Prompt GeneratorConfig drift checker →AI NetScript Platform →Sign in

Network Automation Prompt Generator

Configure your scenario below, then generate a tailored, copy-ready prompt for an LLM to write a production-grade Python network automation script.

8 new task categories and 8 new vendors added — covering SP, DC fabric, ISP, and QoS automation.

Task Categories

What should the script do? Select one or more across the groups below.

Core provisioning

Bulk ProvisioningVLAN / Interface MgmtACL / Firewall RulesZero-Touch Provisioning (ZTP)Firmware UpgradeBackup & Restore

Routing protocols

BGP ConfigOSPF / IS-ISMP-BGP L3VPNnewVPNv4/v6, RT import/exportBGP community policynewAS-path, MED, local-prefMPLS LDP / RSVPnewLabel switching, TE tunnelsSegment routingnewSR-MPLS and SRv6 node/adj SIDSRv6 / uSIDnewSRv6 locator, End-SID, uSID micro-segmentMulticast / PIMnewPIM-SM/SSM, RP config, IGMP snoopingRoute policy / prefix-list auditnewUnused policies, shadow terms, AS-path filter review

DC fabric

VXLAN EVPNnewSpine-leaf, BGP unnumbered underlayEVPN Type-2 / Type-5newMAC/IP and IP prefix advertisementVRF / tenantnewL3 segmentation, RT import/exportAnycast gatewaynewDistributed IRB, virtual MACBGP unnumbered underlaynewIPv6 link-local next-hop on fabric links

Load balancing & redundancy

ECMP / UCMPnewLACP / LAGnewActive/passive, min-links, hash policyHSRP / VRRP / GLBPnewSTP / MSTPnewRoot bridge, port cost, guardBFD failovernewSub-second detection for BGP/OSPF

ISP / transit

IRR / RPKInewRoute origin validation, ROAPrefix filteringnewBOGON, max-prefix limitsDDoS / RTBHnewBlack-hole trigger, RFC 8955 FlowspecIXP peeringnewRoute server, import policy

QoS & traffic engineering

QoS / DSCPnewMQC, CBWFQ, LLQ, policingTE tunnelsnewRSVP-TE and SR-TE path computation

Operations & observability

Compliance AuditTelemetry CollectionTroubleshooting / DiagnosticsTopology Discovery (CDP/LLDP)Crawl neighbors, build graphIP SLAnewJitter, RTT, packet loss SLANetFlow / sFlownewFlow exporter and collector configEvent-driven automationnewWebhook/Kafka trigger, auto-fixCMDB syncnewNetBox and ServiceNow integrationYANG push / gNMI dial-outnewStreaming telemetry subscription config

SD-WAN

App-aware routingnewSLA classes, transport steeringMPLS → SD-WAN migrationnewStaged cutover with auto-revert

SASE / SSE

ZTNA access policynewLeast-privilege + posturePolicy auditnewDrift + misconfig detectionDLP policy deploynewNetskope desired-state, dry-run plan + apply

NAC implementation

RADIUS infrastructure setupnewServer install, shared secrets, CoA port, redundancy802.1X wired port confignewAuthenticator config: auth-port, MAB fallback, multi-auth802.1X wireless SSID confignewWPA3-Enterprise, EAP type, RADIUS server group per SSIDMAB & device profilingnewMAC auth bypass, OUI profiling, DHCP/HTTP fingerprintingPosture assessment policynewOS patch, AV, disk encryption, domain membershipGuest portal & self-registrationnewCaptive portal, sponsor flow, time-limited, SMS OTPDynamic VLAN assignmentnewRADIUS VLAN attribute, role-based VLAN, quarantine VLANTrustSec / SGT policynewSecurity Group Tag, SGACL matrix, inline taggingCertificate & EAP-TLS setupnewCA integration, cert template, SCEP/EST, OCSPAD / LDAP identity integrationnewDomain join, identity store, group mappingMDM / EMM integrationnewIntune, Jamf, MobileIron compliance feedEndpoint profiling rulesnewDHCP class ID, HTTP UA, CDP/LLDP, SNMP probesChange of Authorization (CoA) policynewRe-auth, VLAN bounce, terminate on posture failMicro-segmentation policynewRole-to-role ACL, dACL push, VXLAN SGT

NAC operations

Live session audit & reportingnewActive endpoints, auth method, VLAN, SGT, postureFailed authentication reportnewFailed MAB/802.1X by reasonRogue & unknown device detectionnewUnregistered MACs, unknown OUI/profileBulk MAC address onboardingnewImport MAC list from CSV with group assignmentNAC policy compliance auditnewDrift vs golden policy, shadow rulesCertificate expiry monitoringnewScan EAP-TLS certs, alert 30/14/7 daysRADIUS server health monitoringnewSuccess rate, latency, failover detectionQuarantine & remediation workflownewQuarantine VLAN, remediation, re-authBulk policy push & versioningnewDeploy auth policy to all NADs, diff firstSIEM / SOAR integrationnewForward auth events, SOAR playbook trigger

WLAN implementation

SSID design & provisioningnewSecurity, band steering, BSS colourAP bulk onboarding & ZTPnewSerial/MAC import, group assign, firmwareRF profile & RRM confignewChannel width, Tx power, DCA, TPCFast roaming & mobility confignew802.11r/k/vWLAN QoS / WMM policynewWMM AC, DSCP-to-UP, CAC voice/videoSSID-to-VLAN mappingnewPer-SSID VLAN, dynamic VLAN, VLAN poolWireless mesh / backhaul confignewMesh role, RAP/MAP, Ethernet bridgingAnchor controller / guest tunnellingnewMobility anchor, CAPWAP to DMZWLAN security policynewMFP, PMF, rogue containment, WIDS/WIPSHigh-density venue designnewCo-channel, BSS min RSSI, MU-MIMOIoT / OT SSID isolationnewDedicated IoT SSID, VLAN isolation, rate limitLocation services & analyticsnewCMX, Mist AI, presence analytics, BLE

WLAN operations

RF health & interference reportnewChannel utilisation, noise floor, co-channelClient connectivity troubleshootingnewAuth/DHCP failures, roaming, SNR per clientAP health & availability monitoringnewAP up/down, CPU/memory, client countRogue AP & client detectionnewClassify rogue/friendly, auto-containmentBulk AP firmware upgradenewStaged rollout, pre/post check, rollbackCoverage & capacity reportnewRSSI heatmap export, density, SLA breachWLAN config compliance auditnewDrift vs golden SSID/RF, unauthorised SSIDSpectrum analysis & CleanAirnewNon-WiFi interferer, duty cycleWLAN SLA & experience reportnewOnboarding/roaming time, throughput SLAController config backupnewScheduled backup to Git/S3, diff on change

SD-WAN monitoring & dashboards

Unified SD-WAN health dashboardnewCross-vendor tunnel/SLA/path in one viewSLA monitoring & breach alertingnewLoss/latency/jitter per app, MTTRPath analytics & transport comparisonnewMPLS vs broadband vs LTEApplication experience monitoringnewDPI per app, QoE score, site rankingCapacity & bandwidth dashboardnew95th percentile, forecast to saturationIncident correlation & RCAnewCorrelate with BGP, routing, ISPChange tracking & audit trailnewPolicy/template/software with diffTransport cost analyticsnewUsage vs contract, overage alertMulti-vendor inventory dashboardnewSoftware version, cert expiry, sync statusExecutive SLA report (PDF)newMonthly uptime, breaches, MTTR, trend

Wireless location services

Location infrastructure setupnewAP calibration, floor map, BLE configPresence & dwell analyticsnewDwell time, visitor count, heatmapAsset & IoT device trackingnewBLE tag tracking, geofence alert, historyIndoor wayfinding APInewRoute calc, turn-by-turn, POI directoryGeofence & zone alertingnewEnter/exit trigger, dwell threshold, webhookLocation data compliancenewGDPR/PDPA anonymisation, consent, retentionCMX / DNA Spaces integrationnewNotification API, floor map syncLocation accuracy auditnewWalk test, error distance, calibrationHeatmap data export & visualisationnewDensity heatmap export, time-lapse, CSVThird-party system pushnewPush to Salesforce, ServiceNow, Kafka

Unified Day-2 operations

Cross-domain health sweepnewNAC + WLAN + SD-WAN + SASE + routingCross-domain compliance sweepnewDrift detection across all domainsCertificate expiry sweepnewRADIUS, WLAN EAP, SD-WAN, SASE certsFirmware & software version sweepnewAll devices vs approved version listCross-domain incident correlationnewWLAN + NAC + SD-WAN correlationCross-domain capacity sweepnewAP load, SD-WAN util, NAC sessionsUnified change audit trailnewAll config changes in one timelineExecutive network health reportnewWeekly/monthly PDF: SLA, incidentsCross-domain auto-remediationnewCorrelate, diagnose, remediate, verifyUnified CMDB syncnewSync all inventory to NetBox/ServiceNow

Vendors / OS

Target network OS families.

Cisco IOSCisco IOS-XECisco IOS-XRCisco NX-OSJuniper JunosArista EOSPalo Alto PAN-OSFortinet FortiOSHPE ArubaMikroTikF5

Nokia SR-OSnewNokia SR LinuxnewSONiCnewCumulus LinuxnewFRRoutingnewVyOSnew

Cisco SD-WAN (vManage)newJuniper MistnewVMware VeloCloudnewAruba EdgeConnectnew

Zscaler (ZIA / ZPA)newNetskopenewCato NetworksnewPrisma AccessnewVersa SASEnewFortinet SASEnew

Cisco ISE (Identity Services Engine)newCisco NAC Appliance (legacy CCA)newHPE Aruba ClearPass Policy ManagernewForescout eyeSight / eyeControlnewFortinet FortiNACnewJuniper Mist Access Assurance (cloud NAC)newPortnox Cloud NACnewSecureW2 / JoinNow NACnewMicrosoft NPS / RADIUS (Windows Server)newPacketFence (open source NAC)newIvanti / Pulse Secure NACnewExtreme Networks NAC / ExtremeControlnew

Cisco Catalyst Center Wireless (DNA)newCisco WLC / AireOS (legacy)newCisco Meraki MR (cloud)newHPE Aruba Central (cloud WLAN)newHPE Aruba Mobility Controller / AOS8newJuniper Mist WLAN (AI-driven)newRuckus SmartZone (on-prem)newRuckus One (cloud)newExtreme Networks WiNG / ExtremeCloud IQnewFortinet FortiAP / FortiWLCnewUbiquiti UniFi (controller / cloud)newHuawei AC (eSight / iMaster NCE)newCambium Networks cnMaestronewAerohive / Extreme HiveManager NGnew

Grafana OSS / EnterprisenewPrometheus + AlertmanagernewInfluxDB v2 / v3newElastic Stack (ELK)newSplunk Enterprise / CloudnewDatadog NPMnewCisco ThousandEyesnewNetBrain Network AutomationnewServiceNow ITOM / Event MgmtnewPagerDuty AIOpsnewAtlassian OpsgenienewNetBox (source of truth)new

Cisco CMX / DNA SpacesnewCisco Spaces (cloud)newJuniper Mist Location (vBLE/Wi-Fi)newHPE Aruba Meridian / ALEnewRuckus SmartPositioning (SPoT)newExtreme Networks ExtremeLocationnewEkahau Connect (survey + location)newPointr Indoor IntelligencenewAccuware Wi-Fi Locationnew

Connection Protocol

How the script talks to devices.

SSH (Netmiko / Paramiko)NETCONF (ncclient)gRPC / gNMIRESTCONFSNMPVendor REST API

Fleet Scale

Influences default worker pool size.

Lab(<10 devices)Small(10–100 devices)Medium(100–500 devices)Large(500–5K devices)Hyperscale(5K+ devices)

Extra Requirements

Beyond the always-on production standards.

Async execution (asyncio / asyncssh)Jinja2 templatesRollback on failureVault / secrets manager integrationDry-run modeUnit tests (pytest)Structured logging (JSON)Per-device retry & exponential backoffIdempotency checksConcurrent workers (configurable)Pre/post-checksDiff reporting

SD-WAN & SASE

Extra requirements specific to SD-WAN controllers and SASE / SSE platforms.

Multi-tenant supportnewLoop across tenant list, separate credentials per tenantAPI rate-limit handlingnewRetry on 429, token bucket, exponential backoffOAuth2 / token refreshnewAuto-refresh expired bearer tokens mid-runPoP failover-awarenewDetect PoP change during run, resume from new PoPPre/post security posture checknewSnapshot policy before push, diff after, alert on regressionSAML / SSO authenticationnewBrowser-flow auth fallback for SSO-gated APIs

Output Formats

How results and reports are emitted.

CSVJSONYAMLHTML dashboardMarkdown reportPrometheus metricsSlack webhookEmailSyslog

5 options selected — select a task category, a vendor, a protocol to continue.