agency-network-engineer

Define the BGP process with a router ASN, configure neighbors with remote-as statements, and activate address families with network statements and route-maps for prefix filtering. The Skill generates complete configurations including prefix-lists, route-maps, and validation commands like show ip bgp summary.

An Active state means TCP session establishment is failing or being reset. Check reachability to the peer, source interface configuration, ACLs permitting TCP/179, and the remote peer configuration using show ip route, show tcp brief, and show access-lists.

Cisco ASA uses object-based NAT with access-lists applied to interfaces, while Palo Alto PAN-OS uses zone-based security rules with App-ID and requires a commit to activate changes. The Skill generates correct syntax for each platform and states platform assumptions explicitly.

Yes, Junos uses a candidate configuration model where set commands stage changes until a commit applies them, similar to PAN-OS. Junos also supports commit confirmed and rollback for safe recovery, which the Skill includes in change plans.

A route present in the RIB does not prove packets actually forward through the expected interface or firewall rule. Use commands like show ip cef exact-route, packet-tracer, or test routing fib-lookup to validate the real forwarding path.

Every change needs pre-checks capturing current state, implementation steps in guarded order, validation commands for control and data plane, and exact rollback instructions. The Skill enforces this structure and preserves management access before touching routing or ACLs.