Your one-stop destination for network security device configurations, tools, and best practices.
Learn how to transfer a Cisco IOS image from one router to another using the built-in TFTP server. Includes step-by-step CLI commands, MD5 checksum verification, and best practices for router replacement, staging, and production deployments.
Complete guide to replacing a faulty Cisco router including pre-failure preparation, configuration backup, IOS image transfer using TFTP with ip tftp source-interface, license migration, and post-replacement verification for ISR and ASR platforms.
Learn how to safely convert Cisco Catalyst switches from install mode to bundle mode, including prerequisites, commands, verification steps, troubleshooting, and rollback options.
Learn how to safely replace a faulty Cisco StackWise switch with minimal downtime, including prerequisites, stack member removal, rejoining, and best practices.
Learn how to change DNS settings in Check Point Firewall using Clish, configure servers, verify with tcpdump, and troubleshoot using WSDNSD restart.
Learn how to create and manage local user accounts on Cisco routers and switches, assign privilege levels, enable secure login, and improve device access control.
Step-by-step guide to reset Secure Internal Communication (SIC) between Check Point Management Server and Gateway, fix trust issues, and re-establish secure connectivity.
Learn what a Switched Virtual Interface (SVI) is, how it works on Layer 3 switches, and the key differences between SVI and VLAN including inter-VLAN routing, management SVI configuration, and real-world Cisco examples.
Learn how to extend Cisco console cable connections using Cat6 structured cabling. Detailed guide covering patch panel method, RJ45-to-DB9 converter method, and direct extension techniques for desk-based console access.
Learn how to configure DHCP Snooping on Cisco switches to prevent rogue DHCP servers and DHCP-based attacks. Complete guide with configuration examples, verification commands, troubleshooting, and best practices.
Learn how to upgrade Cisco Catalyst 2960 switch IOS firmware with this comprehensive guide. Includes prerequisites, backup procedures, upgrade methods via TFTP/USB, verification steps, and troubleshooting tips.
Learn how to create and manage Domain Objects in Check Point Firewall, including FQDN vs Non-FQDN objects.
A concise practical guide explaining DNS, its record types, and how to manage and secure your domain’s DNS configuration.
Short guide on analyzing email headers to trace the sender’s origin, examine mail routing paths, and verify email authenticity to detect spoofing and phishing.
Comprehensive guide to Cisco VXLAN technology, covering its overview, working principles, benefits, Cisco-specific configurations, real-world applications, and troubleshooting tips for network engineers.
Learn how to configure and implement QoS on Cisco Catalyst switches to prioritize traffic, optimize network performance, and ensure smooth operation of critical applications.
Step-by-step guide for recovering passwords and performing system recovery on Cisco switches and routers. Covers ROMmon recovery, IOS restoration, and configuration backups to ensure minimal downtime.
Comprehensive guide to Cisco switch hardening, including detailed best practices for securing IOS-based switches against common threats and vulnerabilities.
Complete guide to VRRP configuration on Cisco devices with examples, verification commands, and troubleshooting.
Complete guide to HSRP, VRRP, and GLBP with configuration examples, failover behavior, and troubleshooting.
Complete guide to Network Address Translation covering Static NAT, Dynamic NAT, PAT, and configuration examples.
Complete guide to essential Windows networking commands for troubleshooting and administration.
Complete guide to troubleshoot and debug Check Point firewalls.
Complete guide for upgrading Cisco Catalyst 9300 switches in bundled mode.
Step-by-step guide to upgrading Cisco Catalyst 9300 switches using install mode.
A complete overview of Cisco Nexus vPC, including concepts, benefits, configuration basics, and common use cases.
Step-by-step guidance on upgrading Cisco FMC safely, including prerequisites, backup tips, and post-upgrade verification.
Learn what error-disabled mode is, common causes, how to identify affected ports on Cisco switches.
Step-by-step guide to testing Ethernet LAN cables using Cisco’s built-in TDR tool, interpreting test results, detecting shorts or open circuits, and troubleshooting faulty cables.
Step-by-step guide to upgrading Cisco Catalyst 4500 switches, including preparation, bootflash image transfer, verification, rollback, and post-upgrade best practices.
Step-by-step guide to upgrading Cisco Catalyst 9200 switches using install mode with verification, rollback, and best practices.
Step-by-step guide to converting Cisco Catalyst 9200 switches from bundle mode to install mode following Cisco best practices.
Complete guide to upgrading Cisco Catalyst 3850 switches using install mode with zero downtime.
A step-by-step guide to restoring Cisco devices stuck in ROMMON mode using a TFTP server.
Safe upgrade and downgrade procedures for NX-OS on Cisco Nexus switches including ISSU and rollback.
Full vPC configuration guide with best practices for Cisco Nexus 5000, 7000, and 9000 series.
Run show commands or configuration changes across hundreds of Cisco devices using Python and Netmiko.
Learn how to resolve the 'Virtualized VT-x/EPT is not supported on this platform' error when running nested virtualization on Windows 11. Step-by-step solutions for VMware, Hyper-V, and VirtualBox..
Move the Users folder to D:\ or another drive during or after Windows installation.
Bridged, NAT, Host-Only, and custom virtual networks explained with use cases.
Optimize VMware Workstation/Player for best performance on Windows 11.
From basic single-area to multi-area OSPF configuration with verification commands.
Complete HSRP v2 setup with tracking and preemption for multiple VLANs.
Legacy HSRPv1 configuration with interface tracking across multiple VLANs.
Must-know interview and certification questions for Check Point firewalls.
Troubleshooting and fixing slow network speeds in Hyper-V VMs on Dell servers.
Full configuration from scratch to get internet working through Cisco devices.
Console cable setup, PuTTY configuration, and speed settings explained.
Complete iPerf3 guide for measuring TCP/UDP throughput on Windows.
Automated backup and restore procedures using TFTP, FTP, and SCP.
Active-Passive and Active-Active HA setup on FortiGate firewalls.
Detailed packet journey through Check Point INSPECT engine and chain modules.
Enable Telnet access with VTY lines and password/authentication configuration.
Secure remote access with SSHv2, RSA keys, and local/domain authentication.
Python + Paramiko script to collect serial numbers from hundreds of switches.
Python Paramiko script to run commands on multiple devices and save output in .txt format.
Daily automated CPU, memory, and interface error checks with email reports.
Essential CMD and PowerShell commands for hardware, disk, and performance.
Activate Windows behind corporate proxy using KMS and command-line tricks.
Step-by-step guide to modify hosts file and bypass UAC restrictions.
Send test emails directly from telnet/smtp using EHLO commands.
Configure system-wide proxy via GUI, netsh, and registry methods.
Capture packets on Check Point Gaia with filters and expert mode tips.
Send logs to remote syslog server with severity levels and timestamps.
Secure SNMPv3 with authentication and privacy (authPriv) configuration.
Router-on-a-stick and SVI (Layer 3 switch) methods explained.
Export policy to CSV/HTML using Web Visualization and CLI tools.
Fix RDP error by updating group policy on client and server.
Enable, verify, and troubleshoot CDP for neighbor discovery.
Deep dive into INSPECT engine, chain modules, and 3-tier architecture.
Protect switch ports with MAC limiting, sticky learning, and violation actions.
NAT, DHCP, and default route setup for full internet connectivity.
Cat5e, Cat6, Cat6a, Cat7, Cat8 – speeds, distances, and use cases.
Enable ICMP responses and traceroute on HPE Comware devices.
Set custom NTP servers and enable authentication on FortiGate.
Safe disk extension on Gaia without reboot using lvm_manager.
Log ping output with date/time on Windows and Linux.
Enable full bash history in expert mode and save across reboots.
Full policy and objects export/import for migration and backup.
Monitor reachability and trigger failover with IP SLA + tracking.
Configure DHCP server and pools on Cisco routers/switches.
Erase startup-config and VLAN database safely.
Full in-place and clean upgrade procedures.
Verify MD5, SHA1, SHA256 using built-in certutil.
Learn how to safely upgrade Cisco 2960 L2 switch IOS/firmware, including prerequisites, commands, TFTP transfer, MD5 verification, and setting the new boot image.
Best practices and rollback procedures for FortiOS upgrades.
Fix SmartConsole connectivity and CPD issues.
LACP, PAgP, and static EtherChannel with load-balancing options.
Auto-log session output with timestamps and filenames.
Real-world examples using Netmiko, NAPALM, and TextFSM.
Beginner-friendly guide to Python for network engineers.
Install Python, pip, and IDEs for network automation.
Configuration, upgrade and troubleshooting articles written as clear steps.
Subnet, DNS, lookup, hash and password tools that run in your browser.
Cisco, Check Point, Fortinet, HPE, Windows and network automation.
Every guide shows the exact commands and examples you can copy and use.
SwitchFirewall is a library of step-by-step network and firewall configuration guides, with free online network tools, for Cisco, Check Point, Fortinet, HPE, Windows networking and network automation.
Cisco, Check Point, Fortinet, HPE, Windows networking, basic networking and network automation with Python. Use the category buttons to filter the article list.
Yes. The calculators, lookups and generators run in your browser and are free to use.
Type a keyword such as the device, command or error in the search bar at the top of any page, or pick a category above the article list.
Yes. Send your request from the contact page and the topic will be considered for a new article or tool.
Tell us the device, version or problem and we will consider it for a new article or tool.