skills.rest
rloisell
rloisellCOMMUNITY
Explore all skills by this author →
GitHub

network-security

Define ACLs, NAT/PAT, IPsec VPNs, and zone-based firewall policies for Cisco IOS/IOS-XE and Linux iptables.

7|Updated Mar 5, 2026
Search Tags:#acl#network-security#ipsec#802.1x#zone-based-firewall#nat-pat#dhcp-snooping
One-click install
npx skills add https://github.com/rloisell/rl-agents-n-skills --skill network-security-rloisell
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: network-security
Source: https://github.com/rloisell/rl-agents-n-skills/tree/main/network-security
Command: npx skills add https://github.com/rloisell/rl-agents-n-skills --skill network-security-rloisell

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Helps network and security engineers rapidly design, audit, and remediate network controls including ACLs, NAT/PAT, IPsec VPNs, zone-based firewalls, and Layer 2 hardening to reduce misconfigurations and mitigate common attack vectors.

Core Features & Use Cases

  • Configuration Examples: Ready-to-adapt ACLs, NAT/PAT, IPsec (IKEv1/IKEv2) transforms, zone-based firewall policies, and Layer 2 hardening snippets for Cisco IOS/IOS-XE and comparable platforms.
  • Verification & Troubleshooting: Commands and guidance for validating ACL hits, NAT translations, IKE/IPsec SAs, and common failure modes (MSS, ACL selectors, mismatched transforms).
  • Use Case: Design DMZ-to-inside segmentation, implement site-to-site VPNs, enable DHCP snooping/DAI/802.1X on access switches, and derive mitigations for ARP spoofing, VLAN hopping, and DDoS amplification.

Quick Start

Use the network-security skill to generate ACL, NAT, VPN and switch-hardening configuration snippets plus verification commands for a Cisco IOS-XE edge router protecting your DMZ.

Frequently Asked Questions about network-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure a zone-based firewall policy on Cisco IOS-XE?▼

Configure IPsec site-to-site VPNs on Cisco IOS by defining IKEv1 or IKEv2 transform sets, creating ISAKMP policies, mapping ACLs for interesting traffic, and verifying IPsec SAs. This skill generates transform snippets and troubleshooting commands for common failure modes like mismatched selectors.

What are the best ways to mitigate ARP spoofing and VLAN hopping on access switches?▼

Mitigate ARP spoofing and VLAN hopping by enabling Layer 2 security controls like DHCP snooping, Dynamic ARP Inspection, and 802.1X port authentication. This skill provides configuration examples for these switch hardening features to secure network access segments.

Does this skill provide configuration examples for Linux iptables and nftables?▼

Yes, this skill provides firewall policy design and auditing guidance that applies to Linux iptables and nftables, alongside Cisco IOS/IOS-XE and ASA/FTD platforms. It generates configuration examples and mitigation guidance for securing network perimeters across these environments.

Why are my NAT translations failing to match expected traffic flows?▼

NAT translations fail when ACL selectors or NAT pool definitions do not match the expected traffic flows. This skill provides verification and troubleshooting commands to validate NAT translations and identify common configuration mismatches on edge routers.

Related Skills

Explore More Software Engineering Skills→
louiechiu137louiechiu137

cisco-log-to-json-parsing

Parse Cisco switch log outputs into structured JSON for inventory and topology.

Community
Advanced
openeuler-mirroropeneuler-mirror
3

netfilter-conntrack-diagnosis

Diagnose Linux Netfilter, iptables, nftables, and conntrack connectivity issues by correlating rule chains with connection states.

Official
Advanced
L3DigitalNetL3DigitalNet
6

firewalld

Manage firewalld zones, services, ports, and rich rules via firewall-cmd.

Official
Intermediate
vercel-labsvercel-labs
246

vercel-firewall

Configure Vercel Firewall WAF rules, rate limiting, and bot management.

Official
Advanced