Describe your network. Get it back validated.

Ask Claude for a Packet Tracer lab, a campus design or the diagnosis of an outage. The skill writes a single model of the network, validates it from L1 to L7 and generates configs, documentation and an interactive diagram that never contradict each other.

npx skills add whetstone-dev/network-engineering

Read the docs

Claude CodeCisco Packet TracerIOS · IOS XE · ASANode ≥ 22.18, zero dependencies

pt-3vlan-roas-dhcp/topology.html

Open diagram ↗

BEGINNER0 errors · 4/4 tests2911 router + two 2960s, 3 VLANs + management + unused native, router-on-a-stick, DHCP on the router and SSH.

This is the real artifact produced by netlab build, not a screenshot. Drag, zoom and open a device to see its config.

16netlab commands

17topic references

7validated example networks

L1–L7whole-network validation

0npm dependencies

VLAN 1001 · How it works

One model. Everything else is generated.

The network lives in a *.net.json file. Diagram, configs, tables and tests all come from that same validated model, so the diagram never contradicts the config.

requirements

You describe it

“3 VLANs, one router, two switches, DHCP and SSH”. Claude only asks what changes the design and states its assumptions.

source of truth

Network model

networks/lab.net.json with devices, exact ports, VLANs, VLSM addressing, routing and expected tests.

netlab validate

Validation

Trunks and native VLAN, gateways, overlaps, DHCP, OSPF/EIGRP, STP, HSRP, ACL, NAT, VPN… plus simulated round-trip pings.

netlab build

topology.htmldiagram

configs/*.txtIOS · ASA

README.mddocs

analysis.jsondiagnostics

Something changed? Edit the model and regenerate. Outputs are never patched by hand.

VLAN 2002 · Usage examples

Ask the way you would ask an engineer.

The skill kicks in on any networking task, or call it with /network-engineering. Pick a request:

claude — ~/networks

I need a Packet Tracer lab with 3 VLANs, one router, two switches and DHCP.

network-engineering design flow
  Topology   1 × 2911 (router-on-a-stick) · 2 × 2960
  VLANs      10 SALES · 20 ADMIN · 30 IT · 99 management · 999 unused native
  Model      networks/lab-3vlan.net.json

$ netlab validate networks/lab-3vlan.net.json
OK    ping PC1 → PC3 (expected success): Round trip OK
OK    ping PC1 → PC2 (expected success): Round trip OK
OK    ping PC5 → 192.168.99.11 (expected success): Round trip OK
OK    ping PC4 → 192.168.20.1 (expected success): Round trip OK
Summary: 0 errors, 0 warnings, 7 notes · 8 devices, 7 links

$ netlab build networks/lab-3vlan.net.json -o out/lab
  topology.html   interactive diagram
  README.md       documentation (inventory, IP, VLANs, ports, routing, configs, verification)
  configs/        8 candidate files (redacted previews)
  topology.mmd    Mermaid · analysis.json  diagnostics and tables
Validation: 0 errors, 0 warnings, 7 notes · tests 4/4 OK

Summarized answer · netlab output is real, run on the repository examples

VLAN 3003 · What’s inside

It reasons about the whole network, not loose commands.

Validates the whole network

Catches what breaks a lab before you paste a single command: VLAN not allowed on the trunk, native VLAN mismatch, gateway outside the subnet, DHCP without a server, adjacencies that never form, STP root misaligned with HSRP.

L1L2L3L4L5L6L7

Diagram in a single HTML

Per-device inspector with its config, physical and L3 views, VLAN filter, highlighted ping paths and SVG/PNG export. Works offline.

Validated candidate configs

Cisco IOS / IOS XE and ASA per device, generated only when the network passes the quality gate. Passwords are redacted by default; GUI steps for Packet Tracer PCs and servers.

! R1 — cisco 2911 (IOS) interface GigabitEthernet0/0.10 encapsulation dot1Q 10 ip address 192.168.10.1 255.255.255.0 ip dhcp pool SALES default-router 192.168.10.1

Never invents commands

Flags what works where, separates lab from production, and labels any sample show output as illustrative.

[PT] Packet Tracer[IOS][XE] IOS XE[HW] real hardware

Teaching mode

STEP 1…N with what we do, why, commands, expected result and the common mistake.

BEGINNERINTERMEDIATEADVANCED

Import and compare

From show running-config + show cdp neighbors to a model, without importing secrets. diff between versions with a change diagram.

Reads screenshots

Reads Packet Tracer screenshots, diagrams and show output, separating facts from assumptions.

CONFIRMEDR1 Gi0/0 is a trunk

INFERREDVLAN 20 = ADMIN

UNKNOWNPC4 subnet mask

VLAN 4004 · netlab toolkit

Also works without Claude.

The same CLI the skill uses. TypeScript run natively by Node ≥ 22.18: no npm install, no build step.

Design

From the model to everything else.

initStarter model with autocomplete (JSON Schema)
validateQuality gate: L1–L7 checks + simulated pings; --strict for production
buildDiagram, docs, configs, Mermaid, analysis
configValidated, redacted CLI per device: IOS, IOS XE or ASA
render · docs · mermaidEach output on its own

Simulate

Before touching the device.

traceRound-trip ping with LPM, ACL, NAT, HSRP, ASA and IPsec
routesTables with real AD and metric; --ipv6 with OSPFv3
catalogPacket Tracer models and their interfaces

Existing networks

Document and audit.

importshow running-config + CDP → model
diffAdded, modified and removed, with a diagram

Calculate

Error-free addressing.

subnetNetwork, mask, range and broadcast
vlsmA block split by requested hosts
ipv6 --splitIPv6 subnets
eui64IPv6 interface ID from the MAC

node scripts/netlab.ts help

validate exits with code 1 on errors: use it in CI.Full command reference

VLAN 5005 · Install

One command. Then just ask.

# Install with skills.sh
$ npx skills add whetstone-dev/network-engineering

# Global and non-interactive, straight into Claude Code
$ npx skills add whetstone-dev/network-engineering --agent claude-code --global --yes

Update: npx skills update

Install

With npx or git clone. Restart Claude Code so it picks up the skill.

Describe your network

Requirements, a Packet Tracer screenshot or your show running-config.

Get a validated network

Design, tables, per-device configs, verification and the diagram in topology.html.

Claude CodeNode.js ≥ 22.18MIT

Your next lab is one message away.

npx skills add whetstone-dev/network-engineering

View on GitHub ↗