468d4dd6fd
C1 — Persistent connection pool: - Added CISCO_SWITCH_PERSISTENT_CONNECTION setting (default false) - Added get_connection() / close_connection() with thread-safe locking - run_command(), run_config_commands(), and test_connection() all honour persistent mode - Added cisco_switch_reconnect() tool to force a fresh connection C2 — TextFSM structured output: - Added run_command_structured() that tries TextFSM, falls back to raw JSON-wrapped text - Updated 6 diagnostic tools to return structured JSON: show_version, show_interfaces_status, show_mac_address_table, show_vlan_brief, show_ip_route, show_cdp_neighbors - Added cisco_switch_test_connection_structured() tool - Added cisco_switch_get_mcp_config() alias - Added .gitignore for __pycache__ and build artifacts
Cisco Switch MCP
MCP server for Cisco Catalyst 3650 and other IOS-XE switches. Connects via SSH using Netmiko.
Prerequisites on the switch
- SSH enabled:
ip domain-name local.lan+crypto key generate rsa+ip ssh version 2 - User account with privilege 15 (or enable password configured)
- Management IP reachable from the Hermes LXC
Install
/usr/local/lib/hermes-agent/venv/bin/pip install -e /root/cisco-switch-mcp
Hermes config
Add to ~/.hermes/config.yaml:
mcp_servers:
cisco-switch:
command: /usr/local/lib/hermes-agent/venv/bin/cisco-switch-mcp
timeout: 120
enabled: true
env:
CISCO_SWITCH_HOST: "10.77.30.40"
CISCO_SWITCH_USERNAME: "admin"
CISCO_SWITCH_PASSWORD: "your_password"
CISCO_SWITCH_DEVICE_TYPE: "cisco_xe"
CISCO_SWITCH_ALLOW_WRITES: "false"
Or: echo Y | hermes mcp add cisco-switch --command /usr/local/lib/hermes-agent/venv/bin/cisco-switch-mcp --env CISCO_SWITCH_HOST=...
Restart dashboard/gateway and start a new chat session.
Tools (40+)
| Category | Examples |
|---|---|
| System | version, inventory, CPU, memory, environment, stack status |
| Interfaces | status, descriptions, counters, port-channels |
| VLAN/STP | vlan brief, spanning-tree |
| L2 | MAC table, CDP/LLDP neighbors, ARP |
| Diagnostics | logging, ping, traceroute, running-config |
| Writes | shutdown port, set access VLAN, description, save config |
Safety
- Writes disabled by default (
CISCO_SWITCH_ALLOW_WRITES=false) - Blocks
reload,write erase,format - Audit log at
CISCO_SWITCH_AUDIT_LOG_PATH
device_type
Catalyst 3650 runs IOS-XE. Use cisco_xe (default). If connection fails, try cisco_ios.