# Cisco Cisco is a technology company that provides networking, security, observability, collaboration, cloud management, and related infrastructure products and services. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Accelerating Operational Efficiency in Modern Transportation DevFeed: [Accelerating Operational Efficiency in Modern Transportation]() Original publisher: [Read original article]() Author: Emily Kasman Published: 2026-09-17T13:30:51Z Content type: article Language: en Sources: [Cisco Blogs]() Topics: [Cisco](), [Network](), [Critical Infrastructure](), [legacy](), [Low Latency](), [Security](), [observability](), [Resilience]() Tags: [cisco](), [cisco-connected-rail](), [cisco-industrial-ethernet-switches](), [cisco-industrial-routers](), [cisco-industrial-security](), [connected-roadways](), [critical-infrastructure](), [industrial-ai](), [industrial-iot](), [legacy](), [low-latency](), [modernization](), [network](), [observability](), [resilience](), [security](), [transportation]() ### AI overview This Cisco article discusses how transit and roadway agencies can modernize legacy network infrastructure. It presents secure, low-latency connectivity, end-to-end operational visibility, and security-focused architecture as ways to support real-time processing, connected systems, and more resilient transportation operations. ### Source excerpt Learn how Cisco helps transit agencies overcome legacy network bottlenecks with secure, AI-ready connectivity, full visibility, and robust cyber resilience. ## Cisco drops another exploited zero-day, this time a perfect 10 DevFeed: [Cisco drops another exploited zero-day, this time a perfect 10]() Original publisher: [Read original article]() Author: Carly Page Published: 2026-09-17T12:40:00Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Cisco](), [Authentication](), [Security](), [patches]() Tags: [authentication-bypass](), [cisco](), [cybersecurity](), [security](), [zero-day]() ### AI overview Cisco's ISE authentication bypass is under active attack, following another Cisco zero-day that prompted administrators to urgently apply patches. ### Source excerpt ISE authentication bypass under active attack just days after another Cisco zero-day sent admins scrambling to patch ## Cisco integrates Axis devices, bringing unified management across IT environments DevFeed: [Cisco integrates Axis devices, bringing unified management across IT environments]() Original publisher: [Read original article]() Author: Jonathan Cohn Published: 2026-09-16T15:00:57Z Content type: release Language: en Sources: [Cisco Blogs]() Topics: [Cisco](), [Cisco Meraki](), [Security](), [dashboards](), [Network](), [Cloud](), [Internet of things]() Tags: [analytics](), [cisco](), [cisco-cloud-control](), [cisco-meraki](), [cisco-networking](), [cloud](), [communications](), [infrastructure](), [internet-of-things](), [networking](), [security]() ### AI overview Cisco announces an integration with Axis Communications that brings network and physical security management into its cloud-managed ecosystem. The article describes Cisco Meraki dashboard management, shared visibility, and potential operational benefits for IT and physical security teams. ### Source excerpt Cisco and Axis Communications are committed to bridging the gap between IT and physical security infrastructure, as we believe that close collaboration between these teams leads to a stronger, more comprehensive security strategy. ## Cisco UCS Manager: Celebrating the legacy, shaping the future with Cisco Intersight DevFeed: [Cisco UCS Manager: Celebrating the legacy, shaping the future with Cisco Intersight]() Original publisher: [Read original article]() Author: Jacob Van Ewyk Published: 2026-09-15T21:00:37Z Content type: opinion Language: en Sources: [Cisco Blogs]() Topics: [Cisco](), [Server](), [Automation](), [configuration](), [API](), [legacy]() Tags: [api](), [automation](), [cisco](), [data-center](), [end-of-life](), [eol](), [infrastructure](), [legacy](), [lifecycle](), [management](), [server]() ### AI overview Cisco describes the legacy of Cisco UCS Manager and positions Cisco Intersight as the strategic platform for future Cisco UCS software management. The article also outlines announced end-of-sale and end-of-life milestones, including a planned Last Date of Support of December 31, 2030, subject to applicable contracts and service terms. ### Source excerpt Cisco UCS Manager shaped 17 years of infrastructure management. Now, with its end-of-life announced, Cisco Intersight carries that foundation forward with centralized visibility, automation, and scale. Learn the key dates for the UCS Manager EOL. ## Critical Cisco email security flaw is being exploited by attackers DevFeed: [Critical Cisco email security flaw is being exploited by attackers]() Original publisher: [Read original article]() Author: Carly Page Published: 2026-09-15T16:01:00Z Content type: news Language: en Sources: [www.theregister.com - Articles]() Topics: [Cisco](), [Security](), [Cybersecurity]() Tags: [cisco](), [cybersecurity](), [email](), [security]() ### AI overview Attackers are exploiting a critical vulnerability in Cisco email security appliances. Cisco warns that attackers may be able to conceal their activity after gaining access. ### Source excerpt Attackers already exploiting the critical flaw, and Cisco warns they may be able to cover their tracks once they're in ## Cisco and the DISA STIG: Turning Zero Trust Policy into Repeatable Practice - Part 2: Cisco SNA DevFeed: [Cisco and the DISA STIG: Turning Zero Trust Policy into Repeatable Practice - Part 2: Cisco SNA]() Original publisher: [Read original article]() Author: Norman St. Laurent Published: 2026-09-15T13:13:53Z Content type: article Language: en Sources: [Cisco Blogs]() Topics: [Cybersecurity](), [Cisco](), [telemetry](), [Zero Trust](), [vulnerability](), [Network]() Tags: [benchmark](), [cisco](), [cisco-secure-network-analytics-sna](), [cybersecurity](), [department-of-defense-dod](), [government](), [hardening](), [industries](), [nist](), [public-sector](), [stig](), [visibility]() ### AI overview The article explains how the DISA Security Technical Implementation Guide for Cisco Secure Network Analytics turns Zero Trust policy into testable configuration requirements. The STIG provides a shared hardening baseline for the platform and its management functions, with 31 requirements derived from NIST SP 800-53 and related requirements. ### Source excerpt Discover how the new DISA STIG for Cisco Secure Network Analytics helps defense organizations securely configure and harden their analytics platform, ensuring trusted network visibility for Zero Trust operations. ## How Cisco and Jagriti are unlocking digital potential in Purvanchal DevFeed: [How Cisco and Jagriti are unlocking digital potential in Purvanchal]() Original publisher: [Read original article]() Author: Rohini Kamath Published: 2026-09-09T20:22:55Z Content type: article Language: en Sources: [Cisco Blogs]() Topics: [Cisco](), [Development]() Tags: [cisco](), [cisco-purpose](), [community](), [entrepreneurship](), [india](), [our-corporate-purpose](), [social-impact-and-inclusion](), [social-impact-and-inclusion-office](), [social-impact-investments](), [technology]() ### AI overview Cisco describes its partnership with Jagriti to support the Tech Shakti Shri program, which helps rural women in Purvanchal, Uttar Pradesh, develop digital and entrepreneurial skills. The article highlights Seema Gupta, an agricultural drone operator, and the program's initial awareness and training phases. ### Source excerpt In one of India's least industrialized regions, we're helping rural women access the digital tools they need to build real enterprises -- and the ripple effects are opening pathways to economic mobility for entire communities. ## Identity Everywhere: Bringing Infrastructure Identity to Agentic IT DevFeed: [Identity Everywhere: Bringing Infrastructure Identity to Agentic IT]() Original publisher: [Read original article]() Author: info@goteleport.com (Peter Bailey, Ev Kontsevoy) Published: 2026-08-25T00:00:00Z Content type: release Language: en Sources: [Teleport]() Topics: [Cisco](), [Security](), [Artificial Intelligence]() Tags: [agentic](), [ai-agents](), [cisco](), [cryptographic](), [identity-management](), [infrastructure](), [partnership](), [security]() ### AI overview Cisco and Teleport announce a strategic partnership involving technology integration, licensing, and investment. The article presents Infrastructure Identity as a cryptographic model intended to connect secure identity with human and machine actions, including activity by workloads, automation, and AI agents. ### Source excerpt Cisco and Teleport are announcing a strategic partnership centered on deep technology integration, licensing, and investment. ## Using Cisco Prefix Lists Inside Route Maps for BGP Filtering DevFeed: [Using Cisco Prefix Lists Inside Route Maps for BGP Filtering]() Original publisher: [Read original article]() Author: j2sw Published: 2026-08-11T14:48:44Z Content type: tutorial Language: en Sources: [Justin Wilson (j2sw)]() Topics: [BGP](), [Cisco](), [Network]() Tags: [bgp](), [bgp-filtering](), [cisco](), [internet-architecture](), [network-engineering](), [network-engineering-resources](), [prefix-lists](), [route-maps](), [routing-policy]() ### AI overview This tutorial explains how Cisco prefix lists and route maps work together for BGP filtering. Prefix lists define which routes match, while route maps apply actions such as permitting, denying, or modifying route attributes. It also describes route-map sequence order and implicit deny behavior. ### Source excerpt Prefix lists define which BGP routes match a policy. Route maps use those matches to permit routes, deny them, or change attributes such as local preference. The post Using Cisco Prefix Lists Inside Route Maps for BGP Filtering appeared first on Justin Wilson (j2sw). ## Getting Started with netlab @ Cisco DevNet DevFeed: [Getting Started with netlab @ Cisco DevNet]() Original publisher: [Read original article]() Published: 2026-06-29T05:23:00Z Content type: opinion Language: en Sources: [ipSpace.net blog]() Topics: [Cisco](), [Tool](), [Documentation]() Tags: [blog](), [cisco](), [getting-started](), [interview](), [netlab](), [video]() ### AI overview A Cisco DevNet channel published an hour-long interview with Suresh Vina introducing netlab. The article recommends the video to people new to netlab and notes that netlab.tools documentation received more weekly visits than the ipspace.net blog for the first time. ### Source excerpt Cisco DevNet channel has published an hour-long Getting Started with netlab interview with Suresh Vina, resulting in netlab.tools documentation having more weekly visits than ipspace.net blog for the first time. Thanks a million ;)) If you're new to netlab, I hope you'll enjoy the video. If you have any follow-up questions, don't hesitate to start a discussion. ## The Snapshot Machine: genie learn and diff as a Change-Validation Safety Net on CML2 DevFeed: [The Snapshot Machine: genie learn and diff as a Change-Validation Safety Net on CML2]() Original publisher: [Read original article]() Author: Brent Leekley Published: 2026-06-22T00:00:00Z Content type: tutorial Language: en Sources: [brent.leekley.me blog]() Topics: [networking](), [Cisco](), [Routing (disambiguation)](), [Structured-data](), [Command-line interface]() Tags: [change-validation](), [cisco](), [cisco-modeling-labs](), [cli](), [cml2](), [genie](), [genie-diff](), [genie-learn](), [maintenance-window](), [network-automation](), [network-testing](), [ospf](), [pyats](), [routing-table](), [snapshot](), [structured](), [validation]() ### AI overview This tutorial demonstrates using Cisco Modeling Labs 2 with Genie learn and diff to validate network changes. It snapshots structured operational state before and after a maintenance change, then compares the snapshots to reveal side effects that routine show commands may miss. The source summary reports that a changed OSPF cost reroutes three destinations while adjacencies remain FULL. ### Source excerpt Snapshot a CML2 fabric with genie learn before and after a maintenance change, then genie diff the structured state. One fat-fingered OSPF cost quietly reroutes three destinations while every adjacency stays FULL. Structured before-and-after diffs catch the side effects that show commands miss. ## From Intent to Reality: Driving pyATS Tests from NetBox Against a CML2 Fabric DevFeed: [From Intent to Reality: Driving pyATS Tests from NetBox Against a CML2 Fabric]() Original publisher: [Read original article]() Author: Brent Leekley Published: 2026-06-15T00:00:00Z Content type: tutorial Language: en Sources: [brent.leekley.me blog]() Topics: [NetBox](), [Network](), [Cisco](), [data](), [Structured-data]() Tags: [cisco-modeling-labs](), [cml](), [cml2](), [custom-fields](), [genie](), [ids](), [intent-based-networking](), [netbox](), [network](), [network-automation](), [network-testing](), [ospf](), [pyats](), [pynetbox](), [router-id](), [source-of-truth](), [spine-leaf](), [structured](), [testbed]() ### AI overview This tutorial shows how to store declared OSPF router-IDs in NetBox and use Cisco pyATS to compare them with the router-IDs on a live CML2 spine-leaf fabric. The comparison turns network intent validation into a pass-or-fail test. ### Source excerpt NetBox holds the intent (declared OSPF router-IDs), a CML2 spine-leaf is the network under test, and pyATS is the judge. Close the loop and prove the live network matches what you said it should be, with real pass and fail output. ## Build the Lab Once, Test It Forever: A CML2 Spine-Leaf Wired for pyATS DevFeed: [Build the Lab Once, Test It Forever: A CML2 Spine-Leaf Wired for pyATS]() Original publisher: [Read original article]() Author: Brent Leekley Published: 2026-06-14T00:00:00Z Content type: tutorial Language: en Sources: [brent.leekley.me blog]() Topics: [Network](), [Testing](), [Cisco](), [Code](), [API](), [Parser]() Tags: [api](), [cisco](), [cisco-modeling-labs](), [cml](), [cml2](), [code](), [genie](), [iol-xe](), [network-automation](), [network-testing](), [ospf](), [parsing](), [pyats](), [spine-leaf](), [testbed](), [virl2-client]() ### AI overview This tutorial describes a four-node spine-leaf lab in Cisco Modeling Labs 2 (CML2) that generates a Cisco pyATS testbed from the CML API. The approach treats the lab definition as the source of truth so regenerated inventories remain aligned with topology changes, and uses an OSPF underlay with a management network. ### Source excerpt Stop hand-maintaining your pyATS testbed. Build a four-node spine-leaf in CML2 as code, then generate the testbed straight from the CML API so it never drifts from the lab, with live Genie-parsed proof over a System Bridge management network. ## AI in Networking with Andrew Yourtchenko DevFeed: [AI in Networking with Andrew Yourtchenko]() Original publisher: [Read original article]() Published: 2026-06-12T06:41:00Z Content type: opinion Language: en Sources: [ipSpace.net blog]() Topics: [Artificial Intelligence](), [networking](), [Cisco](), [Deployment]() Tags: [ai](), [cisco](), [deployment](), [networking](), [podcast](), [software-gone-wild]() ### AI overview This episode discusses AI in networking with Andrew Yourtchenko, whose background includes automating Cisco Live networking infrastructure and contributing to IPv6 deployment through Happy Eyeballs. The speakers describe themselves as cautious optimists who recognize limitations in emerging AI tools. ### Source excerpt I always wanted to find someone who is more positive about AI than I am, while having solid "can deliver working stuff at scale" credentials. Andrew Yourtchenko definitely fits the bill. I first met him (online) when he was still an engineer in Cisco TAC, and when we finally met in person, he was busy automating the deployment of Cisco Live networking infrastructure. He was also instrumental in bringing us closer to ubiquitous IPv6 deployment with Happy Eyeballs. Read more ... ## AI agents gain distinct identities and permissions, but accountability remains the harder problem DevFeed: [AI agents gain distinct identities and permissions, but accountability remains the harder problem]() Original publisher: [Read original article]() Author: Brent Leekley Published: 2026-06-12T00:00:00Z Content type: opinion Language: en Sources: [brent.leekley.me blog]() Topics: [Artificial Intelligence](), [Cisco](), [Duo](), [Authorization](), [trust]() Tags: [aeo](), [agent-identity](), [agentic-ai](), [agenticops](), [ai](), [ai-agents](), [answer-engine-optimization](), [cisco](), [cisco-cloud-control](), [cisco-live](), [cisco-live-2026](), [duo](), [duo-iam](), [identity](), [jeetu-patel](), [non-human-identity](), [permissions]() ### AI overview This commentary argues that AI agents are becoming operational actors with distinct identities, permissions, and lifecycles. It describes Cisco's approach of assigning agents identities, linking them to accountable humans, limiting permissions, and requiring human approval for proposed changes, while emphasizing that accountability and ongoing oversight remain unresolved challenges. ### Source excerpt Cisco Live 2026 made AI agents their own kind of identity, with permissions and an accountable human owner. Why issuing the identity is the easy 20 percent, what real accountability takes, and how the same agents quietly became the audience we now write for. ## Using an AI Agent and MCP to Build and Verify Cisco Modeling Labs Network Labs DevFeed: [Using an AI Agent and MCP to Build and Verify Cisco Modeling Labs Network Labs]() Original publisher: [Read original article]() Author: Brent Leekley Published: 2026-06-10T00:00:00Z Content type: tutorial Language: en Sources: [brent.leekley.me blog]() Topics: [AI Agent](), [Model Context Protocol](), [Cisco](), [Claude](), [Network](), [API]() Tags: [agent](), [ai-agents](), [api](), [cat9000v](), [cisco-modeling-labs](), [claude](), [cml](), [cml-mcp](), [mcp](), [mcp-server](), [model-context-protocol](), [network](), [network-automation](), [pyats]() ### AI overview This article explains how to use an AI agent through the Model Context Protocol to build and verify network labs in Cisco Modeling Labs. It discusses CML 2.10's first-party MCP server, natural-language lab creation, and verification workflows that observe network state and retry until OSPF adjacency converges. ### Source excerpt CML 2.10 ships a first-party MCP server, and Claude can now build and verify network labs. Field lessons from running an AI agent against Cisco Modeling Labs: dataplane readiness gates, the cat9000v interface trap, SSH host-key rotation, and guardrails that live in docstrings. ## Isovalent Private Networks and Cisco Nexus One: BGP EVPN Integration for the Enterprise Data Center DevFeed: [Isovalent Private Networks and Cisco Nexus One: BGP EVPN Integration for the Enterprise Data Center]() Original publisher: [Read original article]() Author: Marcos Hernandez, Camillo Rossi Published: 2026-06-04T16:42:52Z Content type: release Language: en Sources: [Isovalent - The latest articles covering eBPF-based Networking, Observability, and Security]() Topics: [virtualization](), [networking](), [BGP](), [Cisco](), [evpn](), [VXLAN](), [datacenter]() Tags: [bgp](), [cilium](), [cisco](), [data-center](), [ebpf](), [evpn](), [hubble](), [isovalent](), [kubernetes-networking](), [load-balancer](), [mesh-networking](), [networking](), [nexus-one](), [runtime-security](), [tetragon](), [virtualization](), [vxlan](), [website]() ### AI overview Isovalent announces the general availability of Isovalent Networking for Virtualization and highlights its BGP EVPN/VXLAN integration with Cisco NX-OS for enterprise data centers. ### Source excerpt Today we're announcing the General Availability (GA) of Isovalent Networking for Virtualization alongside a deeper look at one of its core connectivity capabilities: BGP EVPN/VXLAN integration with Cisco NX-OS, part of the Cisco Nexus One strategic alignment. ## netlab 26.03: EVPN/MPLS, IOS XR Features DevFeed: [netlab 26.03: EVPN/MPLS, IOS XR Features]() Original publisher: [Read original article]() Published: 2026-03-10T08:11:00Z Content type: release Language: en Sources: [ipSpace.net blog]() Topics: [releases](), [Release notes](), [evpn](), [BGP](), [MPLS VPN](), [SR-MPLS](), [Cisco](), [networking](), [VXLAN]() Tags: [bgp](), [cisco](), [evpn](), [getting-started](), [github](), [guide](), [improvements](), [installation](), [issue](), [mpls](), [mpls-vpn](), [netlab](), [open](), [release](), [release-notes](), [routing](), [sr-mpls](), [vxlan]() ### AI overview The netlab 26.03 release adds Cisco IOS XR capabilities, Juniper cRPD support, EVPN/VXLAN support on Juniper platforms, OpenBSD BGP support, SR-MPLS support for OSPFv2, and EVPN/MPLS improvements. ### Source excerpt netlab release 26.03 is out. Here are the highlights: New Cisco IOS XR features: SR-MPLS, MPLS/VPN, MPLS 6PE, EVPN over MPLS, VRRP, BGP session parameters, routing policies, prefix filters, AS-path filters, community filters, and static routes Juniper cRPD support (mostly by @leec-666) EVPN/VXLAN on Juniper vPTX and vJunos-router by @rickycraft OpenBSD BGP support by @remilocherer SR-MPLS support for OSPFv2 on EOS, FRR, IOS XE, IOS XR EVPN/MPLS improvements, including using SR-MPLS transport For even more details, check the release notes. Read more ... ## Automating netlab-Based Cisco SD-WAN Deployment DevFeed: [Automating netlab-Based Cisco SD-WAN Deployment]() Original publisher: [Read original article]() Published: 2026-03-09T07:29:00Z Content type: article Language: en Sources: [ipSpace.net blog]() Topics: [SD-WAN](), [Cisco](), [Deployment](), [Open Source](), [GitHub](), [JSON](), [YAML]() Tags: [cisco](), [cisco-sd-wan](), [deployment](), [github](), [json](), [netlab](), [open-source](), [sd-wan](), [tool](), [yaml]() ### AI overview The article describes an open-source solution developed by Sebastien d'Argoeuves that automates Cisco SD-WAN deployment after a netlab lab is started. The solution is published in a GitHub repository and uses netlab's standardized JSON or YAML input and output files. ### Source excerpt We haven't implemented support for Cisco SD-WAN in netlab yet, and we might never do so; after all, netlab isn't meant to be a kitchen sink of vendor-specific features. However, having an open-source tool that uses input and output files with standardized encoding (JSON or YAML) makes it easy to develop an independent solution that adds functionality. That's exactly what Sebastien d'Argoeuves did: he developed a solution that automates Cisco SD-WAN deployment after the corresponding netlab lab is started, and published it in a GitHub repo. If you're an SD-WAN fan, you must give it a try ;) ## The Tale of Two EVPN/MPLS Encapsulations DevFeed: [The Tale of Two EVPN/MPLS Encapsulations]() Original publisher: [Read original article]() Published: 2026-03-04T07:09:00Z Content type: article Language: en Sources: [ipSpace.net blog]() Topics: [evpn](), [Testing](), [BGP](), [Cisco](), [Ethernet]() Tags: [bgp](), [cisco](), [deep-dive](), [ethernet](), [evpn](), [mpls](), [test](), [testing]() ### AI overview A technical investigation of EVPN/MPLS netlab integration tests compares Arista EOS and Cisco IOS/XE encapsulations. Arista EOS passes the bridging test, while Cisco IOS/XE establishes the control plane but encounters ARP failures that packet captures trace to differing MPLS payload handling and control-word expectations. ### Source excerpt I decided it was high time to create EVPN/MPLS netlab integration tests and wanted to use the same approach I used for the EVPN/VXLAN ones: One of the PE-devices is the device we want to test The other PE-device is a device that is known to work (ideally, an FRRouting container). Bonus points if the other PE-device can generate operational data in JSON format. Using a device for which we already have a validation plugin is close to perfection. Add a P-router in the middle because MPLS. Attach some hosts to the two PE-devices (we're testing two MAC-VRFs in the final version of the test) After validating everything that can reasonably be validated (OSPF session, IBGP session, EVPN AF on IBGP session), do the end-to-end pings and hope for the best. This is the graph netlab created from the lab topology: Read more ... ## Configuring 6PE Route Reflector on Cisco IOS DevFeed: [Configuring 6PE Route Reflector on Cisco IOS]() Original publisher: [Read original article]() Published: 2026-02-26T07:19:00Z Content type: tutorial Language: en Sources: [ipSpace.net blog]() Topics: [Cisco](), [BGP](), [configuration](), [networking](), [Ansible](), [NETCONF](), [REST API]() Tags: [ansible](), [bgp](), [cisco](), [configuration](), [logging](), [mpls](), [netconf](), [netlab](), [rest-api]() ### AI overview The article explains a Cisco IOS configuration issue affecting BGP route reflectors for MPLS 6PE and L3VPN. IPv6 labeled-unicast and VPNv6 address-family commands may appear to apply through Ansible's ios_config module but not persist in the BGP configuration unless IPv6 routing is enabled with ipv6 unicast-routing. The article also argues that NETCONF or REST API mechanisms could report configuration failures more consistently than CLI-based automation. ### Source excerpt Imagine you want to deploy a BGP route reflector for MPLS 6PE or L3VPN service. Both services run over MPLS LSPs, use IPv4 BGP sessions, and use IPv4 next hops for BGP routes. There's absolutely no reason to need IPv6 routing on a node that handles solely the control-plane activity (it never appears as a BGP next hop anywhere), right? Cisco IOS disagrees, as I discovered when running route reflector integration tests for netlab 6PE and (MPLS) L3VPN functionality. Most platforms failed those tests because we forgot to configure route-reflector-clients in labeled IPv6 and VPNv4/VPNv6 address families1. That was easy to fix, but the IOS-based devices were still failing the tests, with nothing in the toolchain ever complaining about configuration problems. Read more ... ## netlab: The Caveats of Using Startup Configurations DevFeed: [netlab: The Caveats of Using Startup Configurations]() Original publisher: [Read original article]() Published: 2026-02-23T06:23:00Z Content type: article Language: en Sources: [ipSpace.net blog]() Topics: [configuration](), [Containers](), [Cisco](), [Deployment]() Tags: [boot](), [cisco](), [configuration](), [containers](), [deployment](), [docker](), [linux](), [netlab](), [process]() ### AI overview The article explains why netlab treats startup configurations as a last resort for initial lab deployment. It identifies limitations involving complete configurations for Arista cEOS, difficult-to-observe errors, weaker error-status handling, possible conflicts between configuration snippets, and the need for ad-hoc configuration deployment. ### Source excerpt Petr Ankudinov wrote an excellent comment about netlab Fast cEOS Configuration implementation. Paraphrasing the original comment: If the use case is the initial lab deployment, why don't you use containerlab startup-config option to change the device's startup configuration? I have to admit, I'm too old to boldly go with the just use the startup configuration approach. In ancient times, Cisco IOS did crazy stuff if you rearranged the commands in the startup configuration. But ignoring that historical trivia (Cisco IOS/XE seems to be doing just fine), there are several reasons why I decided to use the startup configurations (and you can use them with some containers) as the last resort: Read more ... ## Cisco IOS/XR OSPFv2 Not-So-Passive Interfaces DevFeed: [Cisco IOS/XR OSPFv2 Not-So-Passive Interfaces]() Original publisher: [Read original article]() Published: 2026-02-19T06:46:00Z Content type: opinion Language: en Sources: [ipSpace.net blog]() Topics: [Cisco](), [Testing](), [Network](), [Protocol (disambiguation)]() Tags: [cisco](), [linux](), [netlab](), [network](), [open](), [ospf](), [script](), [test](), [testing]() ### AI overview The article reports that Cisco IOS/XR 25.2.1 sends two OSPFv2 hello packets shortly after configuration on an interface marked passive, then stops sending them. This behavior caused a netlab integration test to fail with a neighbor in the Init state; the author worked around it by clearing the OSPF neighbor on the connected FRRouting container. ### Source excerpt What's wrong with me? Why do I have to uncover another weirdness every single time I run netlab integration tests on a new platform? Today, it's Cisco IOS/XR (release 25.2.1) and its understanding of what "passive" means. According to the corresponding documentation, the passive interface configuration command is exactly what I understood it to be: Use the passive command in appropriate mode to suppress the sending of OSPF protocol operation on an interface. However, when I ran the OSPFv2 passive interface integration test with an IOS/XR container, it kept failing with neighbor is in Init state (the first and only time I ever encountered such an error after testing over two dozen platforms). Read more ... ## EVPN IP-VRFs on Cisco IOS/XE: Configuration Notes DevFeed: [EVPN IP-VRFs on Cisco IOS/XE: Configuration Notes]() Original publisher: [Read original article]() Published: 2026-02-18T06:31:00Z Content type: tutorial Language: en Sources: [ipSpace.net blog]() Topics: [evpn](), [Cisco](), [VXLAN](), [configuration](), [BGP](), [MPLS VPN]() Tags: [bgp](), [cisco](), [configuration](), [evpn](), [gotchas](), [how-to](), [ios](), [vxlan]() ### AI overview The article shares configuration notes from getting EVPN IP-VRFs with transit VXLAN segments working on Cisco IOS/XE. It explains VLAN or bridge-domain requirements, VRF and interface setup, EVPN route-target placement, BGP activation, and related testing considerations. ### Source excerpt Last week, I described some of the gotchas I encountered while trying to make EVPN MAC-VRFs work on Cisco IOS/XE. In the meantime, I got IP-VRFs with transit VXLAN segments working. Here are the CliffsNotes: Starting with the disgusting configuration mechanism: Read more ... [Next page]()