cisco.json

{
// Publisher:       Aaron Carroll 
// File:            cisco.json
// Description:     Cisco configuration snippets. A suggestive tool to aid in rapid configuration.  
//
// NOTE ABOUT FILE:
// -----------------------------------------------------------------------------------------------------------------------------------
// - Begin all "prefix" variables with the character "c" to ensure all snippet options appear when searching. 
//   The prefix is utilized to add snippets to your configurations. 
//   Example:
//       "Cisco Initial Configuration": {
//           "prefix": "cInitial",                // Prefix specified here should begin with the letter "c"
//           "scope": "cisco",
//           "body": [
//               "hostname",
//               "... 
//           ]
//       }
//
// - Organize snippets into the following categories:
//      - Initial Configurations
//      - Layer 2 Configurations
//      - Layer 3 Configurations
//      - Protocol Configurations
//
// Define each snippet with a name, prefix, body, and description. 
// The prefix activates the snippet, and the body expands and inserts it. 
// Use $1, $2 for tab stops, $0 for the final cursor position, and ${1:label}, ${2:another} for placeholders. 
// Placeholders with identical IDs are linked.
// Example:
// "Print to console": {
//     "prefix": "log",
//     "scope": "javascript",
//     "body": [
//         "console.log('$1');",
//         "$2"
//     ],
//     "description": "Log output to console"
// }
//
// If you wish to leave verbose comments explaining commands to refresh your memory make two objects one with no notes and the other with notes with the prefix ending int "_info"
// Example:
//   NO NOTES:
//     "VLAN Creation": {
//    "prefix": "vlan",
//    "scope": "cisco",
//    "body": [
//        "vlan ",
//        "name <NAME>"
//    ],
//    "description": "Cisco vlan creation"
//  },
//
//   NOTES:
//     "VLAN Creation with info": {
//    "prefix": "vlan_info",                      // Prefix has "_info" appended to it because info was included  
//    "scope": "cisco",
//    "body": [
//        "! Choose a VLAN ID from 1-4094. Ensure this number does not conflict with an existing VLAN ID",
//        "vlan ",
//          "! Common practice is to name the vlan based on the department of the business and data it will be used for. EX: AccountData. Or for the specific Segmentation item. EX: PLC_352",
//          "name <NAME>"
//    ],
//    "description": "Cisco vlan creation"
//  },
//
// Initial Configurations
// -----------------------
// This section is dedicated to Cisco Initial Configurations. Include any pertinent notes to assist in the configuration process.


    "Cisco Initial Configuration": {
        "prefix": "cInit",
        "scope": "cisco",
        "body": [
            "enable",
            "configure terminal",
            "login block-for 20 attempts 3 within 30",
            "ip name-server <DNS server IP address>",
            "no ip domain-lookup",
            "ip domain-name <YOUR DOMAIN NAME>",
            "ntp server <DOMAIN NAME or IP>, <OPTIONAL DOMAIN NAME or IP>",
            "hostname <DEVICE NAME>",
            "enable secret level <Add privilege level> <ENABLE PASSWORD>",
            "username <DEVICE USERNAME> algorithm-type sha256 secret <USERNAME PASSWORD>",
            "line con 0",
            "  logging synchronous",
            "  login local",
            "line vty 0 15",
            "  transport input ssh",
            "  transport output ssh",
            "  logging synchronous",
            "  login local"
        ],
        "description": "Cisco Initial Configuration"
    },
    "Cisco Initial Configuration L2 Switch": {
        "prefix": "cInitL2",
        "scope": "cisco",
        "body": [
            "enable",
            "configure terminal",
            "login block-for 20 attempts 3 within 30",
            "ip name-server <DNS server IP address>",
            "no ip domain-lookup",
            "ntp server <DOMAIN NAME or IP>, <OPTIONAL DOMAIN NAME or IP>",
            "hostname <DEVICE NAME>",
            "ip default-gateway <GATEWAY IP (MGMT)>",
            "enable secret level <Add privilege level> <ENABLE PASSWORD>",
            "username <DEVICE USERNAME> algorithm-type sha256 secret <USERNAME PASSWORD>",
            "line con 0",
            "  logging synchronous",
            "  login local",
            "line vty 0 15",
            "  transport input ssh",
            "  transport output ssh",
            "  logging synchronous",
            "  login local"
        ],
        "description": "Cisco Initial Configuration"
    },
    "Cisco Initial Configuration L3 Switch": {
        "prefix": "cInitL3",
        "scope": "cisco",
        "body": [
            "enable",
            "configure terminal",
            "login block-for 20 attempts 3 within 30",
            "ip name-server <DNS server IP address>",
            "no ip domain-lookup",
            "ntp server <DOMAIN NAME or IP>, <OPTIONAL DOMAIN NAME or IP>",
            "hostname <DEVICE NAME>",
            "ip routing",
            "! ip route 0.0.0.0 0.0.0.0 <NEXT HOP IP>",
            "enable secret level <Add privilege level> <ENABLE PASSWORD>",
            "username <DEVICE USERNAME> algorithm-type sha256 secret <USERNAME PASSWORD>",
            "line con 0",
            "  logging synchronous",
            "  login local",
            "line vty 0 15",
            "  transport input ssh",
            "  transport output ssh",
            "  logging synchronous",
            "  login local"
        ],
        "description": "Cisco Initial Configuration"
    },
    "Banner motd": {
        "prefix": "cbannerMotd",
        "scope": "cisco",
        "body": [
            "banner motd #WARNING: AUTHORIZED ACCESS ONLY",
            "You are accessing a private computer system. This system, including all related equipment, networks, and",
            "network devices (specifically including Internet access), is provided only for authorized use.",
            "Unauthorized use may subject you to criminal prosecution. Evidence of unauthorized use collected during",
            "monitoring may be used for administrative, criminal, or other adverse action. Use of this system constitutes",
            "consent to monitoring for these purposes.",
            "By continuing to use this system, you acknowledge that you understand and agree to these terms.#"
        ],
        "description": "Used to add a warning to users accessing machine"
    },
    "Banner Login": {
        "prefix": "cbannerLogin",
        "scope": "cisco",
        "body": [
            "banner Login #",
            "<--Write Descriptive information between the hashes EX:",
            "Building: 02",
            "Closet: MDF01",
            "Rack: 05",
            "Unit: 30",
            "--> #"
        ],
        "description": "Adds information regarding device"
    },
    "VLAN Creation": {
        "prefix": "vlan",
        "scope": "cisco",
        "body": [
            "vlan ",
            "name <NAME>"
        ],
        "description": "Cisco vlan creation"
    },
    "Host names": {
        "prefix": "cHost",
        "scope": "cisco",
        "body": [
            "ip host <NAME FOR HOST, EX: rtrCA01> <HOST_IP_ADDRESS>"
        ],
        "description": "local machine DNS adds host name to IP address"
    },

    "Cisco Initial Configuration with info": {
        "prefix": "cInit_info",
        "scope": "cisco",
        "body": [
            "! Initial configuration for Cisco devices",
            "! Type \"?PasswordEncryption\" to learn more about different encryption levels",
            "",
            "enable",
            "configure terminal",
            "",
            "! Configure login blocking to prevent brute force attacks",
            "login block-for 20 attempts 3 within 30",
            "",
            "! Set DNS server IP address",
            "ip name-server <DNS server IP address>",
            "",
            "! Disable IP domain lookup to prevent local DNS queries",
            "no ip domain-lookup",
            "",
            "! Configure NTP server for time synchronization",
            "ntp server <DOMAIN NAME or IP>, <OPTIONAL DOMAIN NAME or IP>",
            "",
            "! Layer 2 switch gateway (UN-COMMENT BELOW)",
            "! ip default-gateway <GATEWAY IP (MGMT)>",
            "",
            "! Layer 3 switch route (UN-COMMENT BELOW)",
            "! ip routing",
            "! ip route 0.0.0.0 0.0.0.0 <NEXT HOP IP>",
            "",
            "! Set device hostname",
            "hostname <DEVICE NAME>",
            "",
            "! Configure enable secret with privilege level",
            "enable secret level <Add privilege level> <ENABLE PASSWORD>",
            "",
            "! Create a username with SHA-256 encryption",
            "username <DEVICE USERNAME> algorithm-type sha256 secret <USERNAME PASSWORD>",
            "",
            "! Configure console line",
            "line con 0",
            "  logging synchronous",
            "  login local",
            "",
            "! Configure VTY lines 0 to 15 for SSH",
            "line vty 0 15",
            "  transport input ssh",
            "  transport output ssh",
            "  logging synchronous",
            "  login local"
        ],
        "description": "Cisco Initial Configuration"
    },

    // you can add more Intial configurtions above here
    // This is a template for the PROTOCOL, L3, L2, and INITIAL sections. Do not remove. Copy and paste if you wish to use.
    " ": {
        "prefix": "c",
        "scope": "cisco",
        "body": [
            " ",
            " ",
            " ",
            " ",
            " ",
            " "
        ],
        "description": "  "
    },
    // Layer 2 configurations
    // -----------------------
    // This section is for cisco Layer 2 configurations. Feel free to add notes that are helpful to know when adding configurations
    //

    "Layer 2 SVI creation": {
        "prefix": "cL2Svi",
        "scope": "cisco",
        "body": [
            "interface vlan <VLAN_ID>",
            "   description MGMT",
            "   ip address <L2 SVI MGMT IP> <SUBNET MASK>",
            "   shutdown",
            "   no shutdown",
            "exit"
        ],
        "description": "Cisco SVI syntax for Layer 2"
    },
    "Layer 2 Trunk Switchport creation": {
        "prefix": "cL2TrunkSwitchport",
        "scope": "cisco",
        "body": [
            "interface <portX/X/X>",
            "   description <toSomeLocation>",
            "   switchport trunk encapsulation dot1q <INTERFACE IP> <INTERFACE SUBNET MASK>",
            "   switchport mode trunk",
            "   switchport trunk allowed vlan <PRUNED VLAN IDs>",
            "   shutdown",
            "   no shutdown",
            "exit"
        ],
        "description": "Layer 2 Trunk Switchport creation"
    },
    "Layer 2 Access Switchport creation": {
        "prefix": "cL2AccessSwitchport",
        "scope": "cisco",
        "body": [
            "interface <portX/X/X>",
            "   description <toSomeLocation>",
            "   switchport host",
            "   switchport access vlan <VLAN_ID>",
            "   spanning-tree bpduguard enable",
            "   shutdown",
            "   no shutdown",
            "exit"
        ],
        "description": "Layer 2 Access Switchport creation"
    },
    "Layer 2 Access Switchport creation with Port Security": {
        "prefix": "cL2AccessSwitchportPortSecurity",
        "scope": "cisco",
        "body": [
            "interface <portX/X/X>",
            "   description <toSomeLocation>",
            "   switchport host",
            "   switchport access vlan <VLAN_ID>",
            "   switchport port-security",
            "   switchport port-security maximum 2",
            "   switchport port-security violation restrict",
            "   spanning-tree bpduguard enable",
            "   shutdown",
            "   no shutdown",
            "exit"
        ],
        "description": "Layer 2 Access Switchport creation with Port Security"
    },
    "Layer 2 Access Switchport with Voice VLAN and security": {
        "prefix": "cL2AccessSwitchportSecurityVoiceVLAN",
        "scope": "cisco",
        "body": [
            "interface <portX/X/X>",
            "   description <toSomeLocation>",
            "   switchport host",
            "   switchport access vlan <Data_VLAN_ID>",
            "   switchport voice vlan <Voice_VLAN_ID>",
            "   switchport port-security",
            "   switchport port-security maximum 2",
            "   switchport port-security violation restrict",
            "   spanning-tree bpduguard enable",
            "   shutdown",
            "   no shutdown",
            "exit"
        ],
        "description": "Layer 2 Access Switchport creation with Voice VLAN and security"
    },
    "Layer 2 Access Switchport with Voice VLAN": {
        "prefix": "cL2AccessSwitchportVoiceVLAN",
        "scope": "cisco",
        "body": [
            "interface <portX/X/X>",
            "   description <toSomeLocation>",
            "   switchport host",
            "   switchport access vlan <Data_VLAN_ID>",
            "   switchport voice vlan <Voice_VLAN_ID>",
            "   spanning-tree bpduguard enable",
            "   shutdown",
            "   no shutdown",
            "exit"
        ],
        "description": "Layer 2 Access Switchport creation with Voice VLAN"
    },
    "Layer 2 Port-Channel creation": {
        "prefix": "cl2Portchannel",
        "scope": "cisco",
        "body": [
            "interface port-channel<PORT CHANNEL NUMBER>",
            "   description <toSOME_LOCATION-PortChannel>",
            "   switchport trunk encapsulation dot1q",
            "   switchport mode trunk",
            "   switchport trunk allowed vlan <XX,YY,ZZ>",
            "   vpc <XX> (DELETE IF NOT USED",
            "   shutdown",
            "   no shutdown",
            "exit",
            "interface range <portX/X-X>",
            "   description to<Some location>-PortChannel",
            "   switchport trunk encapsulation dot1q",
            "   switchport mode trunk",
            "   switchport trunk allowed vlan <XX,YY,ZZ>",
            "   channel-group <PORT CHANNEL NUMBER> mode active",
            "   shutdown",
            "   no shutdown",
            "exit"
        ],
        "description": "Layer 2 Port-Channel creation"
    },
    "Initial lldp and example": {
        "prefix": "cLLDP",
        "scope": "cisco",
        "body": [
            "lldp run",
            "interface ethernet X/Z",
            "   no lldp transmit",
            "   no lldp receive"
        ],
        "description": "Initial lldp and example"
    },

    "Layer 2 SVI creation with info": {
        "prefix": "cL2Svi",
        "scope": "cisco",
        "body": [
            "interface vlan <VLAN_ID>",
            "   description MGMT",
            "   ip address <L2 SVI MGMT IP> <SUBNET MASK>",
            "   shutdown",
            "   no shutdown",
            "exit"
        ],
        "description": "Cisco SVI syntax for Layer 2"
    },

    // you can add more Layer 2 configurations above here
    // This is a template for the PROTOCOL, L3, L2, and INITIAL sections. Do not remove. Copy and paste if you wish to use.
    " ": {
        "prefix": "c",
        "scope": "cisco",
        "body": [
            " ",
            " ",
            " ",
            " ",
            " ",
            " "
        ],
        "description": "  "
    },
    // Layer 3 configurations
    // ----------------------
    // This section is for cisco Layer 3 configurations. Feel free to add notes that are helpful to know when adding configurations
    //
        "Layer 3 HSRP SVI (gateways) creation with info": {
        "prefix": "cL3Svi_info",
        "scope": "cisco",
        "body": [
            "!     FOR HSRP",
            "!     -------------------------------------",
            "!     SET: Preempt if ACTIVE switch only.",
            "!     SET: priority, Higher == More prefered",
            "!     DEFAULT GATEWAY VLAN_ID is a good convention for ID number.",
            "",
            "vlan <DEFAULT GATEWAY VLAN_ID>",
            "name <DEFAULT GATEWAY NAME>",
            "",
            "interface vlan <DEFAULT GATEWAY VLAN_ID>",
            "   description <CAMPUS DATA | CAMPUS VOICE | NMS | FINANCE>",
            "   ip address <DEFAULT GATEWAY IP> <DEFAULT GATEWAY SUBNET MASK>",
            "   ip helper-address <DHCP POOL IP ADDRESS>",
            "   standby <DEFAULT GATEWAY VLAN_ID> ip <VIP>",
            "   standby <DEFAULT GATEWAY VLAN_ID> priority <110>",
            "   standby <DEFAULT GATEWAY VLAN_ID> timers <Seconds for next Hello> <Hold time before switching to backup>",
            "   !standby <DEFAULT GATEWAY VLAN_ID> preempt",
            "   shutdown",
            "   no shutdown",
            "exit"
        ],
        "description": "Cisco SVI syntax for Layer 3"
    },
    "Layer 3 HSRP SVI (gateways) creation": {
        "prefix": "cL3Svi",
        "scope": "cisco",
        "body": [
            "vlan <DEFAULT GATEWAY VLAN_ID>",
            "name <DEFAULT GATEWAY NAME>",
            "interface vlan <DEFAULT GATEWAY VLAN_ID>",
            "   description <CAMPUS DATA | CAMPUS VOICE | NMS | FINANCE>",
            "   ip address <DEFAULT GATEWAY IP> <DEFAULT GATEWAY SUBNET MASK>",
            "   ip helper-address <DHCP POOL IP ADDRESS>",
            "   standby <DEFAULT GATEWAY VLAN_ID> ip <VIP>",
            "   standby <DEFAULT GATEWAY VLAN_ID> priority <110>",
            "   standby <DEFAULT GATEWAY VLAN_ID> timers <Seconds for next Hello> <Hold time before switching to backup>",
            "   shutdown",
            "   no shutdown",
            "exit"
        ],
        "description": "Cisco SVI syntax for Layer 3"
    },
    "Layer 3 VRRP SVI creation with info": {
        "prefix": "cL3SviVRRP_info",
        "scope": "cisco",
        "body": [
            "!     FOR VRRP",
            "!     -------------------------------------",
            "!     SET: priority, Higher == More preferred",
            "!     DEFAULT GATEWAY VLAN_ID is a good convention for VRRP_GROUP_NUMBER number. Its limited to 255 on VRRP.",
            "",
            "vlan <DEFAULT GATEWAY VLAN_ID>",
            "name <DEFAULT GATEWAY NAME>",
            "",
            "interface Vlan<DEFAULT GATEWAY VLAN_ID>",
            "   description <CAMPUS DATA | CAMPUS VOICE | NMS | FINANCE>",
            "   ip address <DEFAULT GATEWAY IP> <DEFAULT GATEWAY SUBNET MASK>",
            "   ip helper-address <DHCP POOL IP ADDRESS>",
            "   vrrp <VRRP_GROUP_NUMBER> ip <VIP>",
            "   vrrp <VRRP_GROUP_NUMBER> priority 110",
            "   vrrp <VRRP_GROUP_NUMBER> timers advertise <ADVERTISE_INTERVAL>",
            "   vrrp <VRRP_GROUP_NUMBER> preempt",
            "   shutdown",
            "   no shutdown",
            "exit"
        ],
        "description": "Cisco SVI syntax for Layer 3"
    },
    "Layer 3 VRRP SVI creation": {
        "prefix": "cL3SviVRRP",
        "scope": "cisco",
        "body": [
            "vlan <DEFAULT GATEWAY VLAN_ID>",
            "name <DEFAULT GATEWAY NAME>",
            "interface Vlan<DEFAULT GATEWAY VLAN_ID>",
            "   description <CAMPUS DATA | CAMPUS VOICE | NMS | FINANCE>",
            "   ip address <DEFAULT GATEWAY IP> <DEFAULT GATEWAY SUBNET MASK>",
            "   ip helper-address <DHCP POOL IP ADDRESS>",
            "   vrrp <VRRP_GROUP_NUMBER> ip <VIP>",
            "   vrrp <VRRP_GROUP_NUMBER> priority 110",
            "   vrrp <VRRP_GROUP_NUMBER> timers advertise <ADVERTISE_INTERVAL>",
            "   vrrp <VRRP_GROUP_NUMBER> preempt",
            "   shutdown",
            "   no shutdown",
            "exit"
        ],
        "description": "Cisco SVI syntax for Layer 3"
    },

    "Layer 3 interface creation": {
        "prefix": "cl3Interface",
        "scope": "cisco",
        "body": [
            "interface <port X/X/X>",
            "   description <toSomeLocation>",
            "   ip address <L3 INTERFACE IP> <L3 INTERFACE SUBNET MASK>",
            "   shutdown",
            "   no shutdown",
            "exit"
        ],
        "description": "Layer 3 interface creation"
    },
    "Layer 3 Serial Interface creation": {
        "prefix": "cl3SerialInterface",
        "scope": "cisco",
        "body": [
            "interface serial<SERIAL_PORT>",
            "   description <toSomeLocation>",
            "   ip address <L3_INTERFACE_IP> <L3_INTERFACE_SUBNET_MASK>",
            "   clock rate <CLOCK_RATE>",
            "   shutdown",
            "   no shutdown",
            "exit"
        ],
        "description": "Layer 3 serial interface creation"
    },

    "Layer 3 GigabitEthernet interface creation": {
        "prefix": "cl3GigaInterface",
        "scope": "cisco",
        "body": [
            "interface GigabitEthernet<X/X/X>",
            "   description <toSomeLocation>",
            "   ip address <L3 INTERFACE IP> <L3 INTERFACE SUBNET MASK>",
            "   shutdown",
            "   no shutdown",
            "exit"
        ],
        "description": "Layer 3 GigabitEthernet interface creation"
    },
    "Layer 3 fastEthernet interface creation": {
        "prefix": "cl3FastInterface",
        "scope": "cisco",
        "body": [
            "interface FastEthernet<X/X/X>",
            "   description <toSomeLocation>",
            "   ip address <L3 INTERFACE IP> <L3 INTERFACE SUBNET MASK>",
            "   shutdown",
            "   no shutdown",
            "exit"
        ],
        "description": "Layer 3 GigabitEthernet interface creation"
    },
    "Layer 3 Port-Channel creation": {
        "prefix": "cl3Portchannel",
        "scope": "cisco",
        "body": [
            "interface port-channel<PORT CHANNEL NUMBER>",
            "   description to <Some location>-PortChannel",
            "   no switchport",
            "   ip address <L3 INTERFACE IP> <L3 INTERFACE SUBNET>",
            "   shutdown",
            "   no shutdown",
            "exit",
            "",
            "interface range <portX/X-X>",
            "   description toPaNGFWSeaIceHQ01-PortChannel",
            "   no switchport",
            "   no ip address",
            "   channel-group <PORT CHANNEL NUMBER> mode active",
            "   shutdown",
            "   no shutdown",
            "exit",
        ],
        "description": "Layer 3 Port-Channel creation"
    },
    // you can add more Layer 3 configurations above here
    // This is a template for the PROTOCOL, L3, L2, and INITIAL sections. Do not remove. Copy and paste if you wish to use.
    " ": {
        "prefix": "c",
        "scope": "cisco",
        "body": [
            " ",
            " ",
            " ",
            " ",
            " ",
            " "
        ],
        "description": "  "
    },

    // Protocol configurations
    // -----------------------
    // This section is for cisco protocols. Feel free to add notes that are helpful to know when adding configurations

    "AAA Configuration with info": {
        "prefix": "cAAAConfig_info",
        "scope": "cisco",
        "body": [
            "! Configure AAA (Authentication, Authorization, and Accounting)",
            "! Enable new-model for AAA configurations",
            "aaa new-model",
            "",
            "! Configure session ID handling and device sensors",
            "aaa session-id common",
            "device-sensor accounting",
            "device-sensor notify all-changes"
        ],
        "description": "General AAA Configuration"
    },
    "AAA Configuration": {
        "prefix": "cAAAConfig",
        "scope": "cisco",
        "body": [
            "aaa new-model",
            "aaa session-id common",
            "device-sensor accounting",
            "device-sensor notify all-changes"
        ],
        "description": "General AAA Configuration"
    },
    "RADIUS Configuration with info": {
        "prefix": "cRadiusConfig_info",
        "scope": "cisco",
        "body": [
            "! Configure AAA group for RADIUS server",
            "aaa group server radius MY_RADIUS_GROUP",
            "  server name MY_RADIUS_SERVER",
            "",
            "! Configure authentication methods for RADIUS",
            "aaa authentication dot1x default group MY_RADIUS_GROUP",
            "",
            "! Configure authorization methods for RADIUS",
            "aaa authorization network default group MY_RADIUS_GROUP",
            "aaa authorization auth-proxy default group MY_RADIUS_GROUP",
            "",
            "! Configure accounting for RADIUS",
            "aaa accounting update periodic 15",
            "aaa accounting auth-proxy default start-stop group MY_RADIUS_GROUP",
            "aaa accounting dot1x default start-stop group MY_RADIUS_GROUP",
            "",
            "! Configure dynamic authorization server for RADIUS",
            "aaa server radius dynamic-author",
            "  client <SERVER IP ADDRESS> server-key RADIUSSecretKey",
            "",
            "! Configure RADIUS server attributes",
            "radius-server vsa send accounting",
            "radius-server vsa send authentication",
            "radius-server attribute 1 format ietf upper-case",
            "radius-server attribute 4 include-in-access-req",
            "radius-server attribute 5 include-in-access-req",
            "radius-server attribute 6 on-for-login-auth",
            "radius-server attribute 6 support-multiple",
            "radius-server attribute 7 include-in-access-req",
            "radius-server attribute 8 include-in-access-req",
            "radius-server attribute 11 include-in-access-req",
            "radius-server attribute 12 include-in-access-req",
            "radius-server attribute 24 include-in-access-req",
            "radius-server attribute 25 access-request include",
            "radius-server attribute 26 include-in-access-req",
            "radius-server attribute 31 mac format ietf upper-case",
            "radius-server attribute 31 send nas-port-detail",
            "radius-server attribute 32 include-in-access-req",
            "radius-server attribute 44 include-in-access-req",
            "radius-server attribute 61 include-in-access-req",
            "radius-server attribute 62 include-in-access-req",
            "radius-server attribute 64 include-in-access-req",
            "radius-server attribute 65 include-in-access-req",
            "radius-server attribute 66 include-in-access-req",
            "radius-server attribute 81 include-in-access-req",
            "radius-server attribute 82 include-in-access-req",
            "",
            "! Define RADIUS server",
            "radius-server host <SERVER IP ADDRESS> auth-port 1812 acct-port 1813 key RADIUSSecretKey",
            "radius-server key RADIUSSecretKey"
        ],
        "description": "RADIUS Configuration"
    },
    "RADIUS Configuration": {
        "prefix": "cRadiusConfig",
        "scope": "cisco",
        "body": [
            "aaa group server radius MY_RADIUS_GROUP",
            "  server name MY_RADIUS_SERVER",
            "aaa authentication dot1x default group MY_RADIUS_GROUP",
            "aaa authorization network default group MY_RADIUS_GROUP",
            "aaa authorization auth-proxy default group MY_RADIUS_GROUP",
            "aaa accounting update periodic 15",
            "aaa accounting auth-proxy default start-stop group MY_RADIUS_GROUP",
            "aaa accounting dot1x default start-stop group MY_RADIUS_GROUP",
            "aaa server radius dynamic-author",
            "  client <SERVER IP ADDRESS> server-key RADIUSSecretKey",
            "radius-server vsa send accounting",
            "radius-server vsa send authentication",
            "radius-server attribute 1 format ietf upper-case",
            "radius-server attribute 4 include-in-access-req",
            "radius-server attribute 5 include-in-access-req",
            "radius-server attribute 6 on-for-login-auth",
            "radius-server attribute 6 support-multiple",
            "radius-server attribute 7 include-in-access-req",
            "radius-server attribute 8 include-in-access-req",
            "radius-server attribute 11 include-in-access-req",
            "radius-server attribute 12 include-in-access-req",
            "radius-server attribute 24 include-in-access-req",
            "radius-server attribute 25 access-request include",
            "radius-server attribute 26 include-in-access-req",
            "radius-server attribute 31 mac format ietf upper-case",
            "radius-server attribute 31 send nas-port-detail",
            "radius-server attribute 32 include-in-access-req",
            "radius-server attribute 44 include-in-access-req",
            "radius-server attribute 61 include-in-access-req",
            "radius-server attribute 62 include-in-access-req",
            "radius-server attribute 64 include-in-access-req",
            "radius-server attribute 65 include-in-access-req",
            "radius-server attribute 66 include-in-access-req",
            "radius-server attribute 81 include-in-access-req",
            "radius-server attribute 82 include-in-access-req",
            "radius-server host <SERVER IP ADDRESS> auth-port 1812 acct-port 1813 key RADIUSSecretKey",
            "radius-server key RADIUSSecretKey"
        ],
        "description": "RADIUS Configuration"
    },
    "TACACS+ Configuration with info": {
        "prefix": "cTacacsConfig_info",
        "scope": "cisco",
        "body": [
            "! Configure AAA (Authentication, Authorization, and Accounting)",
            "aaa new-model",
            "",
            "! Configure AAA group for TACACS+ server",
            "aaa group server tacacs+ MY_TACACS_GROUP",
            "  server name MY_TACACS_SERVER",
            "",
            "! Configure authentication methods for TACACS+",
            "aaa authentication login LOGIN_USING_TACACS group MY_TACACS_GROUP",
            "aaa authentication enable default group MY_TACACS_GROUP",
            "",
            "! Configure authorization methods for TACACS+",
            "aaa authorization exec default group MY_TACACS_GROUP",
            "aaa authorization commands 15 default group MY_TACACS_GROUP",
            "",
            "! Configure TACACS+ server",
            "tacacs server MY_TACACS_SERVER",
            " address ipv4 <IP ADDRESS>",
            " key <TACACS KEY>",
            "",
            "! Configure VTY lines to use TACACS+ for authentication",
            "line vty 0 15",
            " login authentication LOGIN_USING_TACACS",
            " privilege level 1"
        ],
        "description": "TACACS+ Configuration"
    },
    "TACACS+ Configuration": {
        "prefix": "cTacacsConfig",
        "scope": "cisco",
        "body": [
            "aaa new-model",
            "aaa group server tacacs+ MY_TACACS_GROUP",
            "  server name MY_TACACS_SERVER",
            "aaa authentication login LOGIN_USING_TACACS group MY_TACACS_GROUP",
            "aaa authentication enable default group MY_TACACS_GROUP",
            "aaa authorization exec default group MY_TACACS_GROUP",
            "aaa authorization commands 15 default group MY_TACACS_GROUP",
            "tacacs server MY_TACACS_SERVER",
            " address ipv4 <IP ADDRESS>",
            " key <TACACS KEY>",
            "line vty 0 15",
            " login authentication LOGIN_USING_TACACS",
            " privilege level 1"
        ],
        "description": "TACACS+ Configuration"
    },
    "Configure SNMP with info": {
        "prefix": "cpSNMP_info",
        "scope": "cisco",
        "body": [
            "! Run ?snmp command for more information about configuring SNMP",
            "",
            "! Configure SNMP community string with read-only access and access control",
            "snmp-server community <COMMUNITY-STRING> RO <ACCESS-LIST-NUMBER>",
            "",
            "! Configure SNMP trap source interface",
            "snmp-server trap-source <SOURCE-INTERFACE>",
            "",
            "! Configure SNMP informs source interface",
            "snmp-server source-interface informs <INFORMS-INTERFACE>",
            "",
            "! Enable SNMP traps for link state changes",
            "snmp-server enable traps snmp linkdown linkup",
            "",
            "! Enable SNMP traps for MAC notification changes",
            "snmp-server enable traps mac-notification change move threshold",
            "",
            "! Configure SNMP host for receiving traps",
            "snmp-server host <HOST-IP-ADDRESS> version 2c <COMMUNITY-STRING> [mac-notification]",
            "",
            "! Define access control list (ACL) for SNMP",
            "access-list <ACCESS-LIST-NUMBER> permit <ALLOWED-SOURCE-IP>",
            "access-list <ACCESS-LIST-NUMBER> deny any",
            "",
            "! Apply ACL to SNMP community string",
            "snmp-server community <COMMUNITY-STRING> use-acl <ACCESS-LIST-NUMBER>",
            "",
            "! Enable SNMP on the device",
            "snmp-server enable"
        ],
        "description": "Configure SNMP settings in Cisco devices"
    },
    "Configure SNMP": {
        "prefix": "cpSNMP",
        "scope": "cisco",
        "body": [
            "snmp-server community <COMMUNITY-STRING> RO <ACCESS-LIST-NUMBER>",
            "snmp-server trap-source <SOURCE-INTERFACE>",
            "snmp-server source-interface informs <INFORMS-INTERFACE>",
            "snmp-server enable traps snmp linkdown linkup",
            "snmp-server enable traps mac-notification change move threshold",
            "snmp-server host <HOST-IP-ADDRESS> version 2c <COMMUNITY-STRING> [mac-notification]",
            "access-list <ACCESS-LIST-NUMBER> permit <ALLOWED-SOURCE-IP>",
            "access-list <ACCESS-LIST-NUMBER> deny any",
            "snmp-server community <COMMUNITY-STRING> use-acl <ACCESS-LIST-NUMBER>",
            "snmp-server enable"
        ],
        "description": "Configure SNMP settings in Cisco devices"
    },
    "IP SLA icmp-echo configurations with info": {
        "prefix": "cpIpSlaIcmpEcho_info",
        "scope": "cisco",
        "body": [
            "! icmp-echo for SLA",
            "! \"track\" tracking number and \"ip sla\" numbers are arbitrary",
            "ip sla <ip sla ID#>",
            "   icmp-echo <ip address to ping> source-ip <IP>",
            "   frequency <# in Seconds (10 is normal)>",
            "exit",
            "",
            "! start service",
            "ip sla schedule <ip sla ID#> life forever start-time now",
            "",
            "! Creating a tracking object of Track ID#",
            "track <Track ID#> ip sla <ip sla ID#> reachability",
            "",
            "!Attaches \"track object\" to route which tells the router to only use this route if the tracking object is up",
            "ip route <IP> <SUBNET> <NEXT HOP> track <Track ID#>",
        ],
        "description": "IP SLA icmp-echo configurations"
    },
    "IP SLA icmp-echo configurations": {
        "prefix": "cpIpSlaIcmpEcho",
        "scope": "cisco",
        "body": [
            "ip sla <ip sla ID#>",
            "   icmp-echo <ip address to ping> source-ip <IP>",
            "   frequency <# in Seconds (10 is normal)>",
            "exit",
            "ip sla schedule <ip sla ID#> life forever start-time now",
            "track <Track ID#> ip sla <ip sla ID#> reachability",
            "ip route <IP> <SUBNET> <NEXT HOP> track <Track ID#>",
        ],
        "description": "IP SLA icmp-echo configurations"
    },
    "Rapid Per VLAN Spanning Tree + with info": {
        "prefix": "cpRpvst+_info",
        "scope": "cisco",
        "body": [
            "spanning-tree mode rapid-pvst",
            " ",
            "! vlan syntax: Lower Priority number is the prefered route.",
            "! Default to Lowest MAC address for Root Bridge",
            "! Good convention = Lower priority for all odds on CORE 1 and all evens on CORE 2",
            "vlan <VLAN ID>",
            "name <CampusData>",
            "spanning-tree vlan <VLAN ID, VLAN ID2, VLAN ID3, ...> priority 0",
        ],
        "description": "Rapid Per VLAN Spanning Tree + creation"
    },
    "Rapid Per VLAN Spanning Tree +": {
        "prefix": "cpRpvst+",
        "scope": "cisco",
        "body": [
            "spanning-tree mode rapid-pvst",
            "vlan <VLAN ID>",
            "name <CampusData>",
            "spanning-tree vlan <VLAN ID, VLAN ID2, VLAN ID3, ...> priority 0",
        ],
        "description": "Rapid Per VLAN Spanning Tree + creation"
    },

    "HSRP standby commands": {
        "prefix": "cpStandby",
        "scope": "cisco",
        "body": [
            "standby <DEFAULT GATEWAY VLAN_ID> ip <VIP>",
            "standby <DEFAULT GATEWAY VLAN_ID> priority 110",
            "standby <DEFAULT GATEWAY VLAN_ID> timers <Seconds for next Hello> <Hold time before switching to backup>",
            "!standby <DEFAULT GATEWAY VLAN_ID> preempt"
        ],
        "description": "HSRP standby commands"
    },
    "VRRP commands": {
        "prefix": "cpVrrp",
        "scope": "cisco",
        "body": [
            "vrrp <GROUP_NUMBER> ip <VIP>",
            "vrrp <GROUP_NUMBER> priority 110",
            "vrrp <GROUP_NUMBER> timers advertise <ADVERTISE_INTERVAL>",
            "!vrrp <GROUP_NUMBER> preempt"
        ],
        "description": "VRRP commands"
    },
    "OSPF Area Configuration": {
        "prefix": "cpOspf",
        "scope": "cisco",
        "body": [
            "! Delete the options you dont need.",
            "router ospf <PROCESS ID>",
            "   router-id <IP>",
            "   redistribute connected subnets",
            "   redistribute static subnets route-map STATIC-ROUTES",
            "   redistribute static subnets",
            "   redistribute <PROTOCOL> metric <METRIC>",
            "   !default-information originate",
            "   log-adjacency-changes",
            "   network <IP> <WILD CARD MASK> area 0",
            "   network <IP> <WILD CARD MASK> area 1",
            "   area <AREA ID> authentication message-digest",
            "   !passive-interface <GigabitEthernet0/1>",
            "   !passive-interface default",
            "   !no passive-interface <VLAN INTERFACE>",
            "   !no passive-interface <PORT CHANNEL INTERFACE>",
            "   !no passive-interface <INTERFACE>",
            "exit",
        ],
        "description": "OSPF Area level Configuration"
    },
    "OSPF Interface Configuration": {
        "prefix": "cpOspfInterface",
        "scope": "cisco",
        "body": [
            "! Illustrates some options for the interface configuration",
            "interface <INTERFACE>",
            "   ip ospf <PROCESS_ID> area <AREA>",
            "   ip ospf priority <PRIORITY>",
            "   ip ospf cost <COST>",
            "   ip ospf hello-interval <HELLO_INTERVAL>",
            "   ip ospf dead-interval <DEAD_INTERVAL>",
            "   ip ospf retransmit-interval <RETRANSMIT_INTERVAL>",
            "   ip ospf network <NETWORK_TYPE>",
            "   ip ospf authentication message-digest",
            "   ip ospf message-digest-key <KEY_ID> md5 <SECRET>",
            "interface <INTERFACE>",
            "   ip ospf <PROCESS_ID> area <AREA>",
            "   ip ospf priority <PRIORITY>",
            "   ip ospf cost <COST>",
            "   ip ospf hello-interval <HELLO_INTERVAL>",
            "   ip ospf dead-interval <DEAD_INTERVAL>",
            "   ip ospf retransmit-interval <RETRANSMIT_INTERVAL>",
            "   ip ospf network <NETWORK_TYPE>",
            "   ip ospf authentication null",
            "exit",
        ],
        "description": "OSPF Interface Configuration, showing what can be done at the interface"
    },
    "EIGRP Configuration": {
        "prefix": "cpEigrp",
        "scope": "cisco",
        "body": [
            "router eigrp <AS_NUMBER>",
            "   eigrp router-id <ROUTER_ID>",
            "   network <NETWORK> <WILDCARD_MASK>",
            "   passive-interface default",
            "   no passive-interface <INTERFACE>",
            "   distribute-list <ACCESS_LIST> in",
            "   distribute-list <ACCESS_LIST> out",
            "   maximum-paths <MAX_PATHS>",
            "   variance <VARIANCE>",
            "   traffic-share balanced",
            "   delay minimum <DELAY>",
            "   bandwidth-percent <BANDWIDTH_PERCENT>",
            "   auto-summary",
            "exit",
            "interface <INTERFACE>",
            "   ip summary-address eigrp <AS_NUMBER> <SUMMARY_ADDRESS> <SUBNET_MASK>",
            "   ip bandwidth-percent eigrp <AS_NUMBER> <PERCENTAGE>",
            "   ip hello-interval eigrp <AS_NUMBER> <SECONDS>",
            "   ip hold-time eigrp <AS_NUMBER> <SECONDS>",
            "exit",
        ],
        "description": "EIGRP Configuration"
    },
    "BGP Configuration": {
        "prefix": "cpBgp",
        "scope": "cisco",
        "body": [
            "! Type command \"cpPrefixRouteMap\"",
            "router bgp <LOCAL_ASN>",
            "   bgp log-neighbor-changes",
            "   bgp router-id <ROUTER_ID>",
            "   network <NETWORK> mask <SUBNET_MASK>",
            "   neighbor <NEIGHBOR_IP> remote-as <REMOTE_ASN>",
            "   neighbor <NEIGHBOR_IP> description <DESCRIPTION>",
            "   neighbor <NEIGHBOR_IP> update-source <INTERFACE>",
            "   neighbor <NEIGHBOR_IP> ebgp-multihop 2",
            "   neighbor <NEIGHBOR_IP> password <PASSWORD>",
            "   neighbor <NEIGHBOR_IP> timers <KEEPALIVE> <HOLDTIME>",
            "   neighbor <NEIGHBOR_IP> route-map <ROUTE_MAP_NAME> in",
            "   neighbor <NEIGHBOR_IP> route-map <ROUTE_MAP_NAME> out",
            "   maximum-paths <NUMBER_OF_PATHS>",
            "exit",
        ],
        "description": "BGP Configuration"
    },
    "Prefix List and Route Map Configuration": {
        "prefix": "cpPrefixRouteMap",
        "scope": "cisco",
        "body": [
            "ip prefix-list <PREFIX_LIST_IN_NAME> seq 10 permit <NETWORK>",
            "ip prefix-list <PREFIX_LIST_OUT_NAME> seq 20 deny <NETWORK>",
            "route-map <ROUTE_MAP_IN_NAME> permit 10",
            "   match ip address prefix-list <PREFIX_LIST_IN_NAME>",
            "!route-map <ROUTE_MAP_IN_NAME> deny 20",
            "route-map <ROUTE_MAP_OUT_NAME> permit 10",
            "   match ip address prefix-list <PREFIX_LIST_OUT_NAME>",
            "!route-map <ROUTE_MAP_OUT_NAME> deny 20"
        ],
        "description": "Prefix List and Route Map Configuration"
    },
    "IPSec Tunnel Configuration with info": {
        "prefix": "cpIPSecTunnel_info",
        "scope": "cisco",
        "body": [
            "! Configure ISAKMP (IKE Phase 1) policy with strong encryption",
            "crypto isakmp policy 10",
            "   encryption aes 256                      ! AES-256 for strong encryption",
            "   authentication pre-share",
            "   group 14                                ! Diffie-Hellman Group 14 for secure key exchange",
            "   lifetime 86400                          ! Set SA lifetime to 86400 seconds (24 hours)",
            "",
            "! Configure ISAKMP key (pre-shared key)",
            "crypto isakmp key <KEY> address <PEER_IP_ADDRESS>",
            "",
            "! Configure IPsec (IKE Phase 2) transform-set with advanced encryption and integrity",
            "crypto ipsec transform-set MYSET esp-aes 256 esp-sha256-hmac",
            "   mode tunnel",
            "",
            "! Create crypto map and apply settings",
            "crypto map <MYMAP> 10 ipsec-isakmp",
            "   set peer <PEER_IP_ADDRESS>",
            "   set transform-set MYSET",
            "   match address <ACCESS_CONTROL_LIST>",
            "",
            "! Apply crypto map to the interface",
            "interface <INTERFACE>",
            "   crypto map <MYMAP>",
            "exit"
        ],
        "description": "IPSec Tunnel Configuration with advanced encryption"
    },
    "IPSec Tunnel Configuration": {
        "prefix": "cpIPSecTunnel",
        "scope": "cisco",
        "body": [
            "crypto isakmp policy 10",
            "   encryption aes 256",
            "   authentication pre-share",
            "   group 14",
            "   lifetime 86400",
            "crypto isakmp key <KEY> address <PEER_IP_ADDRESS>",
            "crypto ipsec transform-set MYSET esp-aes 256 esp-sha256-hmac",
            "   mode tunnel",
            "crypto map <MYMAP> 10 ipsec-isakmp",
            "   set peer <PEER_IP_ADDRESS>",
            "   set transform-set MYSET",
            "   match address <ACCESS_CONTROL_LIST>",
            "interface <INTERFACE>",
            "   crypto map <MYMAP>",
            "exit"
        ],
        "description": "IPSec Tunnel Configuration with advanced encryption"
    },

    
    "NAT Overload Configuration": {
        "prefix": "cpNatOverload",
        "scope": "cisco",
        "body": [
            "! Configure Port Address Translation (PAT) needs Dynamic NAT configured",
            "",
            "ip nat pool NAT_POOL 203.0.113.1 203.0.113.10 netmask 255.255.255.0",
            "access-list 1 permit 192.168.1.0 0.0.0.255",
            "",
            "interface GigabitEthernet0/0",
            "  ip nat inside",
            "",
            "interface GigabitEthernet0/1",
            "  ip nat outside",
            "",
            "ip nat inside source list 1 pool NAT_POOL overload"
        ],
        "description": "NAT Overload Configuration"
    },
    "Dynamic NAT Configuration": {
        "prefix": "cpDynNat",
        "scope": "cisco",
        "body": [
            "interface <INTERFACE_OUTSIDE>",
            "   ip address <OUTSIDE_IP> <SUBNET_MASK>",
            "   ip nat outside",
            "exit",
            "interface <INTERFACE_INSIDE>",
            "   ip address <INSIDE_IP> <SUBNET_MASK>",
            "   ip nat inside",
            "exit",
            "ip nat pool <NAT_POOL_NAME> <START_IP> <END_IP> netmask <NETMASK>",
            "ip access-list standard <ACL_NAME>",
            "   permit <INSIDE_NETWORK> <WILDCARD_MASK>",
            "exit",
            "ip nat inside source list <ACL_NAME> pool <NAT_POOL_NAME>"
        ],
        "description": "Dynamic NAT Configuration"
    },
    "ACCESS_LIST": {
        "prefix": "cACL",
        "scope": "cisco",
        "body": [
            "! ?ACL command shows examples on writing ACLs ",
            "!Extended ACL command",
            "access-list <acl-number> {permit|deny} <protocol> <source> <source-wildcard> <destination> <destination-wildcard> [eq <port>]",
            "! Standard ACL Grouping",
            "ip access-list standard STATIC_ROUTES",
            "   permit <ADDRESS> <WILDCARD MASK>",
            "   permit <ADDRESS> <WILDCARD MASK",
        ],
        "description": "Access list syntax"
    },
    // you can add more here
    // This is a template for the PROTOCOL, L3, L2, and INITIAL sections. Do not remove. Copy and paste if you wish to use.
    " ": {
        "prefix": "c",
        "scope": "cisco",
        "body": [
            " ",
            " ",
            " ",
            " ",
            " ",
            " "
        ],
        "description": "  "
    },
    //
    // HELP SECTION
    // ------------
    // all "prefix:" names must begin with the question mark character "?" inside this section.
    // This ensures you can look up how to configure a specific element or what options that configuration offers.
    // Put all commands in here for examples and show all possible options 
    "How to: IP SLA": {
        "prefix": "?ipSla",
        "scope": "cisco",
        "body": [
            " ",
            " ",
            " ",
            " ",
            " ",
            " "
        ],
        "description": "  "
    },
    "How to: DHCP": {
        "prefix": "?dhcp",
        "scope": "cisco",
        "body": [
            " ",
            " ",
            " ",
            " ",
            " ",
            " "
        ],
        "description": "  "
    },
    "Configure RADIUS Server Attributes": {
        "prefix": "?radiusAttrs",
        "scope": "cisco",
        "body": [
            "! Configure RADIUS server attributes",
            "radius-server vsa send accounting                     ! Enable sending VSAs in accounting",
            "radius-server vsa send authentication                 ! Enable sending VSAs in authentication",
            "radius-server attribute 1 format ietf upper-case      ! Configure User-Name format and uppercase",
            "radius-server attribute 4 include-in-access-req       ! Include NAS-IP-Address attribute in Access-Request",
            "radius-server attribute 5 include-in-access-req       ! Include NAS-Port attribute in Access-Request",
            "radius-server attribute 6 on-for-login-auth           ! Include Service-Type attribute for login authentication",
            "radius-server attribute 6 support-multiple            ! Support multiple instances of Service-Type attribute",
            "radius-server attribute 7 include-in-access-req       ! Include Framed-Protocol attribute in Access-Request",
            "radius-server attribute 8 include-in-access-req       ! Include Framed-IP-Address attribute in Access-Request",
            "radius-server attribute 11 include-in-access-req      ! Include Filter-Id attribute in Access-Request",
            "radius-server attribute 12 include-in-access-req      ! Include Framed-IP-Address attribute in Access-Request",
            "radius-server attribute 24 include-in-access-req      ! Include State attribute in Access-Request",
            "radius-server attribute 25 access-request include     ! Include Class attribute in Access-Request",
            "radius-server attribute 26 include-in-access-req      ! Include Vendor-Specific attribute in Access-Request",
            "radius-server attribute 31 mac format ietf upper-case ! Configure MAC format and uppercase in Calling-Station-ID",
            "radius-server attribute 31 send nas-port-detail       ! Send additional NAS port detail in Calling-Station-ID",
            "radius-server attribute 32 include-in-access-req      ! Include Framed-IPv6-Prefix attribute in Access-Request",
            "radius-server attribute 44 include-in-access-req      ! Include NAS-IPv6-Address attribute in Access-Request",
            "radius-server attribute 61 include-in-access-req      ! Include NAS-Port-Type attribute in Access-Request",
            "radius-server attribute 62 include-in-access-req      ! Include Port-Limit attribute in Access-Request",
            "radius-server attribute 64 include-in-access-req      ! Include Tunnel-Type attribute in Access-Request",
            "radius-server attribute 65 include-in-access-req      ! Include Tunnel-Medium-Type attribute in Access-Request",
            "radius-server attribute 66 include-in-access-req      ! Include Tunnel-Private-Group-ID attribute in Access-Request",
            "radius-server attribute 81 include-in-access-req      ! Include Framed-Management-Protocol attribute in Access-Request",
            "radius-server attribute 82 include-in-access-req      ! Include Framed-Management-Policy-Id attribute in Access-Request"
        ],
        "description": "Configure enhanced attributes for RADIUS server"
    },
    "How to: BGP": {
        "prefix": "?bgp",
        "scope": "cisco",
        "body": [
            "! Configure BGP route filtering (prefix-list)",
            "   ip prefix-list <prefix-list-name> permit <prefix>",
            "",
            "! Apply route filtering to BGP neighbor",
            "neighbor <neighbor-IP> prefix-list <prefix-list-name> in",
            "",
            "! Configure BGP route map",
            "route-map <route-map-name> permit 10",
            "  match ip address prefix-list <prefix-list-name>",
            "  set as-path prepend <AS-path>",
            "",
            "! Configure BGP (Border Gateway Protocol)",
            "! This example demonstrates basic BGP configuration with prefix lists and route maps.",
            "",
            "router bgp <AS-number>                                     // Can add multiple AS AS AS AS to extend the path length.",
            "   bgp router-id <router-ID>                               // Configure the BGP router ID",
            "   neighbor <neighbor-IP> remote-as <neighbor-AS>          // Configure BGP neighbor",
            "   neighbor <neighbor-IP> description <description>        // Add description to the neighbor",
            "   neighbor <neighbor-IP> update-source <interface>        // Set source interface for BGP updates",
            "   neighbor <neighbor-IP> ebgp-multihop 2                  // Enable eBGP multihop (replace '2' with desired hops)",
            "   neighbor <neighbor-IP> password <password>              // Set BGP neighbor password",
            "   neighbor <neighbor-IP> timers <keepalive> <holdtime>    // Set keepalive and holdtime timers",
            "   neighbor <neighbor-IP> soft-reconfiguration inbound      // Enable soft reconfiguration inbound (SRI) on the neighbor",
            "",
            "! Advertise network to BGP neighbors",
            "   network <local-network> mask <network-mask>",
            "",
            "! Set BGP synchronization (optional)",
            "   no synchronization",
            "",
            "! Apply route map to BGP outbound updates",
            "  neighbor <neighbor-IP> route-map <route-map-name> out",
            "",
            "! Configure BGP maximum paths (optional)",
            "   maximum-paths <num-paths>",
            "",
            "! Configure BGP route reflector (optional)",
            "   neighbor <RR-IP> route-reflector-client",
        ],
        "description": "How to configure BGP (Border Gateway Protocol) with prefix lists and route maps in Cisco devices"
    },
    "How to: IP Security tunnel": {
        "prefix": "?IpSecTunnel",
        "scope": "cisco",
        "body": [
            "! Configure an IPsec tunnel",
            "! This example demonstrates a basic site-to-site IPsec VPN setup using pre-shared keys.",
            "",
            "! Step 1: Configure the ISAKMP (IKE Phase 1) policy",
            "crypto isakmp policy 10",
            "  encr aes 256                           ! Use AES-256 for encryption (advanced and secure)",
            "  authentication pre-share               ! Use pre-shared keys for authentication",
            "  group 14                               ! Use Diffie-Hellman Group 14 for key exchange (more secure)",
            "  lifetime 86400                         ! Set the Security Association (SA) lifetime to 86400 seconds (24 hours)",
            "!",
            "! Explanation:",
            "! The ISAKMP policy defines the parameters for the IKE Phase 1 negotiation.",
            "! AES-256 provides strong encryption.",
            "! Pre-shared keys are a simple and effective authentication method.",
            "! Diffie-Hellman Group 14 offers strong cryptographic security.",
            "! The lifetime determines how long the SA will be active before needing re-negotiation.",
            "",
            "! Step 2: Configure the ISAKMP key (pre-shared key)",
            "crypto isakmp key <pre-shared-key> address <peer-ip>",
            "!",
            "! Explanation:",
            "! This command sets the pre-shared key for the specified peer IP address.",
            "! The pre-shared key must match on both ends of the tunnel.",
            "",
            "! Step 3: Configure the IPsec (IKE Phase 2) transform-set",
            "crypto ipsec transform-set TS esp-aes 256 esp-sha256-hmac",
            "!",
            "! Explanation:",
            "! The transform set defines how the IPsec tunnel will encrypt and authenticate the data.",
            "! AES-256 provides strong encryption.",
            "! SHA-256 HMAC provides strong integrity and authentication.",
            "",
            "! Step 4: Create a crypto map entry",
            "crypto map VPN_MAP 10 ipsec-isakmp",
            "  set peer <peer-ip>",
            "  set transform-set TS",
            "  match address <ACL-number>",
            "!",
            "! Explanation:",
            "! The crypto map ties the IPsec settings to the specific peer IP.",
            "! The `set peer` command specifies the IP address of the remote VPN device.",
            "! The `set transform-set` command specifies the transform set to be used.",
            "! The `match address` command specifies which traffic should be encrypted, defined by the ACL.",
            "",
            "! Step 5: Apply the crypto map to the interface",
            "interface GigabitEthernet0/1                        ! Replace with the appropriate interface",
            "  crypto map VPN_MAP",
            "!",
            "! Explanation:",
            "! Applying the crypto map to an interface enables the IPsec configuration on that interface.",
            "! Replace `GigabitEthernet0/1` with the actual interface name used on your device.",
            "",
            "! Step 6: Create an access control list (ACL) for interesting traffic",
            "access-list <ACL-number> permit ip <local-network> <remote-network>",
            "!",
            "! Explanation:",
            "! The ACL defines which traffic is considered \"interesting\" and should be encrypted.",
            "! Replace `<ACL-number>` with a unique ACL number.",
            "! Replace `<local-network>` and `<remote-network>` with the appropriate IP address ranges for your local and remote networks.",
            "",
            "! Step 7: Ensure the ACL is properly applied to the interface",
            "interface GigabitEthernet0/0                        ! Replace with the appropriate interface",
            "  ip access-group <ACL-number> in",
            "!",
            "! Explanation:",
            "! The ACL must be applied to the interface to filter traffic appropriately.",
            "! Replace `GigabitEthernet0/0` with the actual interface name used on your device."
        ],
        "description": "How to configure an IPsec tunnel in Cisco devices"
    },
    
    "How to: Port Address Translation": {
        "prefix": "?pat",
        "scope": "cisco",
        "body": [
            "! Configure Port Address Translation (PAT)",
            "! This example assumes Dynamic NAT is already configured.",
            "! PAT allows multiple internal hosts to share a single public IP address by using different port numbers.",
            "",
            "! Create an access control list (ACL) for matching internal addresses",
            "access-list 1 permit 192.168.1.0 0.0.0.255                             // Define the internal network range",
            "",
            "! Configure NAT inside and outside interfaces",
            "interface GigabitEthernet0/0",
            "  ip nat inside",
            "",
            "interface GigabitEthernet0/1",
            "  ip nat outside",
            "",
            "! Apply the NAT ACL and NAT overload to the outside interface",
            "ip nat inside source list 1 interface GigabitEthernet0/1 overload"
        ],
        "description": "How to configure Port Address Translation (PAT) in Cisco devices"
    },
    "How to: Dynamic NAT": {
        "prefix": "?dynNat",
        "scope": "cisco",
        "body": [
            "! Configure the NAT pool",
            "ip nat pool NAT_POOL 203.0.113.1 203.0.113.10 netmask 255.255.255.0     // Define the NAT pool range",
            "",
            "! Create an access control list (ACL) for matching internal addresses",
            "access-list 1 permit 192.168.1.0 0.0.0.255                             // Define the internal network range",
            "",
            "! Configure NAT inside and outside interfaces",
            "interface GigabitEthernet0/0",
            "  ip nat inside",
            "",
            "interface GigabitEthernet0/1",
            "  ip nat outside",
            "",
            "! Apply the NAT ACL and NAT pool to the outside interface",
            "ip nat inside source list 1 pool NAT_POOL overload"
        ],
        "description": "How to configure Dynamic NAT in Cisco devices"
    },
    "How to: OSPF": {
        "prefix": "?ospf",
        "scope": "cisco",
        "body": [
            "! Enable OSPF and specify the process ID",
            "router ospf 1",
            "  router-id 1.1.1.1                          // Specify a router ID (can be an IP address)",
            "  log-adjacency-changes detail               // Enable detailed logging of adjacency changes",
            "",
            "! Configure OSPF on an interface",
            "interface GigabitEthernet0/1",
            "  ip address 192.168.1.1 255.255.255.0",
            "  ip ospf 1 area 0                           // Associate the interface with OSPF area 0",
            "!",
            "! Optionally, configure authentication for OSPF",
            "interface GigabitEthernet0/1",
            "  ip ospf authentication message-digest     // Enable MD5 authentication",
            "  ip ospf message-digest-key 1 md5 <key>    // Configure the MD5 key",
            "",
            "! Advertise networks to OSPF",
            "router ospf 1",
            "  network 192.168.1.0 0.0.0.255 area 0      // Advertise the network in area 0",
            "  network 10.0.0.0 0.0.0.255 area 0         // Advertise another network in area 0",
            "!",
            "! Configure OSPF summarization (optional)",
            "router ospf 1",
            "  area 0 range 192.168.0.0 255.255.0.0      // Summarize networks within area 0",
        ],
        "description": "How to configure OSPF in Cisco devices"
    },
    "How to: ACL": {
        "prefix": "?ACL",
        "scope": "cisco",
        "body": [
            "! Syntax:",
            "!--------",
            "     access-list <acl-number> {permit|deny} <protocol> <source> <source-wildcard> <destination> <destination-wildcard> [eq <port>]",
            "",
            "! Example of permit specific hosts and IPs & explicit deny all. The deny ip any any is implicit by default and not needed",
            "!-------------------------------------------------------------------------------------------------------------------------",
            "     access-list 101 permit tcp host 192.168.1.20 host 10.0.0.5 eq 80",
            "     access-list 100 permit ip 192.168.1.10 0.0.0.0 any",
            "     access-list 100 deny ip any any",
            "!",
            "! Example of single deny IP and allow all others",
            "!------------------------------------------------",
            "     access-list 100 deny ip <source> <source-wildcard> any",
            "     access-list 100 permit ip any any",
            "",
            "! Note on Implicit Deny All:",
            "!--------------------------",
            "! While an implicit deny ip any any is present at the end of each ACL by default, including an explicit",
            "! deny ip any any statement improves clarity and avoids potential confusion.",
            "",
            "! Standard and Extended ACLs:",
            "!---------------------------",
            "! Standard ACLs only filter traffic based on source IP addresses, and extended ACLs can include protocol and port fields.",
            "! Use numbers 1 to 99 for standard ACLs and 100 to 199 or 2000 to 2699 for extended ACLs.",
        ],
        "description": "How to write ACLs"
    },
    "How to: Configure SNMP": {
        "prefix": "?snmp",
        "scope": "cisco",
        "body": [
            "! Configure SNMP (Simple Network Management Protocol) settings",
            "! Modify the placeholders accordingly.",
            "",
            "! Configure SNMP community string with read-only access",
            "snmp-server community <READ ONLY COMMUNITY-STRING> RO <ACCESS-LIST-NUMBER>",
            "",
            "! Configure SNMP read-write community string",
            "snmp-server community <READ WRITE COMMUNITY-STRING> RW <ACCESS-LIST-NUMBER>",
            "",
            "! Specify the source interface for SNMP traps",
            "snmp-server trap-source <SOURCE-INTERFACE>",
            "",
            "! Specify the source interface for SNMP INFORM notifications",
            "snmp-server source-interface informs <INFORMS-INTERFACE>",
            "",
            "! Enable SNMP traps for link down and link up events",
            "snmp-server enable traps snmp linkdown linkup",
            "",
            "! Enable SNMP traps for MAC address change, move, and threshold events",
            "snmp-server enable traps mac-notification change move threshold",
            "",
            "! Configure SNMP host for receiving traps",
            "snmp-server host <HOST-IP-ADDRESS> version 2c <COMMUNITY-STRING> [mac-notification]",
            "",
            "! Apply SNMP access control list (ACL) for filtering SNMP access",
            "access-list <ACCESS-LIST-NUMBER> permit <ALLOWED-SOURCE-IP>",
            "access-list <ACCESS-LIST-NUMBER> deny any",
            "snmp-server community <COMMUNITY-STRING> use-acl <ACCESS-LIST-NUMBER>",
            "",
            "! Enable SNMP on the device",
            "snmp-server enable"
        ],
        "description": "How to configure SNMP (Simple Network Management Protocol) settings in Cisco devices"
    },
    "How to: enable and use Encryption Levels": {
        "prefix": "?Password_Encryption",
        "scope": "cisco",
        "body": [
            "Encryption Levels/Syntax",
            "-------------------------",
            "Type 0: Unencrypted (plaintext). Use the 'password' command.",
            "Type 5: MD5 hashing. Provides better security. Use the 'secret' keyword.",
            "Type 7: Vigenère cipher. Reversible and weak. Enabled by 'service password-encryption'.",
            "Type 8 and Type 9: More secure hashing algorithms (e.g., scrypt). Available in newer IOS versions.",
            "",
            "! Type 0 (Unencrypted):",
            "enable password <PASSWORD>",
            "username <USERNAME> password <PASSWORD>",
            "",
            "! Type 5 (MD5 Hash):",
            "enable secret <PASSWORD>",
            "username <USERNAME> secret <PASSWORD>",
            "",
            "! Type 7 (Weak, not recommended):",
            "service password-encryption",
            "enable password <PASSWORD>",
            "username <USERNAME> password <PASSWORD>",
            "",
            "! Type 8-9 (More secure, for username only):",
            "username <USERNAME> algorithm-type {scrypt | sha256} secret <PASSWORD>"
        ],
        "description": "Explanation of different password encryption levels and their usage on Cisco devices"
    },
    // This is a template for the HELP section. Do not remove. Copy and paste if you wish to use.
    "How to: ": {
        "prefix": "?",
        "scope": "cisco",
        "body": [
            " ",
            " ",
            " ",
            " ",
            " ",
            " "
        ],
        "description": "  "
    },
}