Network automation online training — Python, Ansible, Netmiko, F5 iControl
Techclick Infosec teaches network automation at https://ai.techclick.in/syllabus/network-automation. The course is 48 live hours over 8 weeks, 16 modules: Python, Paramiko, Netmiko, Ansible, F5 iControl REST, a migration change with backup and rollback, and an AI step that drafts only after secrets are removed. Labs run on EVE-NG or a container lab. Batches are weekend or evening, live online. The next batch date is confirmed on WhatsApp +91 92772 29456. Fee ₹50,000. Independent institute, not Cisco DevNet, Red Hat, or F5 University.
For network and firewall engineers who already change devices by hand and want a safe script path: read the device, back it up, change one thing, prove it, and roll it back.
Who this is for
- Network engineers who configure Cisco, FortiGate, Palo Alto, or F5 from the CLI or GUI
- Firewall engineers asked to repeat the same change across many devices
- Engineers moving a policy set and who need a backup, a diff, and a rollback before the window
Prerequisites
- You can read a routing table, a firewall policy, and an F5 virtual server
- You have used SSH. Python from zero is taught in the first modules
- You do not need to be a software developer
Full syllabus — 16 modules
M 1What to automate, and what to leave alone
- A change window, config drift, and an audit trail
- Read-only collection versus a change that touches traffic
- Why a script that cannot roll back stays out of production
M 2Python for a network engineer
- Files, lists, dicts, functions, and exceptions
- JSON and YAML, the formats devices and Ansible already use
- A virtual environment so the lab packages stay off the system Python
M 3Paramiko — SSH from Python
- Host keys, timeouts, and a failed login that must stop the script
- Send a show command and read the output before any change
- When Paramiko is the right tool and when Netmiko saves the prompt handling
M 4Netmiko device types
- Cisco IOS, NX-OS, Arista, FortiOS, and PAN-OS device types
- send_command versus send_config_set
- TextFSM and ntc-templates so the output becomes fields, not a wall of text
M 5Backup, diff, then change
- Save the running config before the window
- Diff the intended change against the backup
- A rollback command written down before the push
M 6Ansible inventory and network_cli
- Inventory groups for routers, firewalls, and F5
- ansible_network_os and ansible_connection: network_cli
- Group vars for credentials, kept out of the playbook file
M 7Ansible on Cisco, Fortinet, and Palo Alto
- cisco.ios.ios_config and a gathered facts task
- Fortinet collection for an address object and a policy
- paloaltonetworks.panos for a security rule, then a commit
M 8Make the playbook safe to run twice
- Check mode and a diff before the real run
- Ansible Vault for the device password
- ansible-lint and a task that fails closed when the device is unreachable
M 9F5 iControl REST
- Token login to BIG-IP, then a GET of nodes, pools, and virtual servers
- Create a pool member and read the stats that prove it is up
- What iControl changes versus what you still verify in the GUI
M 10When iControl is the wrong F5 tool
- Application Services 3 for an application declaration
- Declarative Onboarding for the device itself
- How to choose iControl, AS3, or a TMSH one-liner for one object
M 11Git for a network change
- One repository for playbooks, inventory samples, and the rollback note
- A commit that says which device and which change window
- Secrets stay in Vault, not in the commit
M 12Migration automation
- Export objects and policy from the source firewall or load balancer
- Map names, addresses, and NAT. A script does not invent the security decision
- Staged push, a verify command, and rollback. Palo Alto, FortiGate, Check Point, and F5 are the worked examples
M 13AI in the automation path
- Strip passwords, tokens, and customer names before any prompt
- Ask the model to draft a playbook or explain a traceback
- A person reads the draft and runs it on the lab. The model does not push production
M 14Build the lab
- EVE-NG or a container lab with one router and one BIG-IP VE
- A management network the scripts can reach, and a data plane they must not break by accident
- Snapshot the lab before the capstone
M 15Runbook and interview answers
- How you explain Netmiko versus Ansible versus iControl in an interview
- A failed change: what you check first, and what you roll back
- Cisco DevNet and Ansible topics are used as interview maps. Techclick does not issue those vendor badges
M 16Capstone
- Backup a lab device, apply one approved change, prove the new state, and roll it back
- The write-up names the command, the log line, and the rollback
- An AI draft is allowed only after the secret strip, and only as a draft
Labs
Netmiko read
Log in, run a show command, and parse it with TextFSM. No config change in this lab.
Ansible check mode
Run the playbook in check mode, read the diff, then apply it once.
F5 iControl
Get a token, list pools, add a lab pool member, and read the member state.
Migration sheet
Export a small policy set, map the objects, and write the rollback before the push.
What you get
- 48 hours live, recorded in the student portal
- Workbook with the commands used in class
- Techclick completion certificate. Vendor exams stay with Cisco, Red Hat, and F5
- Fee ₹50,000. A ₹2,000 partial registration holds the workbook before the full seat, the same pattern as the other paid courses
FAQ
Q 1What is the fee?
₹50,000 for the full course. Partial registration is ₹2,000 for the workbook. The next batch date is on WhatsApp +91 92772 29456.
Q 2Do I need to know Python already?
No. Module 2 starts from files, JSON, and functions. You do need to be able to read a network config.
Q 3Does this include F5 iControl?
Yes. You authenticate to BIG-IP, read and change a pool member through iControl REST, and you also see when AS3 is the better declaration.
Q 4Will AI push the change?
No. The model may draft a playbook after secrets are removed. You read it and you run it. Production pushes stay with the engineer.
Enroll
Weekend or evening live classes. Recordings stay in the portal.