Cisco EEM: Auto Interface Descriptions
These are my own versions of the ever-evolving Port Description EEM applet for Cisco IOS/IOS-XE; based on Joe Clarke's Cisco Communities thread, Automatically Set Port Descriptions.
2018/12
Cisco Smart Install - IOS-XE Stack Auto-Allocation
This was created for and used with FreeZTP, but can likely be used with any Jinja2 templating system.
When this snippet (located at the bottom of this post) is added to a Jinja2 template it will automatically build out an EEM applet that will set switch priorities and renumber all switches in the stack according to how they were allocated in the FreeZTP keystore.
Cisco Smart Install - IOS-XE Upgrade Caveat
This was created for and used with FreeZTP, but can likely be used with any Jinja2 templating system.
IOS-XE 3.7.4 cannot upgrade to 16.3.6 via smart-install because new force isn't appended. This workaround utilizes EEM applets in a Jinja2 switch template to download install the updated image.
AnyConnect VPN with(out) DUO 2FA
A user's status can be set as Bypass in the Duo Admin Panel (to bypass 2FA), but as an exercise we can also use Duo's Auth Proxy along side a separate authentication server in an environment with Duo 2FA users and non-2FA users.
Pi-hole: Local DNS, Public DOH
Using Pi-hole and Cloudflare's new 1.1.1.1 and 1.0.0.1 public DNS servers together is a good idea... bolting DoH (DNS over HTTPS) onto that via the Cloudflared daemon is an even better idea (until Pi-hole natively supports DoH anyways).
SecureCRT: Session Logging
Session logging can prove extremely useful when recollecting events during troubleshooting scenarios or even configuration-binges. SecureCRT's logging settings allow the use of variables to define the filename/path. I've configured my default session to log every session whether I'm troubleshooting or just poking around.