net-segmentation-policy

Verify client network placement against policy mappings using NETTOOLS.

Updated Mar 11, 2026
One-click install
npx skills add https://github.com/ekkus93/vscode_skills --skill net-segmentation-policy
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: net-segmentation-policy
Source: https://github.com/ekkus93/vscode_skills/tree/main/skills/net-segmentation-policy
Command: npx skills add https://github.com/ekkus93/vscode_skills --skill net-segmentation-policy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires nettools-core, and includes scripts (resource) components.

What problem does it solve?

Verify SSID, VLAN, DHCP-scope, and policy alignment for a client using the bundled NETTOOLS helper.

Core Features & Use Cases

  • Cross-checks observed SSID, VLAN, and DHCP scope against inventory data.
  • Detects and reports misalignments with findings such as VLAN_MISMATCH, POLICY_GROUP_MISMATCH, and GATEWAY_ALIGNMENT_MISMATCH.
  • Supports live execution with configured adapters or fixture-driven test mode via NETTOOLS.
  • Example: validate a corporate laptop connected to CorpWiFi is placed in the correct VLAN and policy per inventory.

Quick Start

Run the skill with --client-id or --client-mac to perform a live segmentation policy check against inventory data.

Frequently Asked Questions about net-segmentation-policy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify client VLAN and DHCP scope alignment against inventory data?

You can verify SSID, VLAN, and DHCP scope alignment by cross-checking observed client network placement against inventory mappings. The tool reports findings like VLAN_MISMATCH and POLICY_GROUP_MISMATCH to flag policy deviations.

What is network segmentation policy validation for wireless and DHCP clients?

Network segmentation policy validation checks wireless SSIDs, VLANs, and DHCP scopes against inventory mappings. It detects and reports alignment mismatches like POLICY_GROUP_MISMATCH across sites and devices to ensure correct network placement.

Do I need python3 and the NETTOOLS package to run network segmentation checks?

Yes, you need python3 and the NETTOOLS package with a bundled helper for core logic. The skill supports live execution with configured adapters or fixture-driven test mode via NETTOOLS to perform the checks.

Can I use fixture-driven test mode for network policy verification instead of live adapters?

Yes, you can use fixture-driven test mode via NETTOOLS instead of live adapters. This allows you to validate segmentation policy logic against controlled test data without requiring live network adapter configurations.

How do I check if a corporate laptop on WiFi is in the correct VLAN according to policy?

Run the skill with the client ID or MAC address to validate the observed SSID and VLAN against inventory data. This confirms the corporate laptop is placed in the correct VLAN and policy group per the defined mappings.