Network Automation Guides
Visual, hands-on guides for network engineers — tutorials, protocol deep dives, and how-tos, with diagrams and copy-paste code for every NAPT tool.
Recent Articles
The Streaming Console: A Live Terminal That Remembers Everything
Run any diagnostic script against any device, watch output stream in real time, and end up with structured findings the platform can reason about.
Read →Intent: Saying What You Mean and Proving the Network Agrees
Write a one-line statement of how the network should behave. The Intent engine compiles it into checks and tells you where reality diverges.
Read →Compliance Without the Spreadsheet: Continuous Posture for Network Devices
The Compliance panel runs your hardening rule packs across the fleet, scores devices, and tracks drift so audits start with evidence, not promises.
Read →Inventory & IPAM: The Source of Truth Your Scripts Actually Trust
Upload a CSV, connect to NetBox, or generate an IP range — Inventory normalises every source into the same validated row shape for the platform.
Read →Drift: Knowing Exactly What Changed, On Which Device, and When
Drift watches your device configs, diffs them against a baseline with grouping-aware rules, and tells the story of every change without the noise.
Read →The Script Generator: From Prompt to Production-Quality NetOps Code
Describe the operation in plain English, pick the vendor and constraints, and the generator returns a script with parsers, validators, and a form.
Read →Topology: A Live Map You Can Diff, Diagram, and Reason About
Parse configs, ingest LLDP, render a force-directed graph or Mermaid diagram, and diff topologies across time — the network as a data structure.
Read →Runbooks: Living Documents That Run
Runbooks combine narrative, parameters, and executable scripts so on-call engineers stop choosing between reading the doc and fixing the problem.
Read →The Help Centre: Search That Actually Finds Things
Fuzzy matching, synonyms, quoted phrases, whole-word highlights, shareable URLs, and keyboard navigation — the Help Centre nails every detail.
Read →Read a Packet Capture Like an Engineer: Turning a .pcap Into a Root Cause
Upload a capture and the PCAP Analyzer decodes conversations, flags retransmissions, resets, and handshake failures, and hands you a NAPT script to confirm the fix.
Read →Set Up NAPT in 30 Minutes: From Empty Terminal to Your First Automated Check
A guided install: create a Python virtual environment, install NAPT, wire up SSH credentials, and run your first read-only check with --dry-run safety on.
Read →BGP Fault-Finding with Python: Turning show bgp Into Answers
Parse BGP neighbor state, detect flaps from uptime, and produce colored, actionable output that tells you which peer broke and why.
Read →Netmiko vs NAPALM vs Nornir: Which One, and When
Three tools that solve different problems. A comparison matrix and the same task written in each, so you reach for the right one every time.
Read →Verifying MPLS L3VPNs with Python: RD, RT, and the Routes That Should Be There
Pull show vrf detail, check route-target import/export consistency across PEs, and prove customer routes are actually crossing the core.
Read →Talking to Cisco SD-WAN: Automating vManage With the REST API
Authenticate against vManage, handle the XSRF token dance, list devices, and collect BFD session health programmatically.
Read →Segment Routing Path Verification: Reading the Label Stack
Verify Node SID allocation, inspect the imposed label stack, and confirm TI-LFA backups are in place before a link ever fails.
Read →Build a Network Automation Lab: GNS3, EVE-NG, and DevNet Sandbox
Three ways to get real devices to automate against — local emulation, browser-based topologies, and Cisco's free cloud sandboxes — wired up to NAPT.
Read →Continuous Compliance: Scoring Your Network Against CIS Benchmarks
Model CIS Level 1 and Level 2 controls, score every device, track the trend, and drive automated remediation on a weekly cron.
Read →The Template Library: A Vetted Catalog of Reusable Network Tasks
Browse, search, and filter hundreds of pre-built, parameterised templates — then drop them straight into a workflow or run them as-is.
Read →Building Network Workflows Visually: Chain Templates Into Repeatable Automation
Drag templates onto a canvas, connect them with edges, add branches and parallel groups, then save, schedule, and run the whole flow.
Read →The AI Intent Engine: From Plain-English Goals to Verifiable Network Checks
Describe what the network should be doing in plain language and let the engine compile it into structured, executable checks with pass/fail evidence.
Read →The Script Catalog: A Searchable Shelf of Ready-to-Run Network Scripts
Browse curated, parameterised scripts by task and vendor, preview what each one does, and run it through the platform's safe execution pipeline.
Read →BGP Config-as-Code: Ship Peering Changes Through a Pipeline, Not a Terminal
Treat BGP configuration like software: store intent in git, lint and dry-run it in a pipeline, gate the deploy behind an approval, and verify the session came up — all without an SSH session.
Read →Zero-Touch Provisioning: From Rack-and-Stack to Production Without a Console Cable
ZTP turns a factory-default switch into a fully configured, verified device automatically. Here's how to drive it from a pipeline with config-as-code and post-deploy verification.
Read →Automated Compliance Audits: Turn a Quarterly Scramble Into a Nightly Cron
Manual CIS/NIST audits are stale the moment they finish. Run them continuously in a scheduled pipeline, auto-file tickets for findings, and watch your compliance score trend up.
Read →Stop Hardcoding Device Passwords: A Secrets Vault for Network Automation
Plaintext credentials in playbooks and scripts are the most common — and most dangerous — automation mistake. Here's how to inject secrets at run time from a vault instead.
Read →DORA Metrics for Network Teams: Measure Automation Like a Software Org
Deployment frequency, lead time, change failure rate, and time-to-restore aren't just for app teams. Here's what each DORA metric means for network automation — and how to move them.
Read →NAPT MCP Server — Control Your Network From Claude
Connect Claude, Cursor, or any MCP-compatible assistant to NAPT and generate scripts, run diagnostics, and triage findings in plain language — no context switching.
Read →Network DevOps in 60 Minutes — From Manual CLI to Automated Pipelines
A fast, practical path up the automation maturity ladder: from copy-paste CLI to Git-driven pipelines that validate, dry-run, and deploy with an audit trail.
Read →Network-as-Code: Why YAML Intent Files Beat CLI Scripts
CLI scripts encode how. Intent files encode what. Declaring desired state in YAML makes changes reviewable, idempotent, and safe to re-run.
Read →BGP Fault Finding With Python: A Step-by-Step Guide
Walk the BGP state machine with Python: pull neighbor state, classify why a session is stuck, and emit findings you can act on.
Read →Netmiko vs NAPALM vs Nornir: Which Should You Use?
Three of the most popular network automation libraries solve different problems. Here's a clear comparison so you pick the right one — or combine them.
Read →DORA Metrics for Network Teams — Measure What Matters
Deployment frequency, lead time, change failure rate, and time-to-restore translate cleanly to network automation. Here's how to read and move each one.
Read →Automating MPLS VPN Verification With Python
Verify L3VPN end to end with Python: check VRF presence, route-target import/export, PE-CE adjacency, and reachability across the MPLS core.
Read →Security Automation: Running CIS Benchmarks on Your Fleet
Turn the CIS benchmark into automated checks: score every device, track the trend, and remediate the gaps that matter most.
Read →Netmiko vs NAPALM vs Scrapli: Which Python Library Should You Use?
A practical, side-by-side comparison of the three most popular Python libraries for talking to network devices — what each is good at, where each falls short, and how to choose.
Read →Network Reconciliation: A 7-Type Discrepancy Taxonomy for Source-of-Truth Drift
Reconciliation compares your documented source of truth against the live network and groups every difference into one of seven discrepancy types, each with a specific recommended action.
Read →The 5-Phase Change Lifecycle: Baseline, Plan, Apply, Verify, Document
A guided workflow wrapper that turns a one-shot script into a safe, auditable change: capture a baseline, plan, apply, verify, and document — in order.
Read →HumanRail: Escalations Driven by AI Confidence, Not Just Risk
Approval gates answer 'is this risky enough to need a human?' HumanRail answers a different question: 'is the AI confident enough to proceed?' Here is why both matter.
Read →Lab Platform Connections: Verify Changes Before They Hit Production
Register lab platform connections with an API endpoint and a Vault credential reference, validate them before saving, and launch lab verifications hands-off.
Read →Session Audit: Navigable History Organized by Units of Work
Flat event logs are hard to reason about. Session Audit groups activity into sessions — continuous units of work — that you can filter and pin.
Read →Vendor-Specific SD-WAN Automation Templates for WAN, Migration & Operations
Generic SD-WAN guidance only goes so far. NAPT's template library now covers six vendors with implementation, migration, and operations templates you can filter directly.
Read →NetClaw: A CCIE-Level AI Network Engineering Coworker
NetClaw brings CCIE-level reasoning to everyday network engineering. Here is what it does, how its parallel-execution pattern surfaces per-device results, and how to start.
Read →Automation Fitment: Match Network Tooling to the Estate, Not the Hype
Choosing NAPALM vs Netmiko, cloud vs on-prem runners, or NetBox + Terraform is not a matter of taste — it's a fitment problem. Here's how to map requirements to the right stack.
Read →Get new automation guides in your inbox
Practical NetOps tutorials, deep dives, and how-tos — no spam, unsubscribe anytime.