Everything You Need to Manage Your Network

Comprehensive automation platform built for modern network operations

Switch Upgrade Automation

Comprehensive IOS upgrade workflows supporting both traditional Bundle Mode and modern Install Mode deployment methods.

Bundle Mode Workflow

  • Flash Capacity Check: Automatically verify available storage across all flash partitions and stack members
  • IOS Upload: Model-based image selection with MD5 verification and progress monitoring
  • Boot Variable Configuration: Automated boot system updates with verification
  • Scheduled Reboot: Plan device reloads during maintenance windows
  • Post-Upgrade Cleanup: Remove old images to free space for future updates

Install Mode Workflow

  • Package Upload: Intelligent package deployment with automatic model detection
  • Activation & Commit: Safe activation with optional pause-before-commit
  • Remove Inactive Packages: Automated cleanup of old package files
  • Pre/Post Verification: Baseline capture and comparison for confident validation
Bundle vs Install Mode Selection

Smart Flash Cleanup

Automatic detection and safe removal of unused images. Running image always protected from deletion.

Stack-Aware

Detects stack configurations and checks all flash locations across every member (flash1:, flash2:, etc.).

Batch Operations

Single-device or bulk operations via file upload. Schedule for maintenance windows or execute immediately.

WLAN Management Suite

Complete lifecycle management for Cisco wireless access points with intelligent automation and diagnostics

Operations Center

  • AP reload and power cycle
  • Factory reset with confirmation
  • LED location toggle
  • Uptime monitoring
  • Configuration snapshots
  • Config compare and export

AP Replacement Wizard

  • 5-step guided process
  • Source AP selection or config upload
  • QR code scanning for target AP
  • Automated config transfer
  • RF settings configuration
  • Verification checklist & report generation

Troubleshooting Tools

  • Client connection diagnostics
  • RF environment scanner
  • Interface status checker
  • Log retrieval and filtering
  • Command runner with templates
  • Detailed diagnostic reports

Batch Configuration Deployment

Push configurations to multiple access points simultaneously using predefined templates or custom commands. Templates include high-density environments, interference mitigation, and power-save modes.

Workflow Automation Engine

Build, schedule, and execute custom network automation workflows. Reduce repetitive tasks and ensure consistency across your infrastructure.

Automation Features

  • Pre-Built Templates: Device provisioning, security audits, configuration backups, and performance monitoring workflows ready to use
  • Custom Workflow Builder: Create multi-step automation sequences with conditional logic and error handling
  • Flexible Scheduling: Run workflows once, daily, weekly, monthly, or on custom schedules
  • Job History & Retries: Complete execution history with automatic retry logic for transient failures
Home / Workflow Automation JM Workflow Automation Schedule and execute automated network operations + New Job All Jobs Running Scheduled Completed Failed JOB NAME SCHEDULE LAST RUN DURATION STATUS IOS Upgrade - Site A Switches 42 devices · Bundle Mode Manual Now 14m 32s ● Running Flash Cleanup - All Switches 128 devices · Remove inactive images Sun 02:00 2d ago 8m 14s Scheduled Config Backup - Core Routers 8 devices · Running config export Daily 23:00 Yesterday 1m 47s Completed PSIRT Audit Report All inventory · Advisory scan Mon 06:00 3d ago 4m 02s Completed AP Inventory Export WLC unreachable · SSH timeout Daily 01:00 Today 30s Failed Security Compliance Check All devices · Config audit Fri 00:00 5d ago 11m 28s Scheduled 6 jobs total · 1 running · 2 scheduled · 2 completed · 1 failed

Reporting & Intelligence

Built-in reporting tools across your entire infrastructure

AP Inventory

Comprehensive reports with filtering by site, model, and status. Export to Excel, CSV, or PDF.

Network Topology

Auto-generated topology maps from CDP/LLDP discovery. Interactive visualization with interface names, link speeds, and device details. Always accurate, no Visio needed.

PSIRT Advisories

Track security advisories applicable to your network. Monitor remediation and maintain compliance.

IPAM & Planning

Visual subnet management, IP tracking, VLAN mapping, and network planning calculators.

Security & Compliance

Enterprise-grade security controls and comprehensive audit logging for compliance and operational excellence

Role-Based Access Control

  • Admin and User role separation
  • Granular permission management
  • User lifecycle management (create, edit, activate/deactivate)
  • Session management and timeout controls

Complete Audit Logging

  • Every action tracked with timestamp, user, and IP
  • Searchable and filterable activity logs
  • Per-user activity summaries
  • Export logs for compliance reporting

Secure Connectivity

  • Jump server integration
  • SSH key and TACACS support
  • Secure password hashing
  • Session encryption

Compliance Ready

  • PSIRT advisory tracking
  • Remediation status dashboard
  • Complete change audit trail
  • Pre/post verification reports

Out-of-Band Remote Recovery

Console-level access to remote devices over cellular connectivity. Recover from failed upgrades, ROMMON states, and boot failures without driving to site.

How It Works

  • Compact OOB Gateway: Pre-deployed at each remote site, connected to the switch console port via USB-to-serial adapter
  • LTE/5G Cellular Uplink: Independent connectivity path that works even when your entire network is down
  • WireGuard VPN Tunnel: Encrypted connection back to your management network. No serial ports exposed to the internet.
  • Browser-Based Console: Open a terminal session directly from the NetGUI dashboard. Full console access at 9600 baud, 8N1.
  • Health Monitoring: Continuous signal strength, VPN tunnel status, and connectivity checks with automatic alerts
OOB Console / Active Session JM Console Session: SW-BERN-01 Bern Branch Office · C9300-48P · Connected via LTE Gateway Disconnect CONNECTED LTE -67 dBm · WireGuard Up · 9600 8N1 Session: 00:04:32 Latency: 48ms Console: SW-BERN-01 (OOB Gateway: Bern) switch: set BOOT flash:cat9k_iosxe.17.09.05.SPA.bin switch: set MANUAL_BOOT no switch: boot Attempting to boot from [flash:cat9k_iosxe.17.09.05.SPA.bin] ################################################## Boot process starting... Loading IOS-XE packages... Initializing Hardware... Starting autoboot... % Checking for Running Configuration in NVRAM... Cisco IOS Software [Dublin], Catalyst L3 Switch Copyright (c) 1986-2024 by Cisco Systems, Inc. SW-BERN-01# Recovery successful. Device booted to IOS-XE 17.09.05 Type 'exit' to close console session

Recovery Scenarios

Every scenario where you'd normally need to drive to site

Failed Upgrades

Switch stuck in ROMMON after a bad IOS upgrade. Boot from console and restore the previous image.

Boot Failures

Corrupted boot variable or missing image. Fix BOOT variable and reload from console.

Password Recovery

Locked out of a device with no SSH access. Perform password recovery via console without a site visit.

Pre-Boot Diagnostics

Check hardware diagnostics, flash contents, and environment variables before the device fully boots.

Auto-Generated Network Topology

Always-accurate topology maps built from real CDP/LLDP data. No more outdated Visio diagrams that nobody maintains.

Key Capabilities

  • Automatic Discovery: Reads CDP and LLDP neighbor tables from every device to build the complete topology automatically
  • Interactive Visualization: Click any device for details, hover over links to see interface names, speeds, and VLANs
  • Always Current: Topology updates automatically on every scan. New devices, changed links, and removed connections are detected instantly
  • Change Alerts: Get notified when new links appear, devices go missing, or the topology changes unexpectedly
  • Export & Share: Export topology maps to PDF, PNG, or share a live link with your team. Perfect for documentation and change management
Home / Network Topology JM Network Topology Auto-discovered via CDP · Last scan: 4 days ago Re-Discover All Core Distribution Access Export PDF CORE-RTR-01 C9500-24Y4C SW-DIST-01 C9300-48P SW-DIST-02 C9300-48P 10 Gbps Te1/0/1 - Te1/0/49 10 Gbps Te1/0/2 - Te1/0/50 StackWise Gi1/0/9 Gi1/0/20 SW-ACC-01 C9200-24P SW-ACC-02 C9200-48P SW-ACC-03 C9200-24P SW-ACC-04 C2960X-48 Gi1/0/9 Gi1/0/6 Gi1/0/10 Gi1/0/10 Gi1/0/9 Gi1/0/10 Gi1/0/07 Gi1/0/10 AP AP-3F-01 Gi1/0/5 AP AP-3F-02 Gi1/0/6 AP AP-3F-03 Gi1/0/5 AP AP-3F-04 Gi1/0/6 AP AP-2F-01 Gi1/0/5 AP AP-2F-02 Gi1/0/10 SW-ACC-04 Catalyst 2960X-48FPS IOS: 15.2(7)E7 PSIRT: 2 Critical Uplink: Gi1/0/40 CDP neighbors: 1 Click for details Healthy Alert 10G 1G

Why Auto-Discovery Beats Manual Diagrams

Your Visio diagrams are outdated the moment someone changes a cable

The Problem with Visio

Manual diagrams go stale within weeks. Someone adds a switch, moves a cable, replaces a stack member. Nobody updates the drawing.

Always Up to Date

NetGUI reads CDP/LLDP data directly from your devices. The topology reflects what's actually connected, not what someone remembered to draw.

Share with Your Team

Export to PDF or PNG for documentation. Share live links so everyone sees the same topology. Perfect for change management and audits.

See NetGUI in Action

Schedule a personalized demo with our team and discover how NetGUI can transform your network operations.

Request Demo