s✳
← back to my work

ITT633 · Network Automation

GrandStay↗

A hotel network automation project connecting Python scripts to Cisco IOS devices over SSH in a GNS3 virtual lab. The workflow provisions VLANs, inter-VLAN static routing, and access control policies across back-office, front-office, and guest-room blocks.

PythonNetmikoGNS3SSH
Original code from the submitted automation project.open original code ↗
GrandStay_Automation / main.py
# Original project orchestrator
from vlan_automation import provision_vlans
from routing_automation import provision_routing
from acl_automation import provision_acls
from verify import run_verification

def main():
    provision_vlans()
    provision_routing()
    provision_acls()
    run_verification()

Explore the Python modules behind this automation project. GNS3 and its virtual devices run locally. I used Python, Netmiko, SSH, and the GNS3 VM to configure and inspect the network.

THE IDEA

what’s the project?

The network inventory covers eight switches and one edge router. The network separates Staff, Management, Guest, IoT, CCTV, and Server/Management traffic into six VLANs.

MY INVOLVEMENT

where I came in.

Academic project work in network automation. I used SSH and a GNS3 VM environment for device access and automation.

UNDER THE HOOD

how it connects.

VS Code on the host → SSH management network → Cisco IOS devices running in GNS3. Netmiko sends configuration sets and retrieves operational state.

  • A master Python workflow runs VLAN provisioning, static routing, ACL configuration, and verification in sequence.
  • Role-based inventory maps access switches to their intended VLAN assignments.
  • Verification scripts retrieve VLAN, routing, and ACL state; a separate mock harness supports development without live devices.
Lab notes +

These notes document the project; they do not represent a fresh lab test. In particular, the supplied CCTV ACL interface direction needs live verification before claiming that traffic toward CCTV is blocked. Internet reachability also depends on a working upstream route and NAT.

IN THE ORIGINAL LAB

a quick walkthrough.

  1. Start the GNS3 VM and lab devices. Confirm management reachability from the host.
  2. Configure SSH access and provide device credentials locally. Open the automation folder in VS Code.
  3. Run the orchestrator, then inspect VLAN, static-route, and ACL output.
  4. Test permitted and denied paths from the endpoint VMs; check counters and ACL direction, allowing for an initial ARP-related timeout.
keep exploringExamify ↗