NetBox source of truth
Do not use as a monitoring tool or a substitute for a NMS. Not for flow records.
Procedure
- Nothing is real until it is in NetBox. A live device that is missing is drift, not inventory.
- Allocate prefixes and IDs in NetBox first, then render config. Never the reverse.
- Cables and rear/front ports are first-class. A "we'll document it later" patch is an incident waiting.
- Reconcile weekly: NetBox vs CDP/LLDP vs IPAM utilization.
- Verify the change ticket links the NetBox object IDs.
prefix = nb.ipam.prefixes.create(prefix="2001:db8:24:1::/64", site="dc1", status="active", role="loopback")
Anti-patterns
- Never hand-edit a loopback on a leaf and "catch up NetBox later".
- Do not store secrets in custom fields.
Safety
NetBox writes are still reviewed. Device writes go through netops-change-guard.