Convert switch configurations to a new vendor in minutes.
Netrosetta converts Cisco, Aruba and Ruijie configurations, and lists everything you still need to do by hand, with the line and the reason.
Free for 5 devices · Runs in your browser · Nothing to install
2 of 24 need a person before pushing
bldg-a-core
bldg-a-core.txt · Cisco IOS to Ruijie RGOS
- Set the enable secret — the source’s hash cannot be read by RGOS, so the switch has no enable password.
- Recreate the account ‘admin’ — its password hash cannot be carried, so the account does not exist yet.
- Generate the SSH host key before relying on SSH: run
crypto key generate rsa.
Converts in any direction between
- Cisco IOS & IOS-XE
- Aruba AOS-CX
- Ruijie RGOS
Nothing lost in translation.
You know exactly what’s left before migration night.
A clear list of what’s left
Anything that can’t be converted automatically is listed with its line number and the reason. No surprises on migration night.
A whole site in one go
Point the app at a folder of configurations. Every device is converted, with one summary sorted by what needs attention.
With a licencePrivate by design
The app runs on your own computer. Client configurations are never uploaded, and no internet connection is needed.
With a licenceHow it works
Three steps from old to new.
Collect
Save the running configuration of each switch you’re replacing.
Convert
Choose the new vendor and switch model, or let the app read the new switch over SSH. Netrosetta converts every configuration.
Review and deploy
Handle the few items marked for a person, then load the new configurations.
The report
Know what needs attention before you start.
Each device gets a report that separates what was converted from what needs a decision, and points to the exact line.
- Not carriedLeft out of the conversion, with what to do about each one.
- Verify after cutoverCarried, but works differently on the new switch. Check it once it’s live.
- HandledNeeded nothing from you. Listed so nothing goes unaccounted for.
-
Per-VLAN spanning-tree priorities were not carried
The source sets them (vlan 10,20,30: 24576; vlan 40,99: 28672), but RGOS has no per-VLAN tree to give them to. -
Spanning tree changes from Rapid PVST+ to RSTP
RGOS has no per-VLAN spanning tree, so one tree now covers every VLAN. -
Ports 1/1/1-2 moved to TenGigabitEthernet 0/49-50
Their numbers were already taken by the ports before them, so they take the next free ports on the new switch. -
version 15.2was skipped
The software version of the source switch.
Real output, from the sample configuration we publish.
Health check
Leave the old mistakes on the old switch.
The health check reads each switch as it runs today and lists its security risks and mistakes, worst first, with the fix for each one written for the new switch.
- Passwords that can be read back from the configuration
- SNMP and management access open to more than it should be
- Logins that never lock anyone out
- Layer-2 setups that can cut a switch off
- VLANs and access lists used but never defined
-
Web management over plain HTTP is enabled
Disable the HTTP server; keep HTTPS only if the web interface is needed. -
SNMP v1/v2c in use
Move monitoring to SNMPv3 with authentication and privacy (authPriv). -
SSH is not limited to version 2
Set SSH to version 2 only. -
Failed logins never lock anyone out
Lock logins for 15 minutes after 3 failures.
Real output, from the same sample configuration.
Client configurations never leave your network.
With a licence, Netrosetta runs entirely on your own computer. Nothing is uploaded, and it works on networks with no internet access.
- No uploads
- Works offline
- Suited to isolated networks
See it work on your own configuration.
Five devices free. No installation, no card.