Small tools. Real automation.

NetDevOps Micro-Tools

Small tools. Real automation. Zero friction.

🚀

New here? Start with these 3 tools

No email. No install. Under 60 seconds each.
🔥

Cisco — Latest Threats

Loading threat feed...

⚙️

Config Generators

🛡️

Security Tools

🔧

Network Tools

👤

Profiles

📖

Reference

Cisco CLI Cheat Sheet Troubleshooting and operations commands, IOS-XE and NX-OS side by side. One HTML file that also works offline.
Open Download offline copy

Free. No login. Browser-based.

Quick profiles

SNMPv3 Config Generator v2 - Cisco Best Practices

💡 Verification Commands — How to check current SNMP config
▼
Check SNMP Status
show snmp show snmp engineID show snmp group show snmp user
Check SNMP Views
show snmp view show snmp mib
Check Running Config
show running-config | section snmp show running-config | include snmp
Check SNMP Host
show snmp host show snmp sessions
Check Statistics
show snmp statistics show snmp contact show snmp location
Troubleshooting
debug snmp packets debug snmp requests undebug all
Security Settings
SNMP Credentials
Access Control
Network Settings
SNMP Traps
Logging
System Information (optional)
Output
Generated SNMPv3 configuration

SNMPv3 Multi-Host Generator v3 - Enterprise

Multi-Host Mode: Configure multiple SNMP managers (Cisco Prime, WhatsUp Gold, Splunk, etc.) with individual credentials and access levels. Each host gets its own group, user, and ACL entry.
Common Settings
System Information (optional)
SNMP Traps
Logging
SNMP Hosts
Output
Generated SNMPv3 Multi-Host configuration

NTP Config Generator v2 - Cisco Best Practices

💡 Verification Commands — How to check current NTP config
▼
Check NTP Status
show ntp status show ntp associations show ntp associations detail
Check Clock
show clock show clock detail show calendar
Check Running Config
show running-config | section ntp show running-config | include ntp show running-config | section clock
Check Authentication
show ntp authentication-keys show ntp trusted-keys show ntp authentication-status
Check Access Control
show access-lists show ntp access-groups
Troubleshooting
debug ntp events debug ntp packets undebug all
Network Hierarchy
NTP Servers
CORE Settings
Authentication
Additional Options
Access Control
Output
Generated NTP configuration

AAA / TACACS+ Config Generator

💡 Verification Commands — How to check current AAA/TACACS+ config
▼
Check AAA Status
show aaa servers show aaa sessions show aaa user all
Check TACACS+
show tacacs show tacacs private test aaa group tacacs+ [user] [pass] legacy
Check Running Config
show running-config | section aaa show running-config | section tacacs show running-config | include aaa
Check Authentication
show aaa method-lists authentication show aaa method-lists authorization show aaa method-lists accounting
Check Local Users
show running-config | include username show users show privilege
Troubleshooting
debug aaa authentication debug aaa authorization debug tacacs undebug all
SSH Prerequisites
Credentials
Local Fallback User
TACACS+ Servers
Accounting (Best Practice)
Output
Generated AAA configuration

Golden Config Builder

💡 Verification Commands — How to check device baseline config
▼
Check Device Info
show version show inventory show platform
Check Security Settings
show running-config | section line show running-config | section service show running-config | include password
Check Logging
show logging show running-config | section logging show archive log config all
Check Interfaces
show ip interface brief show interfaces status show running-config | section interface
Check Banner
show running-config | section banner show running-config | include banner
Full Config Review
show running-config show startup-config show archive config differences
✗ Not saved
→ Not configured. Use SNMPv3 or SNMP Multi generator first.
→ Not configured. Use the NTP Generator to create a config, then click "Use saved config".
→ Not configured. Use the AAA Generator to create a config, then click "Use saved config".
Baseline Sections
Generated Golden Config

CVE Analyzer v0.8 — Provenance audit trail

Only platforms with a dataset are offered. ASA, FTD, IOS XR and ACI are not covered yet.
Example for this platform: 17.9.4a
CVE analysis result

Security posture

Run an analysis to see severity breakdown and recommended upgrade target.

CVE Mitigation Advisor v1.0 - NEW

Get actionable mitigation commands for known CVEs. Enter a CVE ID to receive workaround steps, ACL configurations, upgrade recommendations, and verification commands.

KEV Watch v0 · New CISA KEV listings

Which CVEs from your vendors were added to the CISA Known Exploited Vulnerabilities catalog recently, and when the US federal remediation deadline falls. Source: the CISA KEV catalog only; nothing else is mixed in.

Loading KEV Watch...

Short deadline = federal due date 3 days or less after the listing. The deadline binds US federal civilian agencies; for everyone else it is a signal of active exploitation.

Patch Decision Sheet: which version to pick. netdevops.thebackroom.ai/patch-sheet

iPerf3 Command Generator

💡 Quick Reference — iPerf3 Server & Client Commands
▼
Server Commands
iperf3 -s iperf3 -s -D iperf3 -s -p 5201
Client Basic
iperf3 -c <server_ip> iperf3 -c <ip> -t 30 iperf3 -c <ip> -i 1 -t 60
Parallel Streams
iperf3 -c <ip> -P 4 iperf3 -c <ip> -P 8 -w 32M
UDP Testing
iperf3 -c <ip> -u iperf3 -c <ip> -u -b 100M iperf3 -c <ip> -u -b 1G
Reverse (Download)
iperf3 -c <ip> -R iperf3 -c <ip> -R -t 30
Output Options
iperf3 -c <ip> -J iperf3 -c <ip> --logfile out.txt iperf3 -c <ip> -f m
Test Configuration
Server Settings
Test Parameters
Output
Generated iPerf3 Commands

IP Subnet Calculator

💡 Quick Reference — CIDR & Subnetting Cheat Sheet
▼
Network Classes
Class A: /8 (255.0.0.0) Class B: /16 (255.255.0.0) Class C: /24 (255.255.255.0)
Private Ranges (RFC1918)
10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
Common Subnets
/24 = 254 hosts /25 = 126 hosts /26 = 62 hosts /27 = 30 hosts
Small Networks
/28 = 14 hosts /29 = 6 hosts /30 = 2 hosts (P2P) /31 = 2 hosts (RFC3021)
Wildcard Masks
/24 → 0.0.0.255 /16 → 0.0.255.255 /8 → 0.255.255.255
Special Addresses
127.0.0.1 (loopback) 0.0.0.0 (default route) 255.255.255.255 (broadcast)
Calculate Subnet
Advanced Options ▼
Quick Tools
Results

MTU Calculator

💡 Quick Reference — Tunnel Overhead & MTU Values
▼
Common Overhead
GRE: 24 bytes IPSec (tunnel): 73 bytes VXLAN: 50 bytes GRE over IPSec: 97 bytes
Effective MTU (1500)
GRE: 1476 IPSec: 1427 VXLAN: 1450 GRE/IPSec: 1403
TCP MSS Formula
MSS = MTU - 40 40 = IP(20) + TCP(20) ip tcp adjust-mss [value]
Cisco Commands
ip mtu [value] ip tcp adjust-mss [value] tunnel path-mtu-discovery
Minimum MTU
IPv4: 576 bytes IPv6: 1280 bytes Jumbo: 9000 bytes
Troubleshooting
ping -f -s [size] [ip] show interface tunnel X debug ip icmp
MTU Settings
Results

What's My IP

Your public IP and what your client sends with every request — as seen from the server side. Handy for NAT/proxy debugging and source-IP checks for ACLs.

💡 CLI usage — script-safe endpoints
▼
From your terminal
curl https://netdevops-tools.thebackroom.ai/tools/whoami curl https://netdevops-tools.thebackroom.ai/tools/whoami/all curl https://netdevops-tools.thebackroom.ai/tools/whoami/json
Notes
Per-field: /whoami/ip /ua /lang /encoding /mime /port /forwarded Use https:// — plain http gets a 301 from the edge Cookies and auth headers are never echoed back

Cisco CLI Cheat Sheet Reference

An offline, searchable reference of troubleshooting and operations commands for network engineers: IOS-XE and NX-OS side by side, plus C9800 / AP, ISE, ASA / FTD, PAN-OS, Catalyst SD-WAN, CUBE / CUCM, Windows, Linux, Wireshark and NetDevOps tooling. Disruptive commands carry a ⚠ warning and unconfirmed syntax is badged UNVERIFIED.

Open cheat sheet Download offline copy

SHA-256 of the file: see the checksum file

One self-contained HTML file: no install, no network calls, opens from disk in any current browser. After you move it to an offline PC, compare the hash: sha256sum Cisco_CLI_Cheat_Sheet.html (Linux) or Get-FileHash Cisco_CLI_Cheat_Sheet.html (PowerShell).

Favorites and recent copies stay in the browser that saved them. To move them between this site and an offline copy, use Favorites › Export and Import.

Inside the page: search needs all words (sh ip int br works), Ctrl+K opens the palette, ? lists the keys. Print the current view, your favorites or a two-column A4 Quick card.

Timezone Converter v1.1 + DTG (Zulu)

Convert timestamps between timezones for log correlation. Essential when troubleshooting across multiple sites with different time configurations (ZULU, EST, CET, etc.).

DTG (Zulu) Format v1.3

Convert Date-Time Group (DTG) format.

Mar 2026
MoTuWeThFrSaSu
: :
DTG Preview: --
Manual DTG input (for pasting from logs)

Batch Convert (Multiple Timestamps)

Paste multiple timestamps (one per line) to convert them all at once.

Config Parser Parse show run to JSON

💡 Supported Sections — What gets parsed
▼
Basic Info
hostname ip domain-name enable secret service pwd-enc
Interfaces
interface GigabitEthernet0/0 description ip address X.X.X.X
SNMP
snmp-server community snmp-server user snmp-server host location / contact
NTP
ntp server ntp source ntp authenticate ntp trusted-key
Logging
logging buffered logging console logging host
AAA / Users
aaa new-model aaa authentication tacacs server username X secret
Paste Configuration
Parsed JSON

IP Path Tracer v1.0 — Traceroute Analyzer

Paste Traceroute Output
Results

Config Explainer v1.0 — Plain English

Paste Cisco Config
Explanation

Unused Port Auditor v1.0 — Find Inactive Ports

Paste 'show interface status' Output
Audit Results

Config Drift Detection v1.1 — Compare Two Configs

Paste two configs (baseline vs current) to detect changes, additions, removals, and modified commands. Risk-flags highlight security-sensitive drift; direction tags (hardening/degradation) are heuristic, not a risk rating.

Config A (Baseline / Backup)
Config B (Current / Running)

ACL What-If v0 - IOS / IOS-XE IPv4 ACL

Paste IPv4 ACLs (numbered or named, standard or extended). The lint shows rules that can never match, duplicates, masks that do not mean what they say and a missing logged deny. The packet table is built from the edges of every rule, rules with a finding first, and shows which line each packet hits. Optionally trace one packet of your own. Object-groups, IPv6, VRF and time-range lines are listed as not evaluated, never skipped silently.

ACL (show run, template or change file)
Up to 100,000 characters, 1,000 lines, 500 rules, 50 ACLs. Nothing is stored.

Hardening Audit v1.4 — Cisco IOS / IOS-XE

Audit your Cisco IOS/IOS-XE config against hardening rules aligned with the NSA Network Infrastructure Security Guide and Cisco's Harden IOS Devices guide. Get a score, pass/fail per rule, remediation commands, and the source reference for every finding.

Paste Running-Config

Device Profiles (v2)

Security Scores

Click Refresh to calculate security scores for all profiles.

Saved profiles

Ready.

Server-side profile storage is disabled during the public beta. The demo profiles (branch, dc, lab) can be loaded and applied to the forms; saving, updating and deleting are off.

Create new profile

How it works:
  1. Fill in configuration in SNMPv3, NTP, and AAA tabs
  2. Return here and enter a profile name
  3. Click Save profile — all form values will be captured
The profile stores: SNMP credentials, NTP servers, AAA/TACACS+ settings.
Want to edit an existing profile? Select it from the list and click Load — the editor will appear.
Saving profiles on the server is disabled during the public beta.