Enter PIN to continue
Offline Network Engineer Workbench · CCNA → CCIE · Multi-vendor Config Studio
Subnet math, subdivision and real VLSM allocation.
Full /0–/32 support with RFC 3021-aware /31 handling.
Splits the calculated base network into equal child prefixes.
Enter multiple host requirements. Largest subnets are allocated first from the base network.
LAN sizing reserves network + broadcast and therefore uses /30 as the smallest automatically allocated subnet. Use the subnet calculator directly for /31 point-to-point links.
Range-aware aggregate calculation; input prefixes are not discarded.
Each line may be a CIDR route or a host address. Hosts are treated as /32.
A single summary route is always a covering aggregate. If the inputs are non-contiguous, the result necessarily includes additional address space.
RFC 1112 Ethernet mapping using the lower 23 multicast address bits.
Every Ethernet multicast MAC in this mapping can represent 32 IPv4 multicast groups.
MAC-derived interface ID with U/L-bit inversion and /64 prefix validation.
Accepts common MAC separators and compressed IPv6 notation. Prefix must be /64.
Normalizes an IPv6 prefix, calculates child-prefix capacity and lists the first child networks using native BigInt math.
The table is intentionally capped at 32 child prefixes for mobile performance. The calculated count is not capped.
Fast protocol math and decision helpers for campus, routing, security and QoS work.
Classic cost = reference bandwidth ÷ interface bandwidth, minimum 1.
Default K-values only: K1=1, K3=1, K2=K4=K5=0. Wide metrics are not modeled.
Common Cisco-style decision sequence. Multipath, AIGP, confederations and policy-specific exceptions are intentionally not modeled.
Compares effective bridge priority first, then MAC address.
Generates the well-known virtual MAC from the redundancy protocol and group/VRID.
Builds one IOS XE / NX-OS style IPv4 ACE from CIDR inputs. Apply it to an ACL and interface only after reviewing direction and traffic impact.
Engineering math only; platform token-bucket implementation and minimum burst rules may differ.
Converts the classic 16-bit ASN:value form to the underlying 32-bit decimal value.
Generates symmetric Peer A / Peer B foundations for a clean pair. Keepalive/backup reachability must exist independently from the peer interconnect.
For vPC, the builder uses the management VRF for peer-keepalive. For VLT, it uses the management VRF for the backup heartbeat. Confirm peer-link MTU, VLAN allowance, orphan-port handling, routing adjacencies and downstream multi-chassis LAG design before production use.
Separates L3 tunnel overhead from L2 frame expansion.
Base value is the underlay IP MTU — not the Ethernet wire-frame size.
Tracked separately because common interface IP-MTU semantics exclude these bytes.
Each MPLS shim label adds 4 bytes between the Layer-2 header and the carried network-layer packet.
MSS assumes no TCP options: 20-byte TCP header.
Do not blindly add GRE + VXLAN + IPsec unless that stack really exists on the packet path. The calculator intentionally allows stacking for nested overlays.
Interface-based eBGP template with explicit peer-group membership.
Generates FRR syntax. SONiC VLAN/VNI configuration is release/platform dependent and is shown as intent only.
Uses an external peer-group and interface-based unnumbered neighbors.
Validate generated configuration against the FRR/SONiC release actually deployed before production use.
Allocates loopbacks, VTEPs and one /31 per leaf↔spine link. Useful before feeding device-specific values into Config Studio.
Build vendor-aware configurations across Cisco, Arista, Juniper, Aruba, Dell, NVIDIA and Nokia — with platform capability enforcement, read-only pre-checks, verification and portable state export.
| Profile | Coverage | EVPN/VXLAN | Important scope |
|---|---|---|---|
| IOS XE · Catalyst | Full campus/DC | Yes | Model/licensing/fabric mode still matter |
| NX-OS · Nexus | Full DC | Yes | vPC/IRB/L3VNI require topology review |
| IOS XR · 8000/NCS | L3 / SP | BGP AF only | No generic switching/VNI service template |
| Arista EOS | Full campus/DC | Yes | Multi-agent routing model may be required |
| Junos · QFX | Full DC | Yes | QFX-style em0 management assumption |
| Aruba AOS-CX | Full campus/DC | Yes | EVPN support is platform-dependent |
| Dell OS10 | Full campus/DC | Yes | Validate exact PowerSwitch/OS10 release |
| Cumulus Linux/NVUE | Full DC | Yes | NVUE commands; not Cisco-like CLI |
| Nokia SR Linux | L3 + EVPN service | Service skeleton | Model-driven subinterfaces/MAC-VRFs |
Versioned/reference profiles across Cisco, Arista, Juniper, HPE Aruba, Dell, NVIDIA and Nokia. Capability limits are enforced per NOS.
Only selected features are emitted. Keep the generated configuration minimal.
One object per line. Use the examples as the input grammar.
CIDR input is normalized to each platform's CLI style.
EVPN generation emits conservative L2-VNI building blocks for each platform. Routed overlays, anycast gateways, multihoming, VRF/L3VNI and fabric-specific policy still require topology-specific inputs.
Review → copy → paste from console/OOB session → run verification commands → save only after validation.
Wildcard mask math, ACL line parsing, binary AND matching, and OSPF boundary checking.
Invert subnet bits to wildcard (Cisco ACL / OSPF) or wildcard to mask.
Subnet mask 1s specify fixed bits. Invert every octet (255 - mask_octet) to get the Wildcard mask where 0 = must match and 1 = don't care.
Parse Cisco ACL line (e.g. permit 10.1.100.0 0.0.0.127) to extract subnet range, host capacity, and 32-switch bit layout.
Verify if a candidate interface IP will trigger an OSPF process based on network & wildcard mask.
OSPF enables interface routing if (Interface_IP & ~Wildcard) == (Statement_IP & ~Wildcard). Wildcard 0 bits must match statement IP exactly; 1 bits are ignored.
Address translation visualizer, Port Address Translation pool capacity, utilization badge, and static mapping conflict detection.
Visual mapping of Inside Local, Inside Global, Outside Local, and Outside Global headers.
Traffic Flow: Packet leaving host: (Src: Inside Local, Dst: Outside Local) → NAT Gateway translates → (Src: Inside Global, Dst: Outside Global).
Calculate max simultaneous translations for public IP pool (Ephemeral ports 1024–65535).
Port Address Translation uses 16-bit source ports (1024-65535). At >80% utilization, new connections start dropping or require additional public pool IPs.
Paste static NAT configuration lines to scan for duplicate inside local or outside global IPs.
Cisco Type 7 XOR crypto, Cisco Type 5 MD5 hash generator, multi-type password encoder, and Juniper $9$ decoder.
Reversible XOR obfuscation used in password 7 statements (100% offline, zero server calls).
Type 7 uses a fixed 25-byte lookup key (dsfd;kfoA...) XORed with character bytes. Anyone with access to the config can instantly reverse it. Always use enable secret (Type 5/8/9) instead of enable password.
Generate Cisco Type 5 (MD5-crypt), Type 7, Type 8 (PBKDF2-SHA256 label), Type 9 (Scrypt label), and Juniper $9$.
Type 7: Reversible XOR (Weakest).
Type 5: MD5-crypt with salt (Legacy standard).
Type 8: PBKDF2 with SHA-256 (Strong, recommended for IOS XE).
Type 9: Scrypt memory-hard hash (Strongest, highest GPU cost).
JunOS secret "$9$..." reversible cipher encoder and decoder.
Like Cisco Type 7, JunOS $9$ is a reversible variable-length cipher (using salt & alphabet permutations), intended only to hide plaintext from over-the-shoulder view. Use JunOS secret "$6$..." (SHA-512) for real security.
Octet radix converter, RF dBm ↔ mW, Bandwidth Delay Product (BDP), MAC OUI inspector, and TCP/UDP port catalog.
Live auto-convert 4 IPv4 octets simultaneously between Decimal, 8-bit Binary, and Hex.
Logarithmic conversion for WiFi / Cellular / Optical transmit power.
0 dBm = 1 mW.+3 dB = Double power (e.g. 20 dBm = 100 mW → 23 dBm ≈ 200 mW).+10 dB = 10x power (e.g. 10 dBm = 10 mW → 20 dBm = 100 mW).
Calculate volume of in-flight TCP bytes needed to saturate high BDP long-fat networks.
Formula: BDP = (Bandwidth_bps * Latency_sec) / 8. If TCP receive window is smaller than BDP, the sender must stop and wait for ACKs, capping throughput regardless of available link bandwidth.
Check Multicast bit, Local Admin bit, and lookup Vendor from bundled 100+ OUI database.
Bit 0 (I/G): 0 = Unicast, 1 = Multicast/Broadcast.
Bit 1 (U/L): 0 = Universal (IEEE OUI), 1 = Locally Administered (LAA / Private / Randomized).
Search top-200 well-known service ports by port number, protocol, or keyword.