# NETCONFIG

> Network Automation Reference


## Posts

- [FortiOS WebSocket DLP: Block Sensitive Data in Copilot Chats](https://netconfig.io/fortios-websocket-dlp-block-copilot/): Hello and welcome. In this blog, we will talk about how FortiOS can block and log traffic sent over AI chatbots. Here’s a gap I ran into recently: ChatGPT and Gemini chats run over plain HTTPS, so FortiGate’s DLP scanning already catches them without me touching a single setting. Copilot doesn’t play by the same ... Read more
- [Why Google Is Betting on Post-Quantum Cryptography (Not QKD)](https://netconfig.io/post-quantum-cryptography-vs-qkd-google/): Quantum computers are no longer a “someday” problem for me. They are a “when” problem. And when they arrive in full force, they could break the encryption that protects everything from your bank login to Google’s own search infrastructure. So Google had a choice to make: go all-in on quantum key distribution (QKD), or bet ... Read more
- [Meraki Black Belt CTF Stage 3 Walkthrough: 13 Flags](https://netconfig.io/meraki-black-belt-ctf-stage-3-walkthrough/): Meraki Black Belt CTF Stage 3 I opened the Meraki Black Belt Stage 3 CTF thinking it’d be a quick refresher. Thirteen flags in, I realized it was testing something else entirely — not whether I knew the tools, but whether I’d reach for the right one under pressure. Every scenario reads like a real ... Read more
- [Cisco IKEv1 Debug Commands and States - Phase 1 & 2](https://netconfig.io/cisco-ikev1-debug-commands-states-reference/): Cisco IKEv1 Debug Commands and States — A Real Troubleshooting Reference This is Part 1 of a 3-part series on Cisco IKE debugging. Part 2 covers IKEv2 states and commands. Part 3 is a side-by-side IKEv1 vs IKEv2 state comparison. Let me tell you exactly how this article came to exist. I was working a ... Read more
- [FortiGate Static Route with REST API and Python-2026](https://netconfig.io/fortigate-static-route-with-rest-api-and-python/): Published: July 2026 · Category: Automation · Author: Network Troves · Applies to: FortiGate (FortiOS 7.x/8.x), Python 3.x FortiGate static route with REST API automation is what I set up today instead of clicking through the GUI or hand-typing CLI commands. If you’re managing more than a handful of firewalls, this is one of the ... Read more
- [FortiSwitch SNMPv3 Configuration via FortiLink Trick -2026](https://netconfig.io/fortiswitch-snmpv3-configuration/): FortiSwitch SNMPv3 Configuration Today I configured FortiSwitch SNMPv3 across 26 FortiLink-managed switches in a live production environment — core, distribution, and access layers included. The goal was simple on paper: get two SNMPv3 users (one for NAC polling, one for our monitoring poller) working consistently on every switch. In practice, it took a small workaround ... Read more
- [FortiGate Debug Flow Functions: Complete Guide 2026](https://netconfig.io/fortigate-debug-flow-functions-reference-guide/): Published: June 18, 2026 | Category: FortiGate | Author: Bhardwaj VishnuApplies to: FortiGate (all CLI/GUI-capable models) · FortiOS 6.x / 7.x / 8.0.0 If you’ve spent any real time in FortiGate troubleshooting, you already know diagnose debug flow is the single most useful diagnostic tool on the platform — and also one of the most ... Read more
- [Upload FortiGate License via TFTP (No Internet Required) – Full Guide 2026](https://netconfig.io/fortigate-license-upload-tftp-no-internet/): Published: June 17, 2026 | Category: FortiGate | Author: Bhardwaj Vishnu Applies to: FortiGate (all models) · FortiOS 6.x / 7.x · Method: Manual License Restore via TFTP FortiGate license Most FortiGate licensing guides assume one thing: that your firewall has internet access. In the real world, that’s not always true. You might be staging ... Read more
- [Cisco to Palo Alto IKEv2 VPN: Step-by-Step Guide](https://netconfig.io/cisco-to-palo-alto-ikev2-vpn-config/): Published: June 11, 2026 | Category: Palo Alto / Cisco | Author: Bhardwaj Vishnu Applies to: Cisco IOS-XE (ISR 1000, 4000 series) · PAN-OS 10.x / 11.x · Tunnel type: IKEv2 IPsec Site-to-Site Cisco to Palo Alto IKEv2 VPN Configuring an IKEv2 IPsec tunnel between a Cisco ISR and a Palo Alto firewall is one ... Read more
- [FortiGate LACP Troubleshooting Guide & CLI Commands - 2026](https://netconfig.io/fortigate-lacp-troubleshooting-guide/): Note: The commands, concepts, and debug workflows detailed in this guide are verified for modern FortiOS firmware (v7.0, v7.2, and v7.4). However, the core netlink and lacpd commands remain applicable across legacy versions as well. FortiGate LACP troubleshooting When designing high-throughput, resilient enterprise networks, relying on a single physical cable between your core switch and ... Read more
- [CVE-2026-0257: When a VPN Cookie Becomes a Free Login](https://netconfig.io/cve-2026-0257-globalprotect-auth-bypass/): Published: June 11, 2026 | Category: Palo Alto / Security Advisories | Author: Bhardwaj Vishnu | Affects: PAN-OS GlobalProtect (Portal & Gateway) | CVSS v4 Score: 7.8 (High) | CISA KEV: Added May 29, 2026 If you’re running a Palo Alto Networks firewall with GlobalProtect and you haven’t patched yet, stop reading this sentence and ... Read more
- [The Complete FortiGate HA Commands & Troubleshooting Guide](https://netconfig.io/fortigate-ha-commands-debug-guide/): I keep coming back to this same set of commands every time an HA pair acts up, so I put them all in one place. When a FortiGate cluster fails to sync, a heartbeat link degrades, or you hit an unexpected failover, knowing the right command beats hunting through the GUI. Whether you’re chasing a ... Read more
- [FortiGate Debug Commands Guide: Packet Flow & IPsec 2026](https://netconfig.io/fortigate-debug-commands-guide-packet-flow-ipsec-2026/): FortiGate debug commands Troubleshooting network connectivity and VPN tunnels on a FortiGate firewall can feel like searching for a needle in a haystack without the right visibility. Fortunately, FortiOS provides a powerful suite of CLI diagnostic tools to trace packets and dissect IKE negotiations in real time. This comprehensive guide breaks down essential FortiGate debug ... Read more
- [Meraki Python Automation: Branch Design & API Blueprint 2026](https://netconfig.io/cisco-meraki-python-automation-design/): Introduction Scaling an enterprise network isn’t just about buying more hardware — it’s about operational efficiency. When you’re rolling out dozens or hundreds of new branch locations, configuring each site by hand through the GUI wastes a huge amount of engineering time. Worse, manual data entry all but guarantees configuration drift and IP overlap eventually ... Read more
- [How to Update Cisco Meraki MX Layer 3 Firewall Rules via API](https://netconfig.io/update-meraki-mx-firewall-rules-api/): Introduction Managing a handful of branch firewalls through the dashboard is fine. But once your network scales to dozens, hundreds, or thousands of locations, manual configuration becomes a liability. Clicking through the Meraki Dashboard to update one Layer 3 outbound firewall rule across 50 sites isn’t just tedious — it invites configuration drift, human error, ... Read more
- [Meraki API Updating VLANs: Complete Guide 2026](https://netconfig.io/cisco-meraki-api-update-vlan/): Introduction Deploying a single branch network is straightforward. But once you’re rolling out dozens or hundreds of remote sites, relying on manual GUI configuration turns into a serious operational bottleneck. One of the most common workflows I run into with Cisco Meraki is cloning a “Golden Template” network to spin up a new site quickly. ... Read more
- [Learn Cisco Meraki API:Create & Clone Networks via API](https://netconfig.io/cisco-meraki-api-create-clone-network/): Introduction Rolling out a single branch office by hand through the dashboard is manageable. But once you’re deploying fifty, a hundred, or a thousand new sites, manual configuration turns into operational bottlenecks, configuration drift, and the occasional costly typo. That’s why I lean on Infrastructure as Code (IaC) and API-driven automation once you’re past a ... Read more
- [How to Find Your Meraki Organization ID & Network ID (API + Dashboard) - 2026](https://netconfig.io/find-meraki-organization-id-network-id/): When I moved from configuring Cisco Meraki networks manually through the GUI dashboard to automating deployments with the Meraki API, the very first wall I hit wasn’t authentication or rate limits — it was simply knowing which organization and network I was actually talking to. Before you can clone a site, push firewall rules, or ... Read more
- [Complete Guide: FortiGate DHCP over IPsec VPN in FortiClient](https://netconfig.io/fortigate-dhcp-over-ipsec-vpn-configuration/): Introduction to FortiGate DHCP over IPsec VPN When you deploy a FortiGate Remote Access VPN (Dial-Up IPsec), the default and most heavily documented method for assigning IP addresses to remote clients is Mode Config. Mode Config is highly automated — it pushes virtual IP addresses, DNS server settings, and split-tunneling routes down to the FortiClient ... Read more
- [FortiGate IPsec Remote Access VPN Setup Guide | FortiOS 7.x](https://netconfig.io/fortigate-ipsec-remote-access-vpn-fortios-7/): FortiGate IPsec Remote Access VPN I set this up whenever remote employees need encrypted access into a corporate LAN without a fixed site-to-site link on the other end. Unlike a site-to-site tunnel, a remote access (dial-up) VPN accepts connections from client devices on unknown, changing public IPs — laptops on home Wi-Fi, hotel networks, mobile ... Read more
- [Python NETCONF Automation with NCclient: Cisco IOS-XE Guide](https://netconfig.io/python-netconf-ncclient-cisco-ios-xe/): INTRODUCTION If you have spent any time writing network automation scripts using Python libraries like Paramiko or Netmiko, you are intimately familiar with the primary pain point of legacy automation: CLI screen scraping. Parsing text-based CLI outputs breaks instantly the moment a vendor updates an operating system, adds a new column to a table, or ... Read more
- [Block AI Apps on FortiGate: Monitor & Block ChatGPT, Claude via Web Filter](https://netconfig.io/fortigate-block-monitor-ai-shadow-it-web-filter/): Introcution to Web Filter Shadow IT used to mean someone spinning up an unapproved Dropbox account. These days it means half your org pasting internal docs into ChatGPT without a second thought. I get asked about this constantly right now — “can we even see who’s using AI tools, let alone stop it?” — and ... Read more
- [FortiASIC Architecture Deep Dive: NP7, CP9, SP5](https://netconfig.io/fortinet-fortiasic-architecture-deep-dive-np7-cp9-sp5/): Fortinet FortiASIC architecture utilizes proprietary, hardware-accelerated Application-Specific Integrated Circuits (ASICs) rather than relying solely on general-purpose CPUs.

## Pages

- [Terms of Service](https://netconfig.io/terms-of-service/): Effective Date: August 9, 2026 By accessing or using NetConfig.io (“the Site”, “we”, “us”, or “our”), you agree to be bound by these Terms of Service. If you do not agree, please do not use the Site. 1. Use of the Site NetConfig.io provides free educational content, configuration guides, and network utility tools (including those ... Read more
- [Privacy Policy](https://netconfig.io/privacy-policy/): Effective Date: June 1, 2026  |  Last Updated: June 1, 2026 This Privacy Policy explains how NetConfig.io (“we”, “us”, or “our”) collects, uses, and protects information when you visit our website. By using NetConfig.io, you agree to the practices described in this policy. 1. Information We Collect Information You Provide When you contact us via ... Read more
- [Disclaimer](https://netconfig.io/disclaimer/): Effective Date: June 1, 2026 ⚠️ Important Notice for Network Engineers All configuration examples, commands, and technical guides on NetConfig.io are provided for educational purposes only. Always test configurations in an isolated lab environment before applying them to any production network. NetConfig.io is not liable for network outages, data loss, or security incidents resulting from ... Read more
- [Contact us](https://netconfig.io/contact-us/): Have a question, found an error, want to suggest a topic, or interested in collaborating? We’d love to hear from you. Ways to Reach Us 📋 Reporting a Technical Error? Please include the page URL and the specific command or section with the error. We update incorrect content within 48 hours. Send a Message   ... Read more
- [About us](https://netconfig.io/about-us/): About NetConfig.io Your Trusted Guide to Enterprise Networking Hands-on configuration guides, deep technical breakdowns, and real-world troubleshooting — built by network engineers, for network engineers. Who We Are NetConfig.io is a technical blog dedicated to enterprise network engineering. We publish in-depth configuration guides, troubleshooting walkthroughs, and practical tutorials covering the tools and technologies that real-world ... Read more

## Optional

- [Agent (MCP protocol)](websites-agents.hostinger.com/netconfig.io/mcp)

[comment]: # (Generated by Hostinger Tools Plugin)