gesh75
- 23 skills
- 0 followers
- 16 hours ago last updated
- ▌ Mpls L3vpn · gesh75Design and triage MPLS L3VPN on PE-CE edges. Use when adding a VRF, dual-homing a CE, or a prefix is missing in a customer VPN.
- ▌ Wifi7 Campus · gesh75Design and triage campus Wi-Fi 6E/7 (MLO, 6 GHz, roaming). Use when an SSID is sticky, a floor has retries, or a controller upgrade is planned.
- ▌ Bgp Evpn Clos · gesh75Design and triage Clos fabrics with eBGP underlay and EVPN-VXLAN overlay on Juniper, Arista, Cisco, and Nokia. Use when a VTEP is missing, MAC is silent, or a leaf is joining the fabric.
- ▌ Dns Dhcp Ipam · gesh75Operate DNS, DHCP, and IPAM as one system. Use when a scope is exhausted, a resolver is poisoned, or a split-horizon zone is drifting from NetBox.
- ▌ Ipv6 Dual Stack · gesh75Plan and review IPv6 dual-stack on campus, DC, and WAN. Use when numbering a VRF, enabling RA, or deciding NAT64 versus native.
- ▌ K8S Cni Network · gesh75Design and triage Kubernetes networking with Cilium or Calico, NetworkPolicy, and egress control. Use when pods cannot reach a service, a NetworkPolicy is too open, or a node drops overlay traffic.
- ▌ Sase Zero Trust · gesh75Design SASE and ZTNA access for private apps, SWG, and CASB. Use when replacing VPN, onboarding a connector, or reviewing Prisma / Zscaler / Netskope policy.
- ▌ Campus Nac Dot1x · gesh75Design and triage campus 802.1X and MAB with ISE or ClearPass. Use when a port will not authorize, a phone+PC daisy-chain fails, or failed-open policy is being reviewed.
- ▌ Dc Fabric Upgrade · gesh75Plan data-center fabric upgrades (ISSU, SMU, or cold) with traffic shift and abort criteria. Use when a spine, leaf, or border-leaf train is moving and you need a sequenced window.
- ▌ MCP Netops Safety · gesh75Design fail-closed MCP tool access to network devices for Claude Code and other agents. Use when adding a NAPALM/Netmiko tool, reviewing allow-lists, or connecting an LLM to a lab or production fabric.
- ▌ Senior Ne Runbook · gesh75Run senior-network-engineer incident response from first page to RCA. Use when a SEV-1/2 hits BGP, WAN, DC fabric, or firewall and you need a timed, fail-closed playbook.
- ▌ Wan Circuit Triage · gesh75Triage WAN circuit faults from optics to BGP. Use when a DIA, MPLS, or P2P circuit is down, errored, or saturating and you need an ISP-ready package.
- ▌ PDF Extract · gesh75 bundleExtracts text and tables from PDFs, fills forms, and merges documents. Use when the user mentions PDFs, form filling, or document extraction. Do not use for scanned image-only PDFs without OCR.
- ▌ Netops Change Guard · gesh75Guard network writes behind dry-run, RFC 6241 confirmed-commit, and explicit rollback. Use when applying config to Cisco, Juniper, Arista, or Nokia and a human must own the blast radius.
- ▌ Cloud Hybrid Connect · gesh75Design hybrid cloud interconnects (AWS Direct Connect, Azure ExpressRoute, Google Interconnect) with TGW/VPN backup. Use when attaching a new VPC/VNet or reviewing BGP to a cloud on-ramp.
- ▌ Intent Nornir Napalm · gesh75Build idempotent network intent with Nornir and NAPALM, inventory from NetBox. Use when replacing a hop-by-hop CLI change with a rendered, diffed, dry-run pipeline.
- ▌ Config Diff Preflight · gesh75Preflight a candidate network config for secrets, blast radius, and silent defaults. Use when a human or an LLM produced a snippet and it must be reviewed before a dry-run.
- ▌ Firewall Policy Review · gesh75Review firewall security policy on PAN-OS, FortiOS, and ASA for shadow rules, any-any, and missing log-end. Use when a rule is changing or a quarterly hygiene pass is due.
- ▌ Netbox Source Of Truth · gesh75Treat NetBox as the source of truth for devices, prefixes, VLANs, and cables. Use when planning IP space, racking a leaf, or reconciling a drift between intent and running-config.
- ▌ Network Manager Cadence · gesh75Run a network manager's weekly and monthly cadence covering CAB, capacity, vendor risk, and staffing. Use when preparing leadership updates, change calendars, or budget narratives.
- ▌ Sdwan Overlay Architect · gesh75Design and review SD-WAN overlays across Cisco Catalyst SD-WAN, Palo Alto Prisma, Fortinet, and Versa. Use when adding a site, changing transport colors, or migrating MPLS to DIA.
- ▌ Multivendor CLI Translate · gesh75Translate a network task across Cisco IOS-XE/XR, Junos, Arista EOS, Nokia SR Linux, and PAN-OS. Use when you know the intent and need vendor-correct show or config syntax.
- ▌ Observability Dual Signal · gesh75Gate network alerts on two agreeing signals from independent collectors. Use when a page is noisy, a new check is being added, or an on-call wants to drop a single-counter alarm.