Tuesday, June 7, 2011

SNAFU - Alternate Download Location

It seems as though there is a periodic issue with the google docs shared file link.
Here is a link to an alternate site

Thursday, April 7, 2011

Introducing SNAFU - The Switch, Network And Firewall Utility


I am introducing a new tool I have created both for learning and for small network administration: SNAFU - Switch, Network And Firewall Utility.

This initial version has been written as an Excel macro in VB. It will generate a number of useful configurations :

Cut and paste tools for - Etherchannel(PAGP and LACP), HSRP/GLBP, and Router VPN configs.

It will also generate router and switch configs while integrating global information such as tacacs,radius, ntp and snmp.

Version one can generate router config files for up to 20 sites (this includes configs for three switches at each site as well). It supports a couple of network designs: a flat L2 wan (think metro-ethernet) with EIGRP or OSPF, a more traditional point-to-point design using /30 networks (only generates the endpoints not the aggregation site config).

It can also generate a typical L3 MPLS WAN design using BGP and private ASNs (this is typically how an MPLS network would be provisioned through a Telco such as AT&T)

It will support a few serial options one or two serial ports (both WIC and VWICs), as well as encapsulation for HDLC and PPP/PPP multilink.

Finally there is a simple ASA firewall internet kiosk design. This design will allow for an internet connection via static or dhcp IP address, and outbound internet browsing with PAT overload.


My hope is that this tool will provide a way to generate useful configs quickly, both for those interested in learning IOS and those working day to day on smaller networks. If interest warrants it I will be adding a number of additional features.

Some examples (in no particular order)

DMVPN - cut and paste tool
Embedded Event Manager tool (pull updates for local user,snmp etc from tftp server)


main screens -

additional firewall config for 5510s and up (simple perimeter configs with failover)

add new features to switch configs, bpdu guard on/off, port-security,"dead" native vlan to prevent vlan hopping, private vlan support, dhcp snooping etc....

add key authentication to routing protocols
add acl generator for managment access
add acl generator for inbound/outbound access
add NAT generator for static, dynamic and pat on routers
add dhcp support for dhcpd on router
add logging and traps
add netflow support
add security lockdown feature screen
add dhcp - ip helper forwarding for remote networks.
add frame-relay encap
add rip and igp
add ip6 support
add ability to change network ip ranges (both Lan and Wan ranges)
add ability to scale beyond 30 sites
add ssh configuration and support

As this is version 1.0, the interface is still a bit rough. I have already found out that the current menu design is limited through VB and that I will have to make numerous layout changes for the next version.

Please remember that this is by necessity a work of my spare time, and that I will not have time to validate/test every possible permutation of code. I fully expect that I will make numerous errors as this project progresses, please drop me a comment if you find something.

Download the Utility here
As time permits I will also make a few quick videos of the user interface for training purposes.


Thanks, and ENJOY!!!!