Workspace
No device loaded
Config Verify › Pre/Post Validation ·last compared: —
Pre/Post Validation
Waiting for verification data
CLI Generator
Viewing Snapshot — raw CLI output is not stored.
Step 1 · Capture

Capture Pre/Post Outputs

Copy the recommended command set, run it before and after the network change, then paste the full outputs into the Pre-check and Post-check fields.

Quick Start
1 Copy commands› 2 Run before change› 3 Paste Pre-check› 4 Run after change› 5 Paste Post-check› 6 Compare
Preparation
terminal length 0 show clock
Platform
show version show redundancy show module
Routing
show ip route show ip route summary show ip ospf neighbor show ip protocols
Layer 2
show interfaces status show etherchannel summary show cdp neighbors show spanning-tree root show l2vpn evpn summary
Configuration
show running-config
Run this exact same command set before and after the change. Keep hostname/prompt lines in the pasted output when possible.
terminal length 0
show clock
show version
show redundancy
show running-config
show ip route
show ip route summary
show interfaces status
show etherchannel summary
show ip ospf neighbor
show cdp neighbors
show ip protocols
show spanning-tree root
show l2vpn evpn summary
show module
Pre-check before change
Capture while the device is healthy, before the change.
Post-check after change
Capture after the change and full network convergence.
Optional Report Details optional
These fields are optional and only used in exported reports and history context.
Supported output

This module parses Cisco IOS-XE / Catalyst-style show output:

IOS-XE / CatalystIPv4 route tableOSPF EtherChannelSTPCDP Redundancy / SSOModulesVersion
Limitations

Not fully supported yet — these will be handled by future NeiraOps modules/parsers:

NX-OSFortiGateJuniperAruba ACIIPv6BGPVRF-aware routes

Waiting for verification data

Paste pre-check and post-check outputs to begin pre/post validation. You'll get a health summary, route and neighbor diffs, and a recommended next action.

FortiGate Tools · CLI Generator

Bulk Object & Policy CLI Generator

Paste multiple IPs, subnets, or FQDNs to instantly generate FortiGate address objects, address groups, and optional firewall policy CLI commands.

Bulk Input
Supported: Host IP, Subnet/CIDR, FQDN/Hostname — one per line
Naming Convention

Choose how FortiGate address object names are generated. Default naming keeps IP addresses and FQDNs readable. Use the underscore or dash variables only if your environment requires strict naming without dots.

Quick Presets
{ip}{ip_underscore}{ip_dash}{type}
{network}{network_underscore}{network_dash}{cidr}{mask}
{fqdn}{fqdn_underscore}{fqdn_dash}
Readable (keeps dots)
{ip} → 10.10.10.1 {network} → 10.10.20.0 {cidr} → 24 {network}/{cidr} → 10.10.20.0/24 {mask} → 255.255.255.0 {fqdn} → server.example.com
Formatted (strict naming)
{ip_underscore} → 10_10_10_1 {ip_dash} → 10-10-10-1 {network_underscore} → 10_10_20_0 {fqdn_underscore} → server_example_com {fqdn_dash} → server-example-com
Naming Mode
Readable keeps the CIDR slash (N_10.10.20.0/24) — FortiOS accepts / in quoted object names. Strict replaces it with _ (N_10.10.20.0_24).
Auto-sanitize object names (replaces unsupported chars with _; keeps dots, dashes, and — in Readable mode — the CIDR slash)
Parsed Preview

No input yet

Paste IPs, subnets, or FQDNs in the Bulk Input area above to see the parsed preview.

Address Group
Generate address group
Firewall Policy (optional)
Generate firewall policy
Generated CLI Output

No CLI generated yet

Configure naming templates, paste your input, then click Generate CLI.