Last updated: 2021-3-22 (fix Filecloud forum links)
FileCloud is an enterprise grade file sharing, sync, and backup solution developed by CodeLathe that can be self-hosted (on-prem). They provide sync clients for Windows, Mac, and Linux. While the Linux client can serve its purpose, getting it working and accessible can be a bit cumbersome.
Secure NX-API calls using HTTPS with a self-signed certificate.
About a year ago /u/packetsar shared FreeZTP on reddit, just in time for a project that required upgrade/configuration of 400+ IOS-XE switches (3650/3850, several stacks). Over the following months, he was extremely receptive and accommodating with feature updates and tweaks; so kudos, pal.
These are my own versions of the ever-evolving Port Description EEM applet for Cisco IOS/IOS-XE; based on Joe Clarke's Cisco Communities thread, Automatically Set Port Descriptions.
This was created for and used with FreeZTP, but can likely be used with any Jinja2 templating system.
When this snippet (located at the bottom of this post) is added to a Jinja2 template it will automatically build out an EEM applet that will set switch priorities and renumber all switches in the stack according to how they were allocated in the FreeZTP keystore.
This was created for and used with FreeZTP, but can likely be used with any Jinja2 templating system.
IOS-XE 3.7.4 cannot upgrade to 16.3.6 via smart-install because new force isn't appended. This workaround utilizes EEM applets in a Jinja2 switch template to download install the updated image.
A user's status can be set as Bypass in the Duo Admin Panel (to bypass 2FA), but as an exercise we can also use Duo's Auth Proxy along side a separate authentication server in an environment with Duo 2FA users and non-2FA users.
Using Pi-hole and Cloudflare's new 1.1.1.1 and 1.0.0.1 public DNS servers together is a good idea... bolting DoH (DNS over HTTPS) onto that via the Cloudflared daemon is an even better idea (until Pi-hole natively supports DoH anyways).
Session logging can prove extremely useful when recollecting events during troubleshooting scenarios or even configuration-binges. SecureCRT's logging settings allow the use of variables to define the filename/path. I've configured my default session to log every session whether I'm troubleshooting or just poking around.
Considering the 9000v is really only for labbing this isn't a huge deal, but I was able but to default an interface from enable mode; config mode is not required. I don't know if this is something I'd neccessarily consider a bug, but its something I'll definitely keep in mind when working with these images.