as",
"cmd": "router bgp 65001\n neighbor 10.0.0.2 remote-as 65002",
"desc": "EOS eBGP neighbor",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "FRR",
"os": "frr",
"cat": "BGP",
"concept": "bgp:peer",
"title": "neighbor remote-as",
"cmd": "router bgp 65001\n neighbor 10.0.0.2 remote-as 65002\n neighbor 10.0.0.2 update-source lo",
"desc": "FRR vtysh eBGP — live on the 10-node lab",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": true
},
{
"vendor": "VyOS",
"os": "vyos",
"cat": "BGP",
"concept": "bgp:peer",
"title": "set protocols bgp neighbor",
"cmd": "set protocols bgp 65001 neighbor 10.0.0.2 remote-as 65002",
"desc": "VyOS BGP neighbor",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "Huawei",
"os": "vrp",
"cat": "BGP",
"concept": "bgp:peer",
"title": "peer as-number",
"cmd": "bgp 65001\n peer 10.0.0.2 as-number 65002\n peer 10.0.0.2 connect-interface LoopBack0",
"desc": "VRP BGP peer",
"role": "router",
"risk": "med",
"yang": "bgp-neighbor",
"live": false
},
{
"vendor": "Aruba",
"os": "aoscx",
"cat": "BGP",
"concept": "bgp:peer",
"title": "neighbor remote-as",
"cmd": "router bgp 65001\n neighbor 10.0.0.2 remote-as 65002",
"desc": "AOS-CX BGP neighbor",