r/networkautomation

[Self-Promotion] I built a native network scanner for iOS and early downloaders get lifetime free (worth $19.99)
▲ 37 r/networkautomation+9 crossposts

[Self-Promotion] I built a native network scanner for iOS and early downloaders get lifetime free (worth $19.99)

Netsight is a network scanner and security toolkit I built solo in Swift 6 / SwiftUI, targeting iOS 26. It does live LAN scanning, device fingerprinting (OUI/DNS/HTTP), a force-directed topology map, on-device AI analysis via Apple Foundation Models, and CVE lookups against the NVD database.

Happy to answer anything about the architecture or the security tooling.

Download it here: https://apps.apple.com/us/app/netsight-wifi-tools/id6775736000

u/Efficient_Context_23 — 7 hours ago
▲ 17 r/networkautomation+5 crossposts

I built Network Doctor, an open-source terminal app that shows where your connection breaks

When a host is unreachable, troubleshooting usually means running ping, dig, curl, and traceroute, and others, then piecing their outputs together.

So I built Network Doctor to solve that issue!

It checks the connection in stages, and explains where the chain failed in plain English.

Check it out: https://github.com/heymaikol/network-doctor

u/mplaczek99 — 4 days ago
▲ 18 r/networkautomation+1 crossposts

Not sure if CCNP Enterprise is worth the effort right now

I’m studying for CCNP Encor and I like the idea of having a job where I need to know all of this, but right now I work in a smaller network with about 100-125 Cisco nodes using EIGRP over MetroE And On-Prem “Datacenter“ with EXSi hosts and nexus9k’s. basically enterprise gear in a medium sized business. (overkill for what we have and need honestly). DMVPN to the branch locations. There’s nothing wrong with the setup, and it works, it’s just not as advanced as most of the topics covered in CCNP. I’m wondering if I should spend the time focused on enterprise routing and switching to this depth or switch up to a broader plan, move to CCNP Secuorty or Automation? Try to get ahead of the AI curve? No idea really. For now I’ll keep plugging away at ENCOR, but if any of you had to quit CCNP, what would you go to instead?

My company pays for the certs and likes for us to always being pursuing one, but isn’t super picky about which one we go for. I have CCNA, CompSci degree, 10 years Exp In IT. About 4 in networking.

reddit.com
u/OpinionReasonable247 — 8 days ago
▲ 11 r/networkautomation+2 crossposts

IaC-Driven Home Cyberlab

Hey guys,

I'm working on documenting a personal homelab project creating an isolated home security lab; using a recycled HP laptop to run proxmox as a bare-metal hypervisor with the integration of cost-effective omada network devices ER-605 (L3 IP Subnetting/L5-L7 Network Services) and a Managed Smart Switch SG-2008 for granular L2 Data-Link capabilities such as vlan 802.1q port tagging, access control lists, and STP functions. I have integrated SDN functionality using an Omada SDN software controller on an LXC container hosted through Proxmox. Im currently an IT Support Engineer and would like to showcase my proficiency, passion, and active progress on implementing secure network services/solutions and implementing automation through tools such as Packer (Template Builder), Terraform (Infrastructure Provisioning), and Ansible (Configuration management). My future implementations will be IaC driven as I find the benefits of automated infrastructure within minutes versus hours after tested templates and configs a proficient route for my personal and professional future projects. This is my choosen stack for IaC with further expansion in progress but will love feedback from both tech enthusiasts and professionals alike hosted on my Github (Link provided). Any questions, comments, feedbacks and emotional outburts are welcomed!

github.com
u/Square-Protection-77 — 7 days ago
▲ 6 r/networkautomation+4 crossposts

Config tool

Hi everyone!

I wanted to share an open-source tool I’ve built to eliminate some of the daily networking routine: Network Config Tool v1.3. It’s a desktop application written in Python (Tkinter) designed for simultaneous, multithreaded configuration deployment across multiple network nodes using Netmiko under the hood.

Here is a quick breakdown of its core features:

* **Multithreading:** Runs concurrent deployments via a thread pool scaling up to 15 workers.

* **Multi-vendor Support:** Out-of-the-box compatibility with Cisco IOS, Juniper Junos, Huawei VRP, and VyOS.

* **Built-in Analytics (Matplotlib):** Tracks deployment history in a local JSON file and renders interactive trend charts directly within the GUI. Clicking a data point on the timeline instantly brings up a detailed diagnostic report (Success, Auth Error, or Timeout breakdowns).

* **Flexible Blueprint Workspace:** Allows you to append multiple configuration templates sequentially without overwriting previous text.

* **Robust Logging:** Automatically captures standard output from the remote CLI and splits it into dedicated text files named [Device_IP]_config_logging.txt.

* **Standalone Deployment:** Easily compiles into a standalone Windows .EXE binary using PyInstaller.

The project is completely free and open-source. I’d highly appreciate your feedback, constructive criticism, and, of course, some GitHub stars if you find the utility helpful!

Repository link: https://github.com/loginlocal/network-config-tool

u/archmansky — 8 days ago
▲ 2 r/networkautomation+2 crossposts

I took the pain from my career and built something better

I've been working in networking for 20 years and noticed that everything made isn't for end users that aren't CCNP+

My background is military and everything pushed out to the soldiers requires an FSR (Field Service Representative) to setup and troubleshoot, but nothing made for the <E5 that can install, deploy and troubleshoot

I've spent the last 4 months using claude and the latest sol 5.6 to get this to a point where i wanted to create a company and start selling it.

HAMR-FORGE

its a Ubuntu overlay with WAN aggregation, HA, truthful UI. not a typical SaaS or web game.

i'm curious to hear ya'lls thoughts on the "bring your own hardware" software i've built from scratch with the help of lessons learned, network engineering and AI

u/eyelobes — 11 days ago
▲ 7 r/networkautomation+1 crossposts

I built a terminal tool that turns your home network into an interactive map (Rust, open source)

Got tired of nmap dumping a wall of text every time I wanted to see what's on my network, so I built NetScope , think htop, but instead of processes it shows you the devices on your LAN as an actual graph you can navigate with arrow keys.

What it does:

Scans your network and draws it as a tree: your router in the middle, everything else (laptops, phones, IoT junk, printers) branching off it

Move around with arrow keys, hit Enter on a device to see its IP, MAC, vendor, hostname, open ports

Auto-scans common ports on everything so you're not running nmap manually, or press P for a deeper scan on one device

Has a "watch mode" ,leave it running and it'll tell you when something new joins the network or a device drops offline, right in the graph

There's also an embedded terminal built in, so if you actually need real nmap/dig/whatever, you don't even have to leave the app

Everything runs through standard Linux tools (ip, ping, getent) under the hood, no raw sockets, so it doesn't need root for the basic stuff.

It's a Rust/ratatui TUI, fully open source. Built it because I wanted something that made my home network visible instead of just a list of IPs I have to mentally map.

https://github.com/Kolgrim33/netscope

The GIF is in the repo

u/WayGood8826 — 8 days ago
▲ 10 r/networkautomation+5 crossposts

I built NetGuard: A Hybrid Network IDS/IPS Telegram Bot using Python &amp; Scapy

🛡️ NetGuard: A Hybrid Network IDS/IPS Telegram Bot (Built with Python & Scapy)

I'm excited to share my very first fully deployed open-source project: NetGuard!

🎓 Background & Purpose

This project originally started as the foundation of my university graduation project. Recognizing its potential for real-world application, I decided to refactor, upgrade, and release it to the community.

Whether you are a student in Cybersecurity / Computer Networks looking for a solid base to learn from and modify, or an enthusiast who needs a lightweight, ready-to-use monitoring tool, this repository is designed for you! Feel free to fork it, adapt it for your own research, or use it as-is.

⚡ What is NetGuard?

NetGuard is a Headless, Threaded Python-based Network Intrusion Detection & Prevention System (IDS/IPS) integrated with an interactive Telegram Command Center and n8n Workflow automation capabilities.

🌟 Key Features:

• 🔍 Auto Gateway Detection: Automatically binds to your active network adapter and local subnet.

• 📱 Subnet Scanner: Scans connected devices using ARP requests.

• 🌐 DNS Traffic Monitoring (IDS): Sniffs UDP 53 packets in real-time to log active domains and flag suspicious traffic.

• ⛔ Targeted ARP Isolation (IPS): Block or isolate unauthorized devices dynamically using inline Telegram buttons.

• 🤖 Remote Telegram Interface: Get immediate alert notifications on your phone and run management commands on the fly.

• 🔄 n8n Integration Ready: Built to trigger custom webhooks and automate security workflows seamlessly.

⚠️ Important Usage Notes:

• 🔐 Administrator Privileges Required: Because NetGuard interacts directly with network sockets via Scapy (for packet sniffing and ARP frame manipulation), you must run the script with Administrator / Elevated privileges:

python IDS-IPS.py

• 🏠 Local Network Scope (LAN Only): NetGuard relies on Layer-2 ARP mechanisms for discovery and isolation. It is designed specifically for Home, Small Office, or Single-Subnet (SOHO) local networks, rather than complex enterprise-routed environments.

💻 Tech Stack

• Language: Python 3.x

• Core Libraries: Scapy, pyTelegramBotAPI, Requests

• Integrations: Telegram Bot API, n8n Automation Ready

🔗 Source Code & Contribution

The repository is completely open-source. I’d love to hear your feedback, suggestions, or bug reports!

👉 GitHub Repository: https://github.com/Hasan-devolp/Netguard-IDS-IPS

(If you find this project helpful for your studies or work, leaving a ⭐️ on GitHub would be greatly appreciated!)

#Python #Cybersecurity #NetworkSecurity #OpenSource #GitHub #TelegramBot #PythonProgramming #InfoSec #NetworkEngineering #NetGuard #IDS #IPS #EthicalHacking #n8n #Automation #Coding #SoftwareEngineering #TechProjects

u/hasan_naser — 10 days ago
▲ 0 r/networkautomation+1 crossposts

Title: Built a safety-focused Cisco IOS config tool, tested carefully in my own lab — looking for one person to try it on their own gear

I've been building a desktop tool for Cisco IOS network engineers — think "reviewed diff before anything reaches a device" rather than raw terminal access. Every change goes through one gate: risk-scored, shown as a diff, snapshotted before it's sent, with rollback that actually works (verified against real hardware, not just claimed). I've spent real time hardening it against a lab with a Cisco switch and router (EVE-NG) — found and fixed real bugs this way: a capture timing issue that looked fine until a real device disagreed, VLAN state that lived somewhere the parser wasn't looking, a rollback regression caught before it shipped. All of that is only proven on one person's setup, though — mine. What I'm looking for: one person with their own Cisco IOS lab (EVE-NG, GNS3, physical gear, doesn't matter) willing to connect it to a device they don't mind changing, try a small reversible push and a rollback, and tell me what breaks or feels wrong. Not asking for a long commitment — one real session is genuinely useful. Repo's private for now (early, and it touches real device config, so I'm being careful about who gets a build). Comment or DM if you're interested and I'll set you up directly. No Juniper/other vendor support yet — Cisco IOS only for now, and pushing config is refused-by-design on anything else.

reddit.com
u/Ok_Inspector5599 — 12 days ago
▲ 1 r/networkautomation+1 crossposts

Platform/DevOps/SRE practitioners: looking for independent technical review of a research implementation

I’m developing HybridOps Core, an MIT-0 open-source research implementation for governed infrastructure operations, and I’m looking for practitioners willing to give a short, candid technical assessment of specific parts of the work.

The work examines whether infrastructure intent, environment policy, dependency ordering, preflight, execution, verification and run records can be expressed through a stable runtime contract across heterogeneous environments.

I’ve published several technical papers alongside the implementation and opened focused GitHub review threads for independent critique. The aim is not a code audit or unpaid QA. Reviewers are being asked to assess the architecture, operating assumptions, failure boundaries and practical relevance of the work.

Current review areas include contract-driven runtime design, image lifecycle and verification, reproducible network environments, infrastructure authority and source-of-truth boundaries, and recovery operations.

If one of those areas overlaps with your experience, comment with the area and I’ll send the relevant paper and review thread. Critical findings and counterexamples are welcome.

reddit.com
u/InnerBank2400 — 12 days ago
▲ 2 r/networkautomation+2 crossposts

Copilot or Gemini operations optical fiber telecoms

I’m looking for use cases for Copilot or Gemini AI systems in a DWDM Optical fiber network. I’m hearing a lot that it speeds up routine tasks and can create work plans based on scans of vendor documents. I’d like to know how it does that and if there are sun other use cases? It’s for an operations team environment, troubleshooting network issues, processes etc.

reddit.com
u/Hefty_Anybody_4317 — 14 days ago

Git, Ansible, pyATS IaC Project

NetDevOps is an Git, Ansible, pyATS based IaC project that I started about a year ago and put on the back burner. Lately I've been iterating on it. I started the project to get a better understanding how Git driven infrastructure as code was built and managed. Currently supports Cisco IOS-XE devices.

The pipeline is driven by a Git pre-commit hook.

If you're interested in playing with it take a look at the README.md file in the repo for instructions on how to set it up locally. I'd appreciate any feedback.

https://github.com/splitnines/netdevops.git

u/splitnines — 13 days ago
▲ 2 r/networkautomation+1 crossposts

[Testers wanted] NetScan — local Wi-Fi network scanner, no ads/tracking

&#x200B;

Hey everyone,

I just finished building NetScan, an Android app that scans your Wi-Fi

network and identifies connected devices (IP, name via mDNS/UPnP, open

ports, one-tap access to each device's web interface...). Built with

homelab users in mind, but usable by anyone curious about what's on their

network.

Key points:

- 100% local processing, no data ever leaves your phone, no ads, no tracking

- Custom names/icons per device

- Scan history, CSV export

- Optional background monitoring with new-device notifications

- Available in English and French

Before I can publish it publicly, Google requires a 14-day closed test with

at least 12 testers. If you're up for trying it early (and helping me clear

this requirement):

  1. Send me your Google account email (DM) so I can add you to the tester list

  2. Once added, open this link and tap "Become a tester":

    https://play.google.com/apps/testing/com.homelabrobin.netscan

  3. Install the app from the Play Store:

    https://play.google.com/store/apps/details?id=com.homelabrobin.netscan

Feedback/bug reports welcome, but honestly just having it installed and

opened occasionally over the 14 days is all that's needed. Thanks!

reddit.com
u/Neoxxeo — 14 days ago