What Myrmex Can Do
Read & troubleshoot
Inspect interfaces, VLANs, trunks, routing, spanning tree, and MAC/ARP tables — read-only diagnostics across IOS, IOS-XE, and NX-OS.
Hardening audit
Run a Security Posture audit against the switch configuration.
Run CLI commands
Execute operational and configuration commands, with changes applied on approval.
Config & inventory
Review the running configuration and track the model and OS version — read on demand, never stored.
Before You Start
- A Collector that can reach the switch’s management IP over SSH. See Deploying the agent and Collector mode.
- An account with CLI access to the device — read-only is enough for analysis; read-write is required to apply changes.
Step 1 — Create the Credential in Cisco
1
Enable SSH
On IOS and IOS-XE, set a hostname and IP domain name, generate host keys with
crypto key generate rsa, then enable SSH version 2 and set the VTY lines to transport input ssh with login local. On NX-OS, enable the SSH feature with feature ssh (it is on by default).2
Create a user
Create a local account for Myrmex with a strong password. On IOS/IOS-XE, use
privilege 15 for read-write access, or a lower privilege level for analysis only. On NX-OS, assign the network-admin role for read-write, or network-operator for read-only. Note the username and password — you’ll enter them in Myrmex.Step 2 — Add the Integration in Myrmex
From the Directory, choose Add Integration → Cisco Switch, then fill in:Connect
Click Connect to validate the SSH connection and finish. The switch then appears under Environment → Integrations, and you can ask the Integration Specialist about it in the Workspace.Myrmex queries the switch in real time over SSH and acts only on approval. It does not store or retain the device’s configuration or data on the Myrmex side.