diff --git "a/datasets/cisco_dataset.jsonl" "b/datasets/cisco_dataset.jsonl"
new file mode 100644--- /dev/null
+++ "b/datasets/cisco_dataset.jsonl"
@@ -0,0 +1,1000 @@
+{"instruction": "Configure syslog to 77.233.106.248", "output": "logging host 141.185.231.191\nlogging trap warnings\n# Sends logs to syslog server 141.185.231.191."}
+{"instruction": "Ping host 148.21.37.215", "output": "ping 140.185.18.11\n# Sends ICMP echo request."}
+{"instruction": "Shutdown interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/3\n shutdown\n# Disables the interface."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Create static NAT for inside host 19.46.255.231 to 151.87.166.148", "output": "object network INSIDE_HOST\n host 114.196.148.60\n nat (inside,outside) static 104.39.154.153\n# Static NAT mapping for 114.196.148.60."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Configure AnyConnect VPN pool 128.220.74.0-255", "output": "ip local pool ANYCONNECT_POOL 58.125.154.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Enable SNMP with community PUBLIC", "output": "snmp-server community MONITOR RO\n# Configures SNMP read-only community."}
+{"instruction": "Enable interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/0\n no shutdown\n# Enables the interface."}
+{"instruction": "Deny HTTP from 96.18.107.147", "output": "access-list OUTSIDE-IN extended deny tcp host 72.53.248.202 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 72.53.248.202."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Remove existing NAT rule for 117.15.53.177", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 108.28.83.198\n# Removes NAT for 108.28.83.198."}
+{"instruction": "Create static NAT for inside host 163.202.226.217 to 128.96.110.179", "output": "object network INSIDE_HOST\n host 33.137.156.125\n nat (inside,outside) static 18.16.108.187\n# Static NAT mapping for 33.137.156.125."}
+{"instruction": "Create IPSec VPN tunnel to peer 161.242.138.19", "output": "crypto map VPN-MAP 10 set peer 117.134.172.68\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Assign VLAN 90 to interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/4\n switchport access vlan 173\n# Assigns VLAN 173."}
+{"instruction": "Block IP 12.155.35.187", "output": "access-list OUTSIDE-IN extended deny ip host 166.20.206.49 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 166.20.206.49."}
+{"instruction": "Deny HTTP from 189.56.167.54", "output": "access-list OUTSIDE-IN extended deny tcp host 130.245.168.138 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 130.245.168.138."}
+{"instruction": "Configure AnyConnect VPN pool 67.4.79.0-255", "output": "ip local pool ANYCONNECT_POOL 101.35.14.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Create IPSec VPN tunnel to peer 84.214.127.154", "output": "crypto map VPN-MAP 10 set peer 50.76.47.61\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Allow SSH access only from 107.100.241.51", "output": "ip access-list standard SSH_ACCESS\n permit 45.235.169.44\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 45.235.169.44."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Create static NAT for inside host 114.215.178.26 to 166.68.68.156", "output": "object network INSIDE_HOST\n host 36.67.158.188\n nat (inside,outside) static 87.206.184.110\n# Static NAT mapping for 36.67.158.188."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Block IP 82.151.33.88", "output": "access-list OUTSIDE-IN extended deny ip host 118.128.116.207 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 118.128.116.207."}
+{"instruction": "Configure syslog to 84.234.68.157", "output": "logging host 161.214.143.32\nlogging trap warnings\n# Sends logs to syslog server 161.214.143.32."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Ping host 104.239.54.46", "output": "ping 22.133.25.214\n# Sends ICMP echo request."}
+{"instruction": "Configure syslog to 166.214.213.115", "output": "logging host 89.8.227.103\nlogging trap warnings\n# Sends logs to syslog server 89.8.227.103."}
+{"instruction": "Deny HTTP from 121.226.84.163", "output": "access-list OUTSIDE-IN extended deny tcp host 183.123.97.135 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 183.123.97.135."}
+{"instruction": "Configure syslog to 130.168.180.227", "output": "logging host 128.44.55.197\nlogging trap warnings\n# Sends logs to syslog server 128.44.55.197."}
+{"instruction": "Block IP 52.119.121.25", "output": "access-list OUTSIDE-IN extended deny ip host 39.178.194.179 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 39.178.194.179."}
+{"instruction": "Configure syslog to 39.92.27.143", "output": "logging host 122.37.196.170\nlogging trap warnings\n# Sends logs to syslog server 122.37.196.170."}
+{"instruction": "Create static NAT for inside host 168.54.183.132 to 42.209.111.190", "output": "object network INSIDE_HOST\n host 17.214.216.130\n nat (inside,outside) static 68.20.157.179\n# Static NAT mapping for 17.214.216.130."}
+{"instruction": "Block IP 154.207.184.194", "output": "access-list OUTSIDE-IN extended deny ip host 190.118.82.26 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 190.118.82.26."}
+{"instruction": "Add static route to network 87.81.26.214/24 via 36.130.95.160", "output": "route outside 161.57.101.96 255.255.255.0 134.7.120.18\n# Adds static route."}
+{"instruction": "Enable SNMP with community MONITOR", "output": "snmp-server community MONITOR RO\n# Configures SNMP read-only community."}
+{"instruction": "Ping host 114.184.87.167", "output": "ping 151.173.245.11\n# Sends ICMP echo request."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Assign VLAN 38 to interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/1\n switchport access vlan 168\n# Assigns VLAN 168."}
+{"instruction": "Deny HTTP from 24.197.236.48", "output": "access-list OUTSIDE-IN extended deny tcp host 80.208.62.135 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 80.208.62.135."}
+{"instruction": "Enable SNMP with community INTERNAL", "output": "snmp-server community INTERNAL RO\n# Configures SNMP read-only community."}
+{"instruction": "Enable interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/1\n no shutdown\n# Enables the interface."}
+{"instruction": "Configure AnyConnect VPN pool 154.41.156.0-255", "output": "ip local pool ANYCONNECT_POOL 35.102.72.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Enable SNMP with community BACKUP", "output": "snmp-server community BACKUP RO\n# Configures SNMP read-only community."}
+{"instruction": "Configure AnyConnect VPN pool 159.99.143.0-255", "output": "ip local pool ANYCONNECT_POOL 36.87.244.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Configure syslog to 116.228.129.225", "output": "logging host 12.104.135.70\nlogging trap warnings\n# Sends logs to syslog server 12.104.135.70."}
+{"instruction": "Shutdown interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/0\n shutdown\n# Disables the interface."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Configure dynamic PAT for internal network 146.87.183.2/24", "output": "object network INSIDE_NET\n subnet 113.104.27.132 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Assign VLAN 60 to interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/1\n switchport access vlan 116\n# Assigns VLAN 116."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Deny HTTP from 68.77.128.108", "output": "access-list OUTSIDE-IN extended deny tcp host 145.58.49.193 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 145.58.49.193."}
+{"instruction": "Configure AnyConnect VPN pool 45.247.123.0-255", "output": "ip local pool ANYCONNECT_POOL 151.98.4.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Add static route to network 137.79.115.85/24 via 54.78.181.86", "output": "route outside 131.180.239.203 255.255.255.0 150.154.99.221\n# Adds static route."}
+{"instruction": "Ping host 92.158.255.130", "output": "ping 144.223.83.18\n# Sends ICMP echo request."}
+{"instruction": "Block IP 147.57.210.2", "output": "access-list OUTSIDE-IN extended deny ip host 53.0.213.175 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 53.0.213.175."}
+{"instruction": "Remove existing NAT rule for 57.91.231.183", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 70.14.185.152\n# Removes NAT for 70.14.185.152."}
+{"instruction": "Remove existing NAT rule for 77.215.240.12", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 156.109.215.74\n# Removes NAT for 156.109.215.74."}
+{"instruction": "Assign VLAN 56 to interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/3\n switchport access vlan 136\n# Assigns VLAN 136."}
+{"instruction": "Enable SNMP with community MONITOR", "output": "snmp-server community INTERNAL RO\n# Configures SNMP read-only community."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Create IPSec VPN tunnel to peer 72.206.188.106", "output": "crypto map VPN-MAP 10 set peer 143.193.248.127\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Block IP 34.180.186.86", "output": "access-list OUTSIDE-IN extended deny ip host 81.155.60.11 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 81.155.60.11."}
+{"instruction": "Create IPSec VPN tunnel to peer 111.132.243.45", "output": "crypto map VPN-MAP 10 set peer 110.183.233.190\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Configure dynamic PAT for internal network 109.118.250.149/24", "output": "object network INSIDE_NET\n subnet 135.59.34.27 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Configure dynamic PAT for internal network 56.229.73.247/24", "output": "object network INSIDE_NET\n subnet 131.130.90.97 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Deny HTTP from 46.203.211.211", "output": "access-list OUTSIDE-IN extended deny tcp host 34.116.252.184 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 34.116.252.184."}
+{"instruction": "Assign VLAN 172 to interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/4\n switchport access vlan 67\n# Assigns VLAN 67."}
+{"instruction": "Configure dynamic PAT for internal network 110.173.155.67/24", "output": "object network INSIDE_NET\n subnet 107.122.232.126 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Add static route to network 175.177.80.62/24 via 97.152.31.4", "output": "route outside 159.216.80.251 255.255.255.0 186.188.141.209\n# Adds static route."}
+{"instruction": "Assign VLAN 23 to interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/0\n switchport access vlan 14\n# Assigns VLAN 14."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Create IPSec VPN tunnel to peer 113.70.48.81", "output": "crypto map VPN-MAP 10 set peer 16.219.42.153\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Remove existing NAT rule for 34.151.253.60", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 101.191.49.10\n# Removes NAT for 101.191.49.10."}
+{"instruction": "Shutdown interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/3\n shutdown\n# Disables the interface."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Ping host 136.87.177.102", "output": "ping 91.69.254.107\n# Sends ICMP echo request."}
+{"instruction": "Ping host 143.240.76.86", "output": "ping 17.26.197.252\n# Sends ICMP echo request."}
+{"instruction": "Remove existing NAT rule for 12.6.171.27", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 156.235.173.74\n# Removes NAT for 156.235.173.74."}
+{"instruction": "Configure syslog to 14.88.240.241", "output": "logging host 93.157.176.158\nlogging trap warnings\n# Sends logs to syslog server 93.157.176.158."}
+{"instruction": "Block IP 28.206.167.28", "output": "access-list OUTSIDE-IN extended deny ip host 152.222.243.76 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 152.222.243.76."}
+{"instruction": "Block IP 22.185.178.148", "output": "access-list OUTSIDE-IN extended deny ip host 74.52.66.184 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 74.52.66.184."}
+{"instruction": "Create IPSec VPN tunnel to peer 20.84.7.81", "output": "crypto map VPN-MAP 10 set peer 38.209.216.76\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Enable interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/4\n no shutdown\n# Enables the interface."}
+{"instruction": "Enable interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/4\n no shutdown\n# Enables the interface."}
+{"instruction": "Add static route to network 16.122.199.238/24 via 60.8.167.34", "output": "route outside 25.8.193.155 255.255.255.0 35.81.101.230\n# Adds static route."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Configure AnyConnect VPN pool 126.162.144.0-255", "output": "ip local pool ANYCONNECT_POOL 82.183.178.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Create static NAT for inside host 106.158.232.30 to 105.165.158.57", "output": "object network INSIDE_HOST\n host 30.102.55.78\n nat (inside,outside) static 96.174.22.241\n# Static NAT mapping for 30.102.55.78."}
+{"instruction": "Assign VLAN 132 to interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/0\n switchport access vlan 67\n# Assigns VLAN 67."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Enable SNMP with community BACKUP", "output": "snmp-server community PUBLIC RO\n# Configures SNMP read-only community."}
+{"instruction": "Configure AnyConnect VPN pool 24.125.238.0-255", "output": "ip local pool ANYCONNECT_POOL 39.141.74.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Allow SSH access only from 10.247.25.67", "output": "ip access-list standard SSH_ACCESS\n permit 154.198.136.88\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 154.198.136.88."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Shutdown interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/2\n shutdown\n# Disables the interface."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Assign VLAN 178 to interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/5\n switchport access vlan 49\n# Assigns VLAN 49."}
+{"instruction": "Assign VLAN 116 to interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/2\n switchport access vlan 156\n# Assigns VLAN 156."}
+{"instruction": "Assign VLAN 196 to interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/3\n switchport access vlan 30\n# Assigns VLAN 30."}
+{"instruction": "Assign VLAN 105 to interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/3\n switchport access vlan 109\n# Assigns VLAN 109."}
+{"instruction": "Add static route to network 124.250.25.30/24 via 166.239.113.211", "output": "route outside 183.99.27.13 255.255.255.0 63.40.17.93\n# Adds static route."}
+{"instruction": "Remove existing NAT rule for 143.125.158.245", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 109.48.200.112\n# Removes NAT for 109.48.200.112."}
+{"instruction": "Allow SSH access only from 178.6.62.113", "output": "ip access-list standard SSH_ACCESS\n permit 97.215.140.209\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 97.215.140.209."}
+{"instruction": "Add static route to network 185.57.192.81/24 via 125.181.70.220", "output": "route outside 41.37.15.70 255.255.255.0 90.173.76.72\n# Adds static route."}
+{"instruction": "Remove existing NAT rule for 141.31.120.52", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 52.20.252.80\n# Removes NAT for 52.20.252.80."}
+{"instruction": "Enable SNMP with community PUBLIC", "output": "snmp-server community MONITOR RO\n# Configures SNMP read-only community."}
+{"instruction": "Create static NAT for inside host 15.38.236.222 to 127.181.212.130", "output": "object network INSIDE_HOST\n host 141.181.94.98\n nat (inside,outside) static 97.127.13.85\n# Static NAT mapping for 141.181.94.98."}
+{"instruction": "Create IPSec VPN tunnel to peer 46.133.141.230", "output": "crypto map VPN-MAP 10 set peer 107.19.190.21\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Configure syslog to 48.186.38.242", "output": "logging host 75.84.55.132\nlogging trap warnings\n# Sends logs to syslog server 75.84.55.132."}
+{"instruction": "Block IP 84.230.251.73", "output": "access-list OUTSIDE-IN extended deny ip host 48.74.178.200 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 48.74.178.200."}
+{"instruction": "Configure syslog to 110.7.246.190", "output": "logging host 157.203.33.143\nlogging trap warnings\n# Sends logs to syslog server 157.203.33.143."}
+{"instruction": "Configure AnyConnect VPN pool 61.118.64.0-255", "output": "ip local pool ANYCONNECT_POOL 129.154.2.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Ping host 74.20.70.132", "output": "ping 162.51.157.231\n# Sends ICMP echo request."}
+{"instruction": "Assign VLAN 95 to interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/4\n switchport access vlan 111\n# Assigns VLAN 111."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Deny HTTP from 79.59.170.78", "output": "access-list OUTSIDE-IN extended deny tcp host 127.120.127.116 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 127.120.127.116."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Create static NAT for inside host 50.24.12.135 to 45.13.109.193", "output": "object network INSIDE_HOST\n host 150.245.144.157\n nat (inside,outside) static 54.11.208.8\n# Static NAT mapping for 150.245.144.157."}
+{"instruction": "Ping host 11.54.110.247", "output": "ping 157.78.145.1\n# Sends ICMP echo request."}
+{"instruction": "Enable SNMP with community PUBLIC", "output": "snmp-server community MONITOR RO\n# Configures SNMP read-only community."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Create static NAT for inside host 76.151.207.132 to 81.182.192.84", "output": "object network INSIDE_HOST\n host 65.197.162.178\n nat (inside,outside) static 32.81.244.85\n# Static NAT mapping for 65.197.162.178."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Enable interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/1\n no shutdown\n# Enables the interface."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Assign VLAN 162 to interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/5\n switchport access vlan 37\n# Assigns VLAN 37."}
+{"instruction": "Remove existing NAT rule for 35.10.196.39", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 172.169.187.176\n# Removes NAT for 172.169.187.176."}
+{"instruction": "Create static NAT for inside host 35.160.232.159 to 64.189.53.159", "output": "object network INSIDE_HOST\n host 192.162.193.226\n nat (inside,outside) static 43.202.189.182\n# Static NAT mapping for 192.162.193.226."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Configure dynamic PAT for internal network 10.144.129.73/24", "output": "object network INSIDE_NET\n subnet 164.210.148.220 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Enable interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/3\n no shutdown\n# Enables the interface."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Shutdown interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/1\n shutdown\n# Disables the interface."}
+{"instruction": "Configure syslog to 103.233.64.30", "output": "logging host 188.57.189.46\nlogging trap warnings\n# Sends logs to syslog server 188.57.189.46."}
+{"instruction": "Configure dynamic PAT for internal network 65.76.208.216/24", "output": "object network INSIDE_NET\n subnet 148.177.2.251 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Assign VLAN 29 to interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/3\n switchport access vlan 172\n# Assigns VLAN 172."}
+{"instruction": "Configure dynamic PAT for internal network 89.35.183.34/24", "output": "object network INSIDE_NET\n subnet 64.162.151.78 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Add static route to network 40.224.44.229/24 via 137.98.144.252", "output": "route outside 49.120.2.49 255.255.255.0 94.20.13.27\n# Adds static route."}
+{"instruction": "Ping host 22.248.147.218", "output": "ping 22.175.148.32\n# Sends ICMP echo request."}
+{"instruction": "Allow SSH access only from 192.25.2.121", "output": "ip access-list standard SSH_ACCESS\n permit 11.116.40.160\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 11.116.40.160."}
+{"instruction": "Deny HTTP from 47.20.36.123", "output": "access-list OUTSIDE-IN extended deny tcp host 20.91.90.166 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 20.91.90.166."}
+{"instruction": "Configure AnyConnect VPN pool 148.3.149.0-255", "output": "ip local pool ANYCONNECT_POOL 170.197.80.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Create static NAT for inside host 158.241.158.163 to 46.95.127.30", "output": "object network INSIDE_HOST\n host 99.147.35.199\n nat (inside,outside) static 120.169.89.231\n# Static NAT mapping for 99.147.35.199."}
+{"instruction": "Allow SSH access only from 62.164.164.43", "output": "ip access-list standard SSH_ACCESS\n permit 142.64.181.169\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 142.64.181.169."}
+{"instruction": "Enable interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/0\n no shutdown\n# Enables the interface."}
+{"instruction": "Block IP 25.39.137.83", "output": "access-list OUTSIDE-IN extended deny ip host 119.15.164.65 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 119.15.164.65."}
+{"instruction": "Remove existing NAT rule for 113.150.131.56", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 57.116.117.108\n# Removes NAT for 57.116.117.108."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Allow SSH access only from 36.85.64.123", "output": "ip access-list standard SSH_ACCESS\n permit 22.70.171.201\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 22.70.171.201."}
+{"instruction": "Shutdown interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/2\n shutdown\n# Disables the interface."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Remove existing NAT rule for 69.137.40.39", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 91.20.9.243\n# Removes NAT for 91.20.9.243."}
+{"instruction": "Ping host 36.140.64.250", "output": "ping 115.177.71.157\n# Sends ICMP echo request."}
+{"instruction": "Assign VLAN 28 to interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/2\n switchport access vlan 51\n# Assigns VLAN 51."}
+{"instruction": "Configure dynamic PAT for internal network 13.27.104.44/24", "output": "object network INSIDE_NET\n subnet 54.48.167.220 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Create IPSec VPN tunnel to peer 38.6.104.116", "output": "crypto map VPN-MAP 10 set peer 61.217.89.251\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Add static route to network 14.203.231.210/24 via 10.7.140.71", "output": "route outside 62.35.168.37 255.255.255.0 35.96.13.141\n# Adds static route."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Remove existing NAT rule for 83.236.237.153", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 49.197.150.45\n# Removes NAT for 49.197.150.45."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Enable interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/1\n no shutdown\n# Enables the interface."}
+{"instruction": "Create static NAT for inside host 141.36.215.156 to 122.141.78.94", "output": "object network INSIDE_HOST\n host 56.247.137.109\n nat (inside,outside) static 157.108.61.70\n# Static NAT mapping for 56.247.137.109."}
+{"instruction": "Shutdown interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/2\n shutdown\n# Disables the interface."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Assign VLAN 80 to interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/3\n switchport access vlan 41\n# Assigns VLAN 41."}
+{"instruction": "Enable SNMP with community BACKUP", "output": "snmp-server community INTERNAL RO\n# Configures SNMP read-only community."}
+{"instruction": "Enable SNMP with community MONITOR", "output": "snmp-server community BACKUP RO\n# Configures SNMP read-only community."}
+{"instruction": "Configure syslog to 171.221.18.9", "output": "logging host 180.206.165.172\nlogging trap warnings\n# Sends logs to syslog server 180.206.165.172."}
+{"instruction": "Enable SNMP with community BACKUP", "output": "snmp-server community INTERNAL RO\n# Configures SNMP read-only community."}
+{"instruction": "Remove existing NAT rule for 105.29.156.233", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 90.213.136.88\n# Removes NAT for 90.213.136.88."}
+{"instruction": "Enable interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/2\n no shutdown\n# Enables the interface."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Configure syslog to 44.249.7.190", "output": "logging host 178.41.157.80\nlogging trap warnings\n# Sends logs to syslog server 178.41.157.80."}
+{"instruction": "Add static route to network 71.111.202.248/24 via 27.187.167.68", "output": "route outside 117.140.96.108 255.255.255.0 79.71.206.198\n# Adds static route."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Assign VLAN 135 to interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/0\n switchport access vlan 117\n# Assigns VLAN 117."}
+{"instruction": "Block IP 161.65.196.214", "output": "access-list OUTSIDE-IN extended deny ip host 122.183.218.157 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 122.183.218.157."}
+{"instruction": "Create static NAT for inside host 58.37.211.220 to 17.190.146.232", "output": "object network INSIDE_HOST\n host 150.50.34.107\n nat (inside,outside) static 115.24.74.39\n# Static NAT mapping for 150.50.34.107."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Create static NAT for inside host 46.67.221.116 to 102.96.243.14", "output": "object network INSIDE_HOST\n host 130.182.127.203\n nat (inside,outside) static 133.230.104.27\n# Static NAT mapping for 130.182.127.203."}
+{"instruction": "Configure syslog to 68.207.26.107", "output": "logging host 115.184.111.212\nlogging trap warnings\n# Sends logs to syslog server 115.184.111.212."}
+{"instruction": "Enable SNMP with community PUBLIC", "output": "snmp-server community MONITOR RO\n# Configures SNMP read-only community."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Create static NAT for inside host 101.31.186.46 to 168.159.16.197", "output": "object network INSIDE_HOST\n host 140.1.123.171\n nat (inside,outside) static 71.33.178.80\n# Static NAT mapping for 140.1.123.171."}
+{"instruction": "Assign VLAN 154 to interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/3\n switchport access vlan 90\n# Assigns VLAN 90."}
+{"instruction": "Assign VLAN 55 to interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/2\n switchport access vlan 26\n# Assigns VLAN 26."}
+{"instruction": "Shutdown interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/1\n shutdown\n# Disables the interface."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Assign VLAN 15 to interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/4\n switchport access vlan 177\n# Assigns VLAN 177."}
+{"instruction": "Remove existing NAT rule for 111.36.79.21", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 39.46.178.208\n# Removes NAT for 39.46.178.208."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Add static route to network 170.179.138.167/24 via 135.150.83.203", "output": "route outside 85.150.223.202 255.255.255.0 38.98.243.6\n# Adds static route."}
+{"instruction": "Configure syslog to 126.216.147.59", "output": "logging host 19.107.83.2\nlogging trap warnings\n# Sends logs to syslog server 19.107.83.2."}
+{"instruction": "Remove existing NAT rule for 129.177.105.253", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 71.142.140.190\n# Removes NAT for 71.142.140.190."}
+{"instruction": "Enable SNMP with community BACKUP", "output": "snmp-server community INTERNAL RO\n# Configures SNMP read-only community."}
+{"instruction": "Ping host 137.222.176.213", "output": "ping 85.80.200.161\n# Sends ICMP echo request."}
+{"instruction": "Configure syslog to 33.50.47.136", "output": "logging host 163.235.201.90\nlogging trap warnings\n# Sends logs to syslog server 163.235.201.90."}
+{"instruction": "Create static NAT for inside host 54.44.214.208 to 153.110.213.54", "output": "object network INSIDE_HOST\n host 94.39.208.245\n nat (inside,outside) static 54.164.19.155\n# Static NAT mapping for 94.39.208.245."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Deny HTTP from 136.218.136.171", "output": "access-list OUTSIDE-IN extended deny tcp host 120.8.242.72 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 120.8.242.72."}
+{"instruction": "Configure AnyConnect VPN pool 155.207.85.0-255", "output": "ip local pool ANYCONNECT_POOL 165.81.253.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Assign VLAN 110 to interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/2\n switchport access vlan 94\n# Assigns VLAN 94."}
+{"instruction": "Block IP 52.16.115.212", "output": "access-list OUTSIDE-IN extended deny ip host 117.2.143.179 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 117.2.143.179."}
+{"instruction": "Add static route to network 13.177.13.112/24 via 39.62.35.195", "output": "route outside 169.202.204.194 255.255.255.0 189.117.105.134\n# Adds static route."}
+{"instruction": "Configure AnyConnect VPN pool 41.196.173.0-255", "output": "ip local pool ANYCONNECT_POOL 113.215.97.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Add static route to network 80.78.249.183/24 via 128.172.9.241", "output": "route outside 67.26.139.180 255.255.255.0 170.0.131.61\n# Adds static route."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Enable interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/1\n no shutdown\n# Enables the interface."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Add static route to network 31.2.141.242/24 via 126.121.7.205", "output": "route outside 53.69.70.127 255.255.255.0 105.68.53.192\n# Adds static route."}
+{"instruction": "Create static NAT for inside host 86.59.28.202 to 128.199.209.49", "output": "object network INSIDE_HOST\n host 85.50.206.151\n nat (inside,outside) static 62.108.238.128\n# Static NAT mapping for 85.50.206.151."}
+{"instruction": "Create IPSec VPN tunnel to peer 188.17.227.9", "output": "crypto map VPN-MAP 10 set peer 25.82.237.15\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Configure dynamic PAT for internal network 78.99.75.244/24", "output": "object network INSIDE_NET\n subnet 167.252.240.58 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Ping host 83.171.211.252", "output": "ping 20.171.79.169\n# Sends ICMP echo request."}
+{"instruction": "Remove existing NAT rule for 102.96.42.54", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 91.228.190.207\n# Removes NAT for 91.228.190.207."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Create static NAT for inside host 136.244.201.254 to 154.252.203.96", "output": "object network INSIDE_HOST\n host 150.50.45.98\n nat (inside,outside) static 61.26.73.86\n# Static NAT mapping for 150.50.45.98."}
+{"instruction": "Block IP 45.76.20.239", "output": "access-list OUTSIDE-IN extended deny ip host 76.22.88.92 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 76.22.88.92."}
+{"instruction": "Configure AnyConnect VPN pool 79.162.219.0-255", "output": "ip local pool ANYCONNECT_POOL 142.50.197.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Create static NAT for inside host 146.2.107.65 to 58.56.228.25", "output": "object network INSIDE_HOST\n host 52.136.148.204\n nat (inside,outside) static 53.79.88.63\n# Static NAT mapping for 52.136.148.204."}
+{"instruction": "Assign VLAN 61 to interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/3\n switchport access vlan 194\n# Assigns VLAN 194."}
+{"instruction": "Ping host 144.184.13.97", "output": "ping 58.4.206.37\n# Sends ICMP echo request."}
+{"instruction": "Deny HTTP from 151.210.27.12", "output": "access-list OUTSIDE-IN extended deny tcp host 89.11.165.147 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 89.11.165.147."}
+{"instruction": "Ping host 192.89.255.196", "output": "ping 102.55.199.65\n# Sends ICMP echo request."}
+{"instruction": "Enable SNMP with community PUBLIC", "output": "snmp-server community PUBLIC RO\n# Configures SNMP read-only community."}
+{"instruction": "Shutdown interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/3\n shutdown\n# Disables the interface."}
+{"instruction": "Remove existing NAT rule for 30.89.217.159", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 152.136.113.64\n# Removes NAT for 152.136.113.64."}
+{"instruction": "Configure syslog to 99.244.46.219", "output": "logging host 160.202.86.208\nlogging trap warnings\n# Sends logs to syslog server 160.202.86.208."}
+{"instruction": "Block IP 135.46.144.227", "output": "access-list OUTSIDE-IN extended deny ip host 115.130.144.72 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 115.130.144.72."}
+{"instruction": "Shutdown interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/3\n shutdown\n# Disables the interface."}
+{"instruction": "Configure syslog to 31.71.131.181", "output": "logging host 138.238.240.105\nlogging trap warnings\n# Sends logs to syslog server 138.238.240.105."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Enable interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/5\n no shutdown\n# Enables the interface."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Ping host 70.88.140.189", "output": "ping 151.88.48.254\n# Sends ICMP echo request."}
+{"instruction": "Add static route to network 160.96.14.61/24 via 127.207.119.204", "output": "route outside 125.86.98.65 255.255.255.0 61.250.253.172\n# Adds static route."}
+{"instruction": "Configure dynamic PAT for internal network 42.83.154.94/24", "output": "object network INSIDE_NET\n subnet 34.6.34.159 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Enable interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/4\n no shutdown\n# Enables the interface."}
+{"instruction": "Configure AnyConnect VPN pool 46.27.145.0-255", "output": "ip local pool ANYCONNECT_POOL 137.246.38.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Block IP 38.23.17.203", "output": "access-list OUTSIDE-IN extended deny ip host 102.85.251.120 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 102.85.251.120."}
+{"instruction": "Remove existing NAT rule for 112.102.46.90", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 152.92.29.25\n# Removes NAT for 152.92.29.25."}
+{"instruction": "Shutdown interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/5\n shutdown\n# Disables the interface."}
+{"instruction": "Enable interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/5\n no shutdown\n# Enables the interface."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Assign VLAN 129 to interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/1\n switchport access vlan 156\n# Assigns VLAN 156."}
+{"instruction": "Shutdown interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/5\n shutdown\n# Disables the interface."}
+{"instruction": "Add static route to network 154.240.7.49/24 via 139.16.133.112", "output": "route outside 163.143.40.114 255.255.255.0 121.82.46.12\n# Adds static route."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Ping host 84.180.227.20", "output": "ping 86.172.82.238\n# Sends ICMP echo request."}
+{"instruction": "Configure dynamic PAT for internal network 99.113.88.58/24", "output": "object network INSIDE_NET\n subnet 175.61.204.195 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Remove existing NAT rule for 10.54.94.6", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 43.216.211.151\n# Removes NAT for 43.216.211.151."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Deny HTTP from 66.55.139.10", "output": "access-list OUTSIDE-IN extended deny tcp host 189.45.162.190 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 189.45.162.190."}
+{"instruction": "Remove existing NAT rule for 71.58.251.82", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 134.247.238.91\n# Removes NAT for 134.247.238.91."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Assign VLAN 90 to interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/4\n switchport access vlan 124\n# Assigns VLAN 124."}
+{"instruction": "Shutdown interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/2\n shutdown\n# Disables the interface."}
+{"instruction": "Enable interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/5\n no shutdown\n# Enables the interface."}
+{"instruction": "Create static NAT for inside host 139.200.126.201 to 173.30.220.5", "output": "object network INSIDE_HOST\n host 125.63.177.79\n nat (inside,outside) static 59.21.20.32\n# Static NAT mapping for 125.63.177.79."}
+{"instruction": "Create static NAT for inside host 126.173.117.160 to 121.235.49.249", "output": "object network INSIDE_HOST\n host 115.253.8.3\n nat (inside,outside) static 13.255.40.134\n# Static NAT mapping for 115.253.8.3."}
+{"instruction": "Block IP 15.167.163.17", "output": "access-list OUTSIDE-IN extended deny ip host 31.171.160.137 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 31.171.160.137."}
+{"instruction": "Deny HTTP from 158.9.55.214", "output": "access-list OUTSIDE-IN extended deny tcp host 101.76.46.144 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 101.76.46.144."}
+{"instruction": "Configure dynamic PAT for internal network 96.83.53.205/24", "output": "object network INSIDE_NET\n subnet 121.59.22.17 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Remove existing NAT rule for 124.218.164.31", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 180.16.53.72\n# Removes NAT for 180.16.53.72."}
+{"instruction": "Allow SSH access only from 135.160.242.176", "output": "ip access-list standard SSH_ACCESS\n permit 35.201.232.168\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 35.201.232.168."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Create static NAT for inside host 31.109.17.225 to 99.121.131.7", "output": "object network INSIDE_HOST\n host 84.36.106.117\n nat (inside,outside) static 139.151.172.127\n# Static NAT mapping for 84.36.106.117."}
+{"instruction": "Deny HTTP from 145.1.122.62", "output": "access-list OUTSIDE-IN extended deny tcp host 178.170.181.166 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 178.170.181.166."}
+{"instruction": "Remove existing NAT rule for 61.153.176.20", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 55.19.84.135\n# Removes NAT for 55.19.84.135."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Create IPSec VPN tunnel to peer 123.226.200.247", "output": "crypto map VPN-MAP 10 set peer 26.71.97.68\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Configure AnyConnect VPN pool 143.239.235.0-255", "output": "ip local pool ANYCONNECT_POOL 93.20.35.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Ping host 167.167.251.38", "output": "ping 92.25.56.189\n# Sends ICMP echo request."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Configure dynamic PAT for internal network 52.27.225.59/24", "output": "object network INSIDE_NET\n subnet 135.91.227.229 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Assign VLAN 133 to interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/1\n switchport access vlan 156\n# Assigns VLAN 156."}
+{"instruction": "Configure syslog to 128.11.208.163", "output": "logging host 62.40.93.133\nlogging trap warnings\n# Sends logs to syslog server 62.40.93.133."}
+{"instruction": "Ping host 155.170.104.26", "output": "ping 146.212.189.164\n# Sends ICMP echo request."}
+{"instruction": "Remove existing NAT rule for 161.56.115.2", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 122.230.171.141\n# Removes NAT for 122.230.171.141."}
+{"instruction": "Configure dynamic PAT for internal network 65.174.86.31/24", "output": "object network INSIDE_NET\n subnet 175.104.61.163 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Ping host 185.97.64.33", "output": "ping 66.159.184.26\n# Sends ICMP echo request."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Block IP 115.228.154.224", "output": "access-list OUTSIDE-IN extended deny ip host 52.243.148.97 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 52.243.148.97."}
+{"instruction": "Remove existing NAT rule for 113.215.34.178", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 86.6.208.27\n# Removes NAT for 86.6.208.27."}
+{"instruction": "Deny HTTP from 188.14.22.196", "output": "access-list OUTSIDE-IN extended deny tcp host 59.213.200.93 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 59.213.200.93."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Shutdown interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/1\n shutdown\n# Disables the interface."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Configure AnyConnect VPN pool 57.227.221.0-255", "output": "ip local pool ANYCONNECT_POOL 40.1.64.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Assign VLAN 28 to interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/4\n switchport access vlan 167\n# Assigns VLAN 167."}
+{"instruction": "Remove existing NAT rule for 106.14.189.13", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 63.231.40.86\n# Removes NAT for 63.231.40.86."}
+{"instruction": "Add static route to network 112.72.197.167/24 via 61.159.94.144", "output": "route outside 82.160.217.80 255.255.255.0 190.223.253.186\n# Adds static route."}
+{"instruction": "Add static route to network 16.113.168.83/24 via 139.169.71.38", "output": "route outside 153.165.32.253 255.255.255.0 142.201.225.24\n# Adds static route."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Enable SNMP with community INTERNAL", "output": "snmp-server community BACKUP RO\n# Configures SNMP read-only community."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Ping host 20.8.94.187", "output": "ping 150.160.8.250\n# Sends ICMP echo request."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Configure syslog to 34.68.62.42", "output": "logging host 113.2.133.36\nlogging trap warnings\n# Sends logs to syslog server 113.2.133.36."}
+{"instruction": "Create static NAT for inside host 143.219.249.33 to 11.182.182.109", "output": "object network INSIDE_HOST\n host 23.219.150.185\n nat (inside,outside) static 147.135.36.198\n# Static NAT mapping for 23.219.150.185."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Configure syslog to 143.160.125.206", "output": "logging host 93.245.9.159\nlogging trap warnings\n# Sends logs to syslog server 93.245.9.159."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Shutdown interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/0\n shutdown\n# Disables the interface."}
+{"instruction": "Allow SSH access only from 140.89.84.108", "output": "ip access-list standard SSH_ACCESS\n permit 184.80.87.74\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 184.80.87.74."}
+{"instruction": "Block IP 79.196.77.245", "output": "access-list OUTSIDE-IN extended deny ip host 192.183.242.113 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 192.183.242.113."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Assign VLAN 174 to interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/2\n switchport access vlan 164\n# Assigns VLAN 164."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Create IPSec VPN tunnel to peer 156.224.178.191", "output": "crypto map VPN-MAP 10 set peer 57.118.193.58\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Remove existing NAT rule for 146.246.133.194", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 111.232.164.170\n# Removes NAT for 111.232.164.170."}
+{"instruction": "Configure dynamic PAT for internal network 169.137.143.157/24", "output": "object network INSIDE_NET\n subnet 58.237.160.116 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Allow SSH access only from 154.197.232.37", "output": "ip access-list standard SSH_ACCESS\n permit 14.183.220.61\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 14.183.220.61."}
+{"instruction": "Assign VLAN 126 to interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/4\n switchport access vlan 72\n# Assigns VLAN 72."}
+{"instruction": "Shutdown interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/5\n shutdown\n# Disables the interface."}
+{"instruction": "Add static route to network 153.184.78.143/24 via 175.214.51.185", "output": "route outside 160.31.222.201 255.255.255.0 77.107.111.39\n# Adds static route."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Create static NAT for inside host 122.128.95.165 to 183.204.130.5", "output": "object network INSIDE_HOST\n host 79.192.22.26\n nat (inside,outside) static 120.220.124.238\n# Static NAT mapping for 79.192.22.26."}
+{"instruction": "Remove existing NAT rule for 53.242.94.131", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 69.51.27.28\n# Removes NAT for 69.51.27.28."}
+{"instruction": "Create static NAT for inside host 158.144.65.33 to 138.138.229.102", "output": "object network INSIDE_HOST\n host 14.224.222.101\n nat (inside,outside) static 85.231.169.6\n# Static NAT mapping for 14.224.222.101."}
+{"instruction": "Enable SNMP with community INTERNAL", "output": "snmp-server community BACKUP RO\n# Configures SNMP read-only community."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Deny HTTP from 144.11.65.202", "output": "access-list OUTSIDE-IN extended deny tcp host 56.95.172.141 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 56.95.172.141."}
+{"instruction": "Enable interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/3\n no shutdown\n# Enables the interface."}
+{"instruction": "Configure dynamic PAT for internal network 125.95.66.55/24", "output": "object network INSIDE_NET\n subnet 159.184.8.78 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Configure AnyConnect VPN pool 85.168.3.0-255", "output": "ip local pool ANYCONNECT_POOL 171.177.86.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Deny HTTP from 44.117.7.161", "output": "access-list OUTSIDE-IN extended deny tcp host 53.110.197.20 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 53.110.197.20."}
+{"instruction": "Shutdown interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/3\n shutdown\n# Disables the interface."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Block IP 142.33.130.196", "output": "access-list OUTSIDE-IN extended deny ip host 47.251.237.10 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 47.251.237.10."}
+{"instruction": "Allow SSH access only from 78.67.78.24", "output": "ip access-list standard SSH_ACCESS\n permit 163.109.4.244\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 163.109.4.244."}
+{"instruction": "Block IP 119.228.41.183", "output": "access-list OUTSIDE-IN extended deny ip host 139.7.148.26 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 139.7.148.26."}
+{"instruction": "Configure syslog to 175.109.46.215", "output": "logging host 164.189.60.146\nlogging trap warnings\n# Sends logs to syslog server 164.189.60.146."}
+{"instruction": "Assign VLAN 117 to interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/4\n switchport access vlan 185\n# Assigns VLAN 185."}
+{"instruction": "Assign VLAN 22 to interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/1\n switchport access vlan 13\n# Assigns VLAN 13."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Create static NAT for inside host 27.14.13.96 to 86.79.86.5", "output": "object network INSIDE_HOST\n host 26.5.13.249\n nat (inside,outside) static 163.164.10.21\n# Static NAT mapping for 26.5.13.249."}
+{"instruction": "Shutdown interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/1\n shutdown\n# Disables the interface."}
+{"instruction": "Create IPSec VPN tunnel to peer 186.211.182.47", "output": "crypto map VPN-MAP 10 set peer 77.197.127.239\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Deny HTTP from 185.198.9.30", "output": "access-list OUTSIDE-IN extended deny tcp host 128.173.114.8 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 128.173.114.8."}
+{"instruction": "Add static route to network 151.136.244.125/24 via 50.42.227.142", "output": "route outside 167.129.61.44 255.255.255.0 15.182.218.54\n# Adds static route."}
+{"instruction": "Enable interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/1\n no shutdown\n# Enables the interface."}
+{"instruction": "Create static NAT for inside host 183.42.185.2 to 21.221.71.67", "output": "object network INSIDE_HOST\n host 136.213.172.184\n nat (inside,outside) static 134.79.43.194\n# Static NAT mapping for 136.213.172.184."}
+{"instruction": "Deny HTTP from 18.126.53.142", "output": "access-list OUTSIDE-IN extended deny tcp host 124.118.22.48 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 124.118.22.48."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Deny HTTP from 185.234.228.35", "output": "access-list OUTSIDE-IN extended deny tcp host 169.157.201.69 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 169.157.201.69."}
+{"instruction": "Deny HTTP from 103.98.107.138", "output": "access-list OUTSIDE-IN extended deny tcp host 58.101.24.28 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 58.101.24.28."}
+{"instruction": "Create static NAT for inside host 154.216.220.139 to 159.30.79.17", "output": "object network INSIDE_HOST\n host 110.108.76.172\n nat (inside,outside) static 192.7.17.73\n# Static NAT mapping for 110.108.76.172."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Assign VLAN 172 to interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/0\n switchport access vlan 76\n# Assigns VLAN 76."}
+{"instruction": "Remove existing NAT rule for 157.193.33.8", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 61.107.246.99\n# Removes NAT for 61.107.246.99."}
+{"instruction": "Configure syslog to 104.7.132.244", "output": "logging host 97.250.141.185\nlogging trap warnings\n# Sends logs to syslog server 97.250.141.185."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Allow SSH access only from 28.251.70.114", "output": "ip access-list standard SSH_ACCESS\n permit 158.145.133.41\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 158.145.133.41."}
+{"instruction": "Enable interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/5\n no shutdown\n# Enables the interface."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Configure dynamic PAT for internal network 187.100.25.124/24", "output": "object network INSIDE_NET\n subnet 15.118.93.10 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Ping host 61.145.147.76", "output": "ping 85.217.216.135\n# Sends ICMP echo request."}
+{"instruction": "Enable interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/5\n no shutdown\n# Enables the interface."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Add static route to network 115.0.220.105/24 via 167.26.108.204", "output": "route outside 39.139.242.215 255.255.255.0 37.166.44.218\n# Adds static route."}
+{"instruction": "Assign VLAN 138 to interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/1\n switchport access vlan 99\n# Assigns VLAN 99."}
+{"instruction": "Enable interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/1\n no shutdown\n# Enables the interface."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Add static route to network 114.206.87.30/24 via 156.97.117.109", "output": "route outside 53.135.18.110 255.255.255.0 182.212.93.155\n# Adds static route."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Shutdown interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/4\n shutdown\n# Disables the interface."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Create static NAT for inside host 180.136.178.252 to 51.178.218.251", "output": "object network INSIDE_HOST\n host 157.23.87.16\n nat (inside,outside) static 37.159.224.72\n# Static NAT mapping for 157.23.87.16."}
+{"instruction": "Configure AnyConnect VPN pool 162.1.230.0-255", "output": "ip local pool ANYCONNECT_POOL 190.81.133.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Enable interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/1\n no shutdown\n# Enables the interface."}
+{"instruction": "Ping host 44.217.220.32", "output": "ping 172.95.197.133\n# Sends ICMP echo request."}
+{"instruction": "Create IPSec VPN tunnel to peer 21.208.6.66", "output": "crypto map VPN-MAP 10 set peer 143.237.153.53\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Add static route to network 69.70.160.201/24 via 139.184.227.132", "output": "route outside 151.136.126.125 255.255.255.0 171.144.176.25\n# Adds static route."}
+{"instruction": "Shutdown interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/4\n shutdown\n# Disables the interface."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Add static route to network 130.149.9.77/24 via 28.15.69.40", "output": "route outside 127.81.202.112 255.255.255.0 160.59.109.80\n# Adds static route."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Allow SSH access only from 144.17.65.23", "output": "ip access-list standard SSH_ACCESS\n permit 158.161.66.94\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 158.161.66.94."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Assign VLAN 21 to interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/5\n switchport access vlan 199\n# Assigns VLAN 199."}
+{"instruction": "Block IP 62.195.5.168", "output": "access-list OUTSIDE-IN extended deny ip host 162.37.210.207 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 162.37.210.207."}
+{"instruction": "Assign VLAN 118 to interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/5\n switchport access vlan 183\n# Assigns VLAN 183."}
+{"instruction": "Configure dynamic PAT for internal network 19.13.81.206/24", "output": "object network INSIDE_NET\n subnet 188.117.237.189 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Assign VLAN 76 to interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/5\n switchport access vlan 98\n# Assigns VLAN 98."}
+{"instruction": "Enable interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/3\n no shutdown\n# Enables the interface."}
+{"instruction": "Block IP 10.26.253.83", "output": "access-list OUTSIDE-IN extended deny ip host 152.224.120.173 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 152.224.120.173."}
+{"instruction": "Remove existing NAT rule for 99.135.19.49", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 37.215.236.216\n# Removes NAT for 37.215.236.216."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Configure AnyConnect VPN pool 155.140.212.0-255", "output": "ip local pool ANYCONNECT_POOL 43.123.180.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Shutdown interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/0\n shutdown\n# Disables the interface."}
+{"instruction": "Shutdown interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/3\n shutdown\n# Disables the interface."}
+{"instruction": "Allow SSH access only from 20.192.67.87", "output": "ip access-list standard SSH_ACCESS\n permit 17.43.16.22\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 17.43.16.22."}
+{"instruction": "Configure dynamic PAT for internal network 14.169.196.85/24", "output": "object network INSIDE_NET\n subnet 134.150.113.243 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Configure dynamic PAT for internal network 94.146.220.73/24", "output": "object network INSIDE_NET\n subnet 153.5.100.153 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Enable interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/4\n no shutdown\n# Enables the interface."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Configure dynamic PAT for internal network 173.162.200.137/24", "output": "object network INSIDE_NET\n subnet 169.62.219.249 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Configure syslog to 43.176.181.95", "output": "logging host 122.188.52.94\nlogging trap warnings\n# Sends logs to syslog server 122.188.52.94."}
+{"instruction": "Configure AnyConnect VPN pool 11.242.101.0-255", "output": "ip local pool ANYCONNECT_POOL 177.196.232.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Create static NAT for inside host 143.78.180.11 to 48.151.57.7", "output": "object network INSIDE_HOST\n host 191.34.233.107\n nat (inside,outside) static 188.81.91.34\n# Static NAT mapping for 191.34.233.107."}
+{"instruction": "Configure dynamic PAT for internal network 177.24.126.8/24", "output": "object network INSIDE_NET\n subnet 41.52.130.29 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Configure AnyConnect VPN pool 168.128.47.0-255", "output": "ip local pool ANYCONNECT_POOL 176.65.179.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Create IPSec VPN tunnel to peer 140.157.10.145", "output": "crypto map VPN-MAP 10 set peer 12.249.13.74\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Enable SNMP with community PUBLIC", "output": "snmp-server community MONITOR RO\n# Configures SNMP read-only community."}
+{"instruction": "Shutdown interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/2\n shutdown\n# Disables the interface."}
+{"instruction": "Block IP 190.22.139.80", "output": "access-list OUTSIDE-IN extended deny ip host 181.164.100.198 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 181.164.100.198."}
+{"instruction": "Create static NAT for inside host 38.173.59.45 to 149.191.209.73", "output": "object network INSIDE_HOST\n host 65.97.227.213\n nat (inside,outside) static 53.17.17.117\n# Static NAT mapping for 65.97.227.213."}
+{"instruction": "Remove existing NAT rule for 27.95.162.226", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 141.28.51.34\n# Removes NAT for 141.28.51.34."}
+{"instruction": "Remove existing NAT rule for 153.92.85.156", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 141.126.151.123\n# Removes NAT for 141.126.151.123."}
+{"instruction": "Configure dynamic PAT for internal network 180.169.61.46/24", "output": "object network INSIDE_NET\n subnet 175.181.112.192 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Enable interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/5\n no shutdown\n# Enables the interface."}
+{"instruction": "Add static route to network 150.60.8.197/24 via 34.179.123.202", "output": "route outside 151.35.212.43 255.255.255.0 79.59.148.85\n# Adds static route."}
+{"instruction": "Enable interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/2\n no shutdown\n# Enables the interface."}
+{"instruction": "Configure dynamic PAT for internal network 100.45.33.90/24", "output": "object network INSIDE_NET\n subnet 101.28.135.141 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Allow SSH access only from 181.10.144.91", "output": "ip access-list standard SSH_ACCESS\n permit 85.179.231.95\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 85.179.231.95."}
+{"instruction": "Configure AnyConnect VPN pool 58.158.57.0-255", "output": "ip local pool ANYCONNECT_POOL 80.99.120.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Ping host 134.133.96.128", "output": "ping 60.177.148.111\n# Sends ICMP echo request."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Remove existing NAT rule for 132.200.242.229", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 186.38.41.175\n# Removes NAT for 186.38.41.175."}
+{"instruction": "Add static route to network 87.215.234.136/24 via 126.248.75.107", "output": "route outside 127.104.245.114 255.255.255.0 132.100.51.84\n# Adds static route."}
+{"instruction": "Assign VLAN 71 to interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/0\n switchport access vlan 67\n# Assigns VLAN 67."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Shutdown interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/3\n shutdown\n# Disables the interface."}
+{"instruction": "Block IP 87.149.238.192", "output": "access-list OUTSIDE-IN extended deny ip host 32.203.242.132 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 32.203.242.132."}
+{"instruction": "Create IPSec VPN tunnel to peer 43.207.135.129", "output": "crypto map VPN-MAP 10 set peer 178.16.191.25\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Allow SSH access only from 44.133.99.207", "output": "ip access-list standard SSH_ACCESS\n permit 95.163.16.115\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 95.163.16.115."}
+{"instruction": "Enable SNMP with community INTERNAL", "output": "snmp-server community BACKUP RO\n# Configures SNMP read-only community."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Configure syslog to 69.50.61.64", "output": "logging host 102.133.58.216\nlogging trap warnings\n# Sends logs to syslog server 102.133.58.216."}
+{"instruction": "Remove existing NAT rule for 38.21.59.227", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 57.254.249.169\n# Removes NAT for 57.254.249.169."}
+{"instruction": "Enable SNMP with community INTERNAL", "output": "snmp-server community PUBLIC RO\n# Configures SNMP read-only community."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Shutdown interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/5\n shutdown\n# Disables the interface."}
+{"instruction": "Remove existing NAT rule for 145.223.141.71", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 12.36.160.10\n# Removes NAT for 12.36.160.10."}
+{"instruction": "Create static NAT for inside host 92.72.185.28 to 172.59.221.195", "output": "object network INSIDE_HOST\n host 61.45.242.24\n nat (inside,outside) static 45.20.211.110\n# Static NAT mapping for 61.45.242.24."}
+{"instruction": "Add static route to network 134.226.159.72/24 via 108.45.250.130", "output": "route outside 149.110.13.236 255.255.255.0 89.124.78.75\n# Adds static route."}
+{"instruction": "Ping host 77.73.54.227", "output": "ping 156.25.12.63\n# Sends ICMP echo request."}
+{"instruction": "Add static route to network 25.80.98.16/24 via 151.213.23.67", "output": "route outside 150.22.184.42 255.255.255.0 147.216.208.117\n# Adds static route."}
+{"instruction": "Ping host 63.253.215.249", "output": "ping 59.70.71.164\n# Sends ICMP echo request."}
+{"instruction": "Create IPSec VPN tunnel to peer 183.175.85.130", "output": "crypto map VPN-MAP 10 set peer 121.249.203.68\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Block IP 80.226.153.151", "output": "access-list OUTSIDE-IN extended deny ip host 58.116.28.221 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 58.116.28.221."}
+{"instruction": "Block IP 106.15.152.137", "output": "access-list OUTSIDE-IN extended deny ip host 87.248.25.239 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 87.248.25.239."}
+{"instruction": "Configure dynamic PAT for internal network 66.64.154.179/24", "output": "object network INSIDE_NET\n subnet 146.94.91.190 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Create static NAT for inside host 159.58.128.139 to 87.109.104.225", "output": "object network INSIDE_HOST\n host 102.174.3.80\n nat (inside,outside) static 134.51.47.167\n# Static NAT mapping for 102.174.3.80."}
+{"instruction": "Create static NAT for inside host 60.38.243.159 to 144.206.190.13", "output": "object network INSIDE_HOST\n host 37.88.61.15\n nat (inside,outside) static 138.67.254.235\n# Static NAT mapping for 37.88.61.15."}
+{"instruction": "Configure syslog to 50.30.4.252", "output": "logging host 106.212.0.137\nlogging trap warnings\n# Sends logs to syslog server 106.212.0.137."}
+{"instruction": "Remove existing NAT rule for 172.195.42.43", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 179.42.207.84\n# Removes NAT for 179.42.207.84."}
+{"instruction": "Allow SSH access only from 74.152.91.4", "output": "ip access-list standard SSH_ACCESS\n permit 113.216.67.88\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 113.216.67.88."}
+{"instruction": "Ping host 16.213.88.176", "output": "ping 134.94.147.10\n# Sends ICMP echo request."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Configure AnyConnect VPN pool 101.219.30.0-255", "output": "ip local pool ANYCONNECT_POOL 180.132.228.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Configure syslog to 175.168.226.137", "output": "logging host 11.210.41.5\nlogging trap warnings\n# Sends logs to syslog server 11.210.41.5."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Remove existing NAT rule for 128.108.252.2", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 123.233.31.142\n# Removes NAT for 123.233.31.142."}
+{"instruction": "Allow SSH access only from 110.48.240.41", "output": "ip access-list standard SSH_ACCESS\n permit 113.24.146.208\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 113.24.146.208."}
+{"instruction": "Deny HTTP from 143.147.202.100", "output": "access-list OUTSIDE-IN extended deny tcp host 102.151.87.180 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 102.151.87.180."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Create IPSec VPN tunnel to peer 123.153.213.185", "output": "crypto map VPN-MAP 10 set peer 73.84.110.217\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Enable SNMP with community MONITOR", "output": "snmp-server community INTERNAL RO\n# Configures SNMP read-only community."}
+{"instruction": "Assign VLAN 24 to interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/0\n switchport access vlan 10\n# Assigns VLAN 10."}
+{"instruction": "Enable SNMP with community BACKUP", "output": "snmp-server community INTERNAL RO\n# Configures SNMP read-only community."}
+{"instruction": "Ping host 41.154.152.46", "output": "ping 66.127.234.126\n# Sends ICMP echo request."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Add static route to network 35.175.82.31/24 via 71.104.176.99", "output": "route outside 62.74.192.50 255.255.255.0 81.65.186.23\n# Adds static route."}
+{"instruction": "Shutdown interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/3\n shutdown\n# Disables the interface."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Add static route to network 78.6.164.57/24 via 20.181.65.236", "output": "route outside 133.182.72.114 255.255.255.0 128.208.34.241\n# Adds static route."}
+{"instruction": "Assign VLAN 25 to interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/4\n switchport access vlan 177\n# Assigns VLAN 177."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Configure AnyConnect VPN pool 115.177.26.0-255", "output": "ip local pool ANYCONNECT_POOL 36.207.64.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Configure dynamic PAT for internal network 154.138.253.215/24", "output": "object network INSIDE_NET\n subnet 182.48.125.143 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Configure dynamic PAT for internal network 67.66.51.174/24", "output": "object network INSIDE_NET\n subnet 70.46.210.120 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Configure AnyConnect VPN pool 49.221.126.0-255", "output": "ip local pool ANYCONNECT_POOL 20.166.110.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Allow SSH access only from 165.197.188.184", "output": "ip access-list standard SSH_ACCESS\n permit 84.199.18.221\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 84.199.18.221."}
+{"instruction": "Configure dynamic PAT for internal network 102.129.160.230/24", "output": "object network INSIDE_NET\n subnet 21.95.113.26 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Configure syslog to 44.136.180.47", "output": "logging host 90.217.184.40\nlogging trap warnings\n# Sends logs to syslog server 90.217.184.40."}
+{"instruction": "Enable SNMP with community MONITOR", "output": "snmp-server community BACKUP RO\n# Configures SNMP read-only community."}
+{"instruction": "Create IPSec VPN tunnel to peer 134.238.205.50", "output": "crypto map VPN-MAP 10 set peer 146.237.135.65\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Configure syslog to 49.234.92.112", "output": "logging host 126.208.214.106\nlogging trap warnings\n# Sends logs to syslog server 126.208.214.106."}
+{"instruction": "Configure AnyConnect VPN pool 130.168.111.0-255", "output": "ip local pool ANYCONNECT_POOL 92.51.135.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Block IP 185.72.134.43", "output": "access-list OUTSIDE-IN extended deny ip host 107.220.179.217 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 107.220.179.217."}
+{"instruction": "Enable SNMP with community INTERNAL", "output": "snmp-server community BACKUP RO\n# Configures SNMP read-only community."}
+{"instruction": "Enable interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/5\n no shutdown\n# Enables the interface."}
+{"instruction": "Create IPSec VPN tunnel to peer 31.63.193.59", "output": "crypto map VPN-MAP 10 set peer 27.217.141.138\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Configure AnyConnect VPN pool 56.59.131.0-255", "output": "ip local pool ANYCONNECT_POOL 12.63.141.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Add static route to network 71.163.75.161/24 via 154.136.53.140", "output": "route outside 172.146.31.50 255.255.255.0 90.105.173.213\n# Adds static route."}
+{"instruction": "Configure AnyConnect VPN pool 170.182.126.0-255", "output": "ip local pool ANYCONNECT_POOL 171.232.247.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Remove existing NAT rule for 23.240.158.37", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 88.34.222.41\n# Removes NAT for 88.34.222.41."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Create static NAT for inside host 138.70.100.22 to 170.149.121.136", "output": "object network INSIDE_HOST\n host 158.126.130.72\n nat (inside,outside) static 128.117.101.64\n# Static NAT mapping for 158.126.130.72."}
+{"instruction": "Allow SSH access only from 32.180.220.251", "output": "ip access-list standard SSH_ACCESS\n permit 146.145.34.65\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 146.145.34.65."}
+{"instruction": "Deny HTTP from 141.177.93.186", "output": "access-list OUTSIDE-IN extended deny tcp host 73.234.53.140 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 73.234.53.140."}
+{"instruction": "Enable interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/0\n no shutdown\n# Enables the interface."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Enable interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/0\n no shutdown\n# Enables the interface."}
+{"instruction": "Create static NAT for inside host 158.89.69.68 to 68.16.59.174", "output": "object network INSIDE_HOST\n host 182.233.8.161\n nat (inside,outside) static 111.215.18.119\n# Static NAT mapping for 182.233.8.161."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Create IPSec VPN tunnel to peer 24.223.83.101", "output": "crypto map VPN-MAP 10 set peer 145.216.218.124\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Remove existing NAT rule for 98.188.25.178", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 139.149.70.155\n# Removes NAT for 139.149.70.155."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Deny HTTP from 173.207.135.55", "output": "access-list OUTSIDE-IN extended deny tcp host 142.243.167.106 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 142.243.167.106."}
+{"instruction": "Add static route to network 102.10.246.179/24 via 63.91.40.7", "output": "route outside 13.76.194.85 255.255.255.0 146.106.54.124\n# Adds static route."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Ping host 157.37.26.211", "output": "ping 48.71.77.205\n# Sends ICMP echo request."}
+{"instruction": "Add static route to network 185.63.223.181/24 via 112.82.172.154", "output": "route outside 111.125.33.176 255.255.255.0 36.106.64.107\n# Adds static route."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Remove existing NAT rule for 188.10.97.72", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 122.144.191.210\n# Removes NAT for 122.144.191.210."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Configure AnyConnect VPN pool 81.79.248.0-255", "output": "ip local pool ANYCONNECT_POOL 18.151.9.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Enable SNMP with community INTERNAL", "output": "snmp-server community PUBLIC RO\n# Configures SNMP read-only community."}
+{"instruction": "Allow SSH access only from 95.162.50.104", "output": "ip access-list standard SSH_ACCESS\n permit 75.88.201.209\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 75.88.201.209."}
+{"instruction": "Allow SSH access only from 64.248.184.98", "output": "ip access-list standard SSH_ACCESS\n permit 103.100.81.94\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 103.100.81.94."}
+{"instruction": "Add static route to network 92.64.234.191/24 via 186.171.190.113", "output": "route outside 94.249.90.11 255.255.255.0 130.145.208.217\n# Adds static route."}
+{"instruction": "Assign VLAN 110 to interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/4\n switchport access vlan 92\n# Assigns VLAN 92."}
+{"instruction": "Enable SNMP with community BACKUP", "output": "snmp-server community PUBLIC RO\n# Configures SNMP read-only community."}
+{"instruction": "Configure AnyConnect VPN pool 42.226.181.0-255", "output": "ip local pool ANYCONNECT_POOL 42.55.118.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Add static route to network 57.196.7.79/24 via 50.107.58.128", "output": "route outside 69.15.196.23 255.255.255.0 40.212.108.6\n# Adds static route."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Configure AnyConnect VPN pool 14.251.224.0-255", "output": "ip local pool ANYCONNECT_POOL 11.231.134.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Add static route to network 159.137.242.129/24 via 16.10.24.15", "output": "route outside 139.22.244.246 255.255.255.0 90.49.191.83\n# Adds static route."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Configure syslog to 32.82.95.82", "output": "logging host 58.20.183.186\nlogging trap warnings\n# Sends logs to syslog server 58.20.183.186."}
+{"instruction": "Create static NAT for inside host 60.244.166.184 to 132.230.228.188", "output": "object network INSIDE_HOST\n host 101.42.245.93\n nat (inside,outside) static 38.153.25.232\n# Static NAT mapping for 101.42.245.93."}
+{"instruction": "Deny HTTP from 120.66.180.239", "output": "access-list OUTSIDE-IN extended deny tcp host 11.173.212.202 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 11.173.212.202."}
+{"instruction": "Shutdown interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/1\n shutdown\n# Disables the interface."}
+{"instruction": "Enable SNMP with community INTERNAL", "output": "snmp-server community INTERNAL RO\n# Configures SNMP read-only community."}
+{"instruction": "Allow SSH access only from 95.192.32.211", "output": "ip access-list standard SSH_ACCESS\n permit 52.152.91.134\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 52.152.91.134."}
+{"instruction": "Configure AnyConnect VPN pool 110.247.170.0-255", "output": "ip local pool ANYCONNECT_POOL 180.210.207.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Assign VLAN 97 to interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/4\n switchport access vlan 193\n# Assigns VLAN 193."}
+{"instruction": "Enable interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/0\n no shutdown\n# Enables the interface."}
+{"instruction": "Remove existing NAT rule for 146.176.79.197", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 97.71.224.28\n# Removes NAT for 97.71.224.28."}
+{"instruction": "Assign VLAN 105 to interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/4\n switchport access vlan 30\n# Assigns VLAN 30."}
+{"instruction": "Allow SSH access only from 36.249.161.116", "output": "ip access-list standard SSH_ACCESS\n permit 34.63.224.214\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 34.63.224.214."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Block IP 13.103.133.184", "output": "access-list OUTSIDE-IN extended deny ip host 110.90.22.107 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 110.90.22.107."}
+{"instruction": "Configure syslog to 97.123.186.18", "output": "logging host 119.116.176.40\nlogging trap warnings\n# Sends logs to syslog server 119.116.176.40."}
+{"instruction": "Configure AnyConnect VPN pool 40.178.179.0-255", "output": "ip local pool ANYCONNECT_POOL 162.121.133.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Configure AnyConnect VPN pool 87.72.244.0-255", "output": "ip local pool ANYCONNECT_POOL 24.58.58.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Add static route to network 99.143.64.194/24 via 77.3.102.154", "output": "route outside 72.251.207.167 255.255.255.0 56.243.33.190\n# Adds static route."}
+{"instruction": "Create IPSec VPN tunnel to peer 71.211.73.213", "output": "crypto map VPN-MAP 10 set peer 103.208.213.38\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Configure AnyConnect VPN pool 55.202.232.0-255", "output": "ip local pool ANYCONNECT_POOL 168.156.0.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Configure syslog to 54.185.236.207", "output": "logging host 10.249.215.26\nlogging trap warnings\n# Sends logs to syslog server 10.249.215.26."}
+{"instruction": "Add static route to network 147.143.47.3/24 via 121.16.84.167", "output": "route outside 65.34.91.230 255.255.255.0 51.202.138.109\n# Adds static route."}
+{"instruction": "Configure dynamic PAT for internal network 15.125.181.198/24", "output": "object network INSIDE_NET\n subnet 50.28.194.204 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Configure dynamic PAT for internal network 30.41.175.213/24", "output": "object network INSIDE_NET\n subnet 40.164.75.210 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Enable SNMP with community BACKUP", "output": "snmp-server community BACKUP RO\n# Configures SNMP read-only community."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Shutdown interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/1\n shutdown\n# Disables the interface."}
+{"instruction": "Remove existing NAT rule for 43.138.242.30", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 70.96.194.59\n# Removes NAT for 70.96.194.59."}
+{"instruction": "Remove existing NAT rule for 152.126.190.154", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 168.139.223.138\n# Removes NAT for 168.139.223.138."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Deny HTTP from 142.48.148.169", "output": "access-list OUTSIDE-IN extended deny tcp host 123.169.228.44 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 123.169.228.44."}
+{"instruction": "Add static route to network 77.215.18.64/24 via 86.30.29.210", "output": "route outside 111.182.8.217 255.255.255.0 159.152.229.97\n# Adds static route."}
+{"instruction": "Enable SNMP with community PUBLIC", "output": "snmp-server community BACKUP RO\n# Configures SNMP read-only community."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Enable interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/5\n no shutdown\n# Enables the interface."}
+{"instruction": "Deny HTTP from 167.48.127.107", "output": "access-list OUTSIDE-IN extended deny tcp host 107.152.128.35 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 107.152.128.35."}
+{"instruction": "Configure dynamic PAT for internal network 147.132.139.148/24", "output": "object network INSIDE_NET\n subnet 128.181.159.44 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Remove existing NAT rule for 103.75.45.217", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 124.182.79.128\n# Removes NAT for 124.182.79.128."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Shutdown interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/2\n shutdown\n# Disables the interface."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Allow SSH access only from 49.123.98.129", "output": "ip access-list standard SSH_ACCESS\n permit 98.147.238.74\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 98.147.238.74."}
+{"instruction": "Deny HTTP from 148.59.70.68", "output": "access-list OUTSIDE-IN extended deny tcp host 55.46.185.115 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 55.46.185.115."}
+{"instruction": "Configure AnyConnect VPN pool 168.42.81.0-255", "output": "ip local pool ANYCONNECT_POOL 46.208.216.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Remove existing NAT rule for 33.130.195.43", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 92.54.101.225\n# Removes NAT for 92.54.101.225."}
+{"instruction": "Configure syslog to 110.92.141.95", "output": "logging host 32.199.73.5\nlogging trap warnings\n# Sends logs to syslog server 32.199.73.5."}
+{"instruction": "Add static route to network 80.193.119.166/24 via 74.237.148.10", "output": "route outside 159.116.170.13 255.255.255.0 148.186.78.50\n# Adds static route."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Enable interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/2\n no shutdown\n# Enables the interface."}
+{"instruction": "Create static NAT for inside host 13.250.251.197 to 22.104.103.215", "output": "object network INSIDE_HOST\n host 142.119.25.174\n nat (inside,outside) static 92.89.1.28\n# Static NAT mapping for 142.119.25.174."}
+{"instruction": "Configure syslog to 91.83.205.175", "output": "logging host 125.80.51.118\nlogging trap warnings\n# Sends logs to syslog server 125.80.51.118."}
+{"instruction": "Create IPSec VPN tunnel to peer 156.187.174.246", "output": "crypto map VPN-MAP 10 set peer 115.58.150.10\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Configure syslog to 98.154.76.246", "output": "logging host 127.130.174.84\nlogging trap warnings\n# Sends logs to syslog server 127.130.174.84."}
+{"instruction": "Create static NAT for inside host 76.179.179.36 to 44.207.181.165", "output": "object network INSIDE_HOST\n host 96.223.164.213\n nat (inside,outside) static 188.28.227.76\n# Static NAT mapping for 96.223.164.213."}
+{"instruction": "Block IP 98.67.195.212", "output": "access-list OUTSIDE-IN extended deny ip host 120.187.113.123 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 120.187.113.123."}
+{"instruction": "Create IPSec VPN tunnel to peer 79.223.116.166", "output": "crypto map VPN-MAP 10 set peer 81.165.118.198\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Block IP 171.142.201.160", "output": "access-list OUTSIDE-IN extended deny ip host 95.39.153.106 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 95.39.153.106."}
+{"instruction": "Ping host 125.181.212.73", "output": "ping 97.72.4.89\n# Sends ICMP echo request."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Ping host 30.54.123.173", "output": "ping 100.255.153.45\n# Sends ICMP echo request."}
+{"instruction": "Configure syslog to 61.255.235.78", "output": "logging host 115.140.214.42\nlogging trap warnings\n# Sends logs to syslog server 115.140.214.42."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Configure syslog to 101.242.251.225", "output": "logging host 80.189.52.95\nlogging trap warnings\n# Sends logs to syslog server 80.189.52.95."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Deny HTTP from 173.59.14.143", "output": "access-list OUTSIDE-IN extended deny tcp host 96.98.32.229 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 96.98.32.229."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Block IP 41.220.5.59", "output": "access-list OUTSIDE-IN extended deny ip host 22.64.91.151 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 22.64.91.151."}
+{"instruction": "Create static NAT for inside host 20.40.164.181 to 102.111.54.51", "output": "object network INSIDE_HOST\n host 58.88.204.146\n nat (inside,outside) static 147.42.182.208\n# Static NAT mapping for 58.88.204.146."}
+{"instruction": "Allow SSH access only from 127.136.203.241", "output": "ip access-list standard SSH_ACCESS\n permit 11.114.77.59\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 11.114.77.59."}
+{"instruction": "Block IP 158.139.142.139", "output": "access-list OUTSIDE-IN extended deny ip host 117.228.179.188 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 117.228.179.188."}
+{"instruction": "Create static NAT for inside host 176.95.79.217 to 41.154.193.206", "output": "object network INSIDE_HOST\n host 100.244.92.157\n nat (inside,outside) static 75.74.244.203\n# Static NAT mapping for 100.244.92.157."}
+{"instruction": "Configure syslog to 115.130.134.196", "output": "logging host 70.122.96.194\nlogging trap warnings\n# Sends logs to syslog server 70.122.96.194."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Create static NAT for inside host 20.36.227.253 to 173.61.134.53", "output": "object network INSIDE_HOST\n host 125.54.97.39\n nat (inside,outside) static 16.178.208.43\n# Static NAT mapping for 125.54.97.39."}
+{"instruction": "Enable SNMP with community INTERNAL", "output": "snmp-server community PUBLIC RO\n# Configures SNMP read-only community."}
+{"instruction": "Deny HTTP from 14.66.215.215", "output": "access-list OUTSIDE-IN extended deny tcp host 157.213.25.23 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 157.213.25.23."}
+{"instruction": "Block IP 151.75.100.133", "output": "access-list OUTSIDE-IN extended deny ip host 113.139.157.254 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 113.139.157.254."}
+{"instruction": "Configure dynamic PAT for internal network 187.166.4.217/24", "output": "object network INSIDE_NET\n subnet 111.181.65.50 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Configure dynamic PAT for internal network 14.42.89.81/24", "output": "object network INSIDE_NET\n subnet 186.115.240.100 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Ping host 187.3.156.94", "output": "ping 67.199.187.132\n# Sends ICMP echo request."}
+{"instruction": "Ping host 111.90.103.214", "output": "ping 17.15.151.237\n# Sends ICMP echo request."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Remove existing NAT rule for 123.51.203.76", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 154.2.246.35\n# Removes NAT for 154.2.246.35."}
+{"instruction": "Deny HTTP from 102.6.196.186", "output": "access-list OUTSIDE-IN extended deny tcp host 117.153.4.253 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 117.153.4.253."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Create IPSec VPN tunnel to peer 76.235.208.16", "output": "crypto map VPN-MAP 10 set peer 84.97.144.128\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Shutdown interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/4\n shutdown\n# Disables the interface."}
+{"instruction": "Configure syslog to 59.60.149.197", "output": "logging host 86.149.187.41\nlogging trap warnings\n# Sends logs to syslog server 86.149.187.41."}
+{"instruction": "Configure AnyConnect VPN pool 104.199.177.0-255", "output": "ip local pool ANYCONNECT_POOL 187.62.120.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Configure dynamic PAT for internal network 132.81.141.9/24", "output": "object network INSIDE_NET\n subnet 75.250.126.231 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Add static route to network 120.151.226.133/24 via 52.25.1.149", "output": "route outside 119.89.40.83 255.255.255.0 102.49.244.217\n# Adds static route."}
+{"instruction": "Create static NAT for inside host 39.251.29.243 to 173.162.250.161", "output": "object network INSIDE_HOST\n host 16.244.73.135\n nat (inside,outside) static 39.85.56.80\n# Static NAT mapping for 16.244.73.135."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Assign VLAN 55 to interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/3\n switchport access vlan 81\n# Assigns VLAN 81."}
+{"instruction": "Ping host 175.142.32.253", "output": "ping 26.226.144.195\n# Sends ICMP echo request."}
+{"instruction": "Assign VLAN 50 to interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/0\n switchport access vlan 45\n# Assigns VLAN 45."}
+{"instruction": "Configure dynamic PAT for internal network 66.240.110.73/24", "output": "object network INSIDE_NET\n subnet 57.169.168.144 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Allow SSH access only from 73.179.37.182", "output": "ip access-list standard SSH_ACCESS\n permit 122.229.70.219\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 122.229.70.219."}
+{"instruction": "Configure AnyConnect VPN pool 17.102.46.0-255", "output": "ip local pool ANYCONNECT_POOL 166.212.101.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Enable SNMP with community PUBLIC", "output": "snmp-server community PUBLIC RO\n# Configures SNMP read-only community."}
+{"instruction": "Allow SSH access only from 178.178.135.13", "output": "ip access-list standard SSH_ACCESS\n permit 49.228.185.147\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 49.228.185.147."}
+{"instruction": "Configure AnyConnect VPN pool 148.24.102.0-255", "output": "ip local pool ANYCONNECT_POOL 136.158.215.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Configure syslog to 16.111.147.124", "output": "logging host 148.67.72.146\nlogging trap warnings\n# Sends logs to syslog server 148.67.72.146."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Create IPSec VPN tunnel to peer 162.80.214.199", "output": "crypto map VPN-MAP 10 set peer 10.250.84.38\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Enable SNMP with community BACKUP", "output": "snmp-server community MONITOR RO\n# Configures SNMP read-only community."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Configure dynamic PAT for internal network 52.109.16.120/24", "output": "object network INSIDE_NET\n subnet 135.21.141.147 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Shutdown interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/0\n shutdown\n# Disables the interface."}
+{"instruction": "Allow SSH access only from 177.184.51.190", "output": "ip access-list standard SSH_ACCESS\n permit 106.48.129.184\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 106.48.129.184."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Deny HTTP from 16.63.46.85", "output": "access-list OUTSIDE-IN extended deny tcp host 101.190.217.169 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 101.190.217.169."}
+{"instruction": "Create static NAT for inside host 71.175.14.207 to 172.150.173.157", "output": "object network INSIDE_HOST\n host 81.73.209.7\n nat (inside,outside) static 58.83.226.87\n# Static NAT mapping for 81.73.209.7."}
+{"instruction": "Allow SSH access only from 91.101.249.79", "output": "ip access-list standard SSH_ACCESS\n permit 46.96.221.220\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 46.96.221.220."}
+{"instruction": "Add static route to network 180.35.118.75/24 via 173.145.39.65", "output": "route outside 181.7.111.11 255.255.255.0 174.236.234.205\n# Adds static route."}
+{"instruction": "Add static route to network 169.221.95.30/24 via 17.22.78.245", "output": "route outside 150.223.170.140 255.255.255.0 11.156.3.231\n# Adds static route."}
+{"instruction": "Assign VLAN 46 to interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/2\n switchport access vlan 30\n# Assigns VLAN 30."}
+{"instruction": "Enable interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/2\n no shutdown\n# Enables the interface."}
+{"instruction": "Create static NAT for inside host 11.76.8.18 to 65.46.74.101", "output": "object network INSIDE_HOST\n host 81.233.154.50\n nat (inside,outside) static 150.142.8.153\n# Static NAT mapping for 81.233.154.50."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Enable SNMP with community PUBLIC", "output": "snmp-server community BACKUP RO\n# Configures SNMP read-only community."}
+{"instruction": "Deny HTTP from 85.42.72.189", "output": "access-list OUTSIDE-IN extended deny tcp host 156.84.102.74 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 156.84.102.74."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Add static route to network 161.119.123.72/24 via 133.46.89.126", "output": "route outside 21.52.188.67 255.255.255.0 129.220.121.113\n# Adds static route."}
+{"instruction": "Assign VLAN 120 to interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/4\n switchport access vlan 174\n# Assigns VLAN 174."}
+{"instruction": "Shutdown interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/0\n shutdown\n# Disables the interface."}
+{"instruction": "Block IP 186.105.153.201", "output": "access-list OUTSIDE-IN extended deny ip host 36.191.247.44 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 36.191.247.44."}
+{"instruction": "Block IP 63.230.74.127", "output": "access-list OUTSIDE-IN extended deny ip host 184.157.32.85 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 184.157.32.85."}
+{"instruction": "Deny HTTP from 93.19.13.33", "output": "access-list OUTSIDE-IN extended deny tcp host 39.243.1.191 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 39.243.1.191."}
+{"instruction": "Assign VLAN 19 to interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/0\n switchport access vlan 195\n# Assigns VLAN 195."}
+{"instruction": "Configure dynamic PAT for internal network 153.189.156.165/24", "output": "object network INSIDE_NET\n subnet 135.61.91.117 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Enable SNMP with community PUBLIC", "output": "snmp-server community PUBLIC RO\n# Configures SNMP read-only community."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Enable interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/1\n no shutdown\n# Enables the interface."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Deny HTTP from 129.1.203.114", "output": "access-list OUTSIDE-IN extended deny tcp host 180.212.142.156 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 180.212.142.156."}
+{"instruction": "Shutdown interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/1\n shutdown\n# Disables the interface."}
+{"instruction": "Add static route to network 54.24.39.234/24 via 116.7.50.12", "output": "route outside 138.133.196.34 255.255.255.0 125.130.77.21\n# Adds static route."}
+{"instruction": "Block IP 102.39.23.210", "output": "access-list OUTSIDE-IN extended deny ip host 22.10.248.122 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 22.10.248.122."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Ping host 68.137.13.199", "output": "ping 50.135.218.3\n# Sends ICMP echo request."}
+{"instruction": "Enable SNMP with community MONITOR", "output": "snmp-server community BACKUP RO\n# Configures SNMP read-only community."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Deny HTTP from 131.181.155.122", "output": "access-list OUTSIDE-IN extended deny tcp host 24.121.164.226 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 24.121.164.226."}
+{"instruction": "Remove existing NAT rule for 15.21.56.78", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 21.216.77.153\n# Removes NAT for 21.216.77.153."}
+{"instruction": "Remove existing NAT rule for 11.156.111.45", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 175.210.144.151\n# Removes NAT for 175.210.144.151."}
+{"instruction": "Block IP 14.181.154.27", "output": "access-list OUTSIDE-IN extended deny ip host 47.220.66.254 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 47.220.66.254."}
+{"instruction": "Deny HTTP from 10.14.138.163", "output": "access-list OUTSIDE-IN extended deny tcp host 190.248.191.84 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 190.248.191.84."}
+{"instruction": "Allow SSH access only from 136.28.252.192", "output": "ip access-list standard SSH_ACCESS\n permit 134.148.195.56\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 134.148.195.56."}
+{"instruction": "Enable interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/3\n no shutdown\n# Enables the interface."}
+{"instruction": "Enable interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/0\n no shutdown\n# Enables the interface."}
+{"instruction": "Create IPSec VPN tunnel to peer 31.163.88.81", "output": "crypto map VPN-MAP 10 set peer 82.113.231.29\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Assign VLAN 64 to interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/1\n switchport access vlan 122\n# Assigns VLAN 122."}
+{"instruction": "Remove existing NAT rule for 39.130.93.78", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 100.128.187.41\n# Removes NAT for 100.128.187.41."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Shutdown interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/2\n shutdown\n# Disables the interface."}
+{"instruction": "Enable interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/1\n no shutdown\n# Enables the interface."}
+{"instruction": "Ping host 192.128.86.173", "output": "ping 185.219.135.92\n# Sends ICMP echo request."}
+{"instruction": "Add static route to network 137.100.166.29/24 via 134.51.30.107", "output": "route outside 148.154.4.175 255.255.255.0 145.72.228.76\n# Adds static route."}
+{"instruction": "Ping host 90.163.28.183", "output": "ping 106.212.205.109\n# Sends ICMP echo request."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Shutdown interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/0\n shutdown\n# Disables the interface."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Enable SNMP with community INTERNAL", "output": "snmp-server community BACKUP RO\n# Configures SNMP read-only community."}
+{"instruction": "Configure dynamic PAT for internal network 176.249.168.121/24", "output": "object network INSIDE_NET\n subnet 112.236.199.68 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Assign VLAN 169 to interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/2\n switchport access vlan 200\n# Assigns VLAN 200."}
+{"instruction": "Deny HTTP from 15.208.82.226", "output": "access-list OUTSIDE-IN extended deny tcp host 51.2.149.239 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 51.2.149.239."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Block IP 168.247.68.9", "output": "access-list OUTSIDE-IN extended deny ip host 144.165.43.130 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 144.165.43.130."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Configure dynamic PAT for internal network 163.244.170.163/24", "output": "object network INSIDE_NET\n subnet 17.187.57.198 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Remove existing NAT rule for 109.157.45.191", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 30.194.196.168\n# Removes NAT for 30.194.196.168."}
+{"instruction": "Create IPSec VPN tunnel to peer 15.4.90.59", "output": "crypto map VPN-MAP 10 set peer 188.122.4.55\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Shutdown interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/1\n shutdown\n# Disables the interface."}
+{"instruction": "Enable SNMP with community BACKUP", "output": "snmp-server community PUBLIC RO\n# Configures SNMP read-only community."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Enable interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/2\n no shutdown\n# Enables the interface."}
+{"instruction": "Shutdown interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/3\n shutdown\n# Disables the interface."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Allow SSH access only from 73.85.241.111", "output": "ip access-list standard SSH_ACCESS\n permit 163.184.134.1\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 163.184.134.1."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Enable interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/0\n no shutdown\n# Enables the interface."}
+{"instruction": "Enable interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/0\n no shutdown\n# Enables the interface."}
+{"instruction": "Create static NAT for inside host 75.248.89.25 to 163.108.217.197", "output": "object network INSIDE_HOST\n host 75.1.5.65\n nat (inside,outside) static 163.150.171.81\n# Static NAT mapping for 75.1.5.65."}
+{"instruction": "Configure dynamic PAT for internal network 168.141.186.35/24", "output": "object network INSIDE_NET\n subnet 130.22.29.163 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Configure syslog to 98.218.3.242", "output": "logging host 185.68.205.110\nlogging trap warnings\n# Sends logs to syslog server 185.68.205.110."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Create IPSec VPN tunnel to peer 188.46.106.87", "output": "crypto map VPN-MAP 10 set peer 161.164.18.75\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Configure dynamic PAT for internal network 79.124.208.169/24", "output": "object network INSIDE_NET\n subnet 84.62.103.45 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Enable interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/2\n no shutdown\n# Enables the interface."}
+{"instruction": "Block IP 185.255.129.16", "output": "access-list OUTSIDE-IN extended deny ip host 39.80.120.240 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 39.80.120.240."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Enable SNMP with community PUBLIC", "output": "snmp-server community BACKUP RO\n# Configures SNMP read-only community."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Configure dynamic PAT for internal network 51.228.95.99/24", "output": "object network INSIDE_NET\n subnet 129.34.6.88 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Shutdown interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/0\n shutdown\n# Disables the interface."}
+{"instruction": "Block IP 135.189.168.168", "output": "access-list OUTSIDE-IN extended deny ip host 171.90.225.96 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 171.90.225.96."}
+{"instruction": "Configure AnyConnect VPN pool 119.188.95.0-255", "output": "ip local pool ANYCONNECT_POOL 186.25.242.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Deny HTTP from 98.161.101.179", "output": "access-list OUTSIDE-IN extended deny tcp host 44.141.102.118 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 44.141.102.118."}
+{"instruction": "Block IP 16.186.170.33", "output": "access-list OUTSIDE-IN extended deny ip host 180.246.242.119 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 180.246.242.119."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Block IP 37.216.126.15", "output": "access-list OUTSIDE-IN extended deny ip host 37.52.108.246 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 37.52.108.246."}
+{"instruction": "Shutdown interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/3\n shutdown\n# Disables the interface."}
+{"instruction": "Remove existing NAT rule for 140.194.50.160", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 78.71.88.72\n# Removes NAT for 78.71.88.72."}
+{"instruction": "Assign VLAN 171 to interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/4\n switchport access vlan 147\n# Assigns VLAN 147."}
+{"instruction": "Create IPSec VPN tunnel to peer 79.132.69.82", "output": "crypto map VPN-MAP 10 set peer 105.220.194.223\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Allow SSH access only from 127.114.34.61", "output": "ip access-list standard SSH_ACCESS\n permit 128.142.198.203\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 128.142.198.203."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Remove existing NAT rule for 146.48.45.133", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 40.192.189.141\n# Removes NAT for 40.192.189.141."}
+{"instruction": "Enable interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/0\n no shutdown\n# Enables the interface."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Configure syslog to 146.109.227.145", "output": "logging host 82.182.77.12\nlogging trap warnings\n# Sends logs to syslog server 82.182.77.12."}
+{"instruction": "Add static route to network 49.52.218.23/24 via 166.27.196.227", "output": "route outside 110.65.214.50 255.255.255.0 109.21.108.52\n# Adds static route."}
+{"instruction": "Add static route to network 87.82.57.5/24 via 125.46.40.183", "output": "route outside 132.67.179.97 255.255.255.0 33.147.178.245\n# Adds static route."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Configure syslog to 155.127.106.36", "output": "logging host 118.140.160.98\nlogging trap warnings\n# Sends logs to syslog server 118.140.160.98."}
+{"instruction": "Allow SSH access only from 12.122.238.123", "output": "ip access-list standard SSH_ACCESS\n permit 33.251.106.247\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 33.251.106.247."}
+{"instruction": "Create static NAT for inside host 124.149.255.111 to 108.157.185.242", "output": "object network INSIDE_HOST\n host 46.5.92.249\n nat (inside,outside) static 58.153.42.110\n# Static NAT mapping for 46.5.92.249."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Enable SNMP with community INTERNAL", "output": "snmp-server community PUBLIC RO\n# Configures SNMP read-only community."}
+{"instruction": "Configure AnyConnect VPN pool 187.136.38.0-255", "output": "ip local pool ANYCONNECT_POOL 149.215.174.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Add static route to network 79.126.231.44/24 via 98.53.155.180", "output": "route outside 46.112.146.164 255.255.255.0 138.139.50.240\n# Adds static route."}
+{"instruction": "Enable interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/4\n no shutdown\n# Enables the interface."}
+{"instruction": "Allow SSH access only from 185.81.40.125", "output": "ip access-list standard SSH_ACCESS\n permit 85.82.4.14\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 85.82.4.14."}
+{"instruction": "Assign VLAN 43 to interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/2\n switchport access vlan 167\n# Assigns VLAN 167."}
+{"instruction": "Configure syslog to 187.122.201.89", "output": "logging host 48.174.178.129\nlogging trap warnings\n# Sends logs to syslog server 48.174.178.129."}
+{"instruction": "Create static NAT for inside host 146.72.236.14 to 164.229.119.245", "output": "object network INSIDE_HOST\n host 172.139.192.85\n nat (inside,outside) static 32.247.157.212\n# Static NAT mapping for 172.139.192.85."}
+{"instruction": "Deny HTTP from 16.217.145.236", "output": "access-list OUTSIDE-IN extended deny tcp host 153.216.127.127 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 153.216.127.127."}
+{"instruction": "Shutdown interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/2\n shutdown\n# Disables the interface."}
+{"instruction": "Shutdown interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/5\n shutdown\n# Disables the interface."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Add static route to network 13.8.140.2/24 via 172.176.176.161", "output": "route outside 96.96.78.22 255.255.255.0 119.0.130.167\n# Adds static route."}
+{"instruction": "Enable interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/3\n no shutdown\n# Enables the interface."}
+{"instruction": "Configure syslog to 75.81.34.146", "output": "logging host 160.109.249.146\nlogging trap warnings\n# Sends logs to syslog server 160.109.249.146."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Shutdown interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/1\n shutdown\n# Disables the interface."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Configure syslog to 120.205.12.175", "output": "logging host 113.138.46.183\nlogging trap warnings\n# Sends logs to syslog server 113.138.46.183."}
+{"instruction": "Ping host 178.197.171.86", "output": "ping 167.99.40.102\n# Sends ICMP echo request."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Configure AnyConnect VPN pool 67.243.148.0-255", "output": "ip local pool ANYCONNECT_POOL 30.43.109.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Assign VLAN 64 to interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/2\n switchport access vlan 15\n# Assigns VLAN 15."}
+{"instruction": "Configure AnyConnect VPN pool 189.16.239.0-255", "output": "ip local pool ANYCONNECT_POOL 115.161.65.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Enable interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/5\n no shutdown\n# Enables the interface."}
+{"instruction": "Configure syslog to 114.181.157.226", "output": "logging host 185.202.40.29\nlogging trap warnings\n# Sends logs to syslog server 185.202.40.29."}
+{"instruction": "Enable interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/3\n no shutdown\n# Enables the interface."}
+{"instruction": "Create IPSec VPN tunnel to peer 69.151.31.95", "output": "crypto map VPN-MAP 10 set peer 147.212.57.190\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Configure AnyConnect VPN pool 171.1.180.0-255", "output": "ip local pool ANYCONNECT_POOL 94.21.95.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Configure syslog to 97.191.142.245", "output": "logging host 173.211.172.254\nlogging trap warnings\n# Sends logs to syslog server 173.211.172.254."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Shutdown interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/1\n shutdown\n# Disables the interface."}
+{"instruction": "Remove existing NAT rule for 120.3.208.154", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 74.143.78.169\n# Removes NAT for 74.143.78.169."}
+{"instruction": "Configure syslog to 183.212.100.136", "output": "logging host 59.238.10.102\nlogging trap warnings\n# Sends logs to syslog server 59.238.10.102."}
+{"instruction": "Ping host 84.221.77.126", "output": "ping 106.101.102.235\n# Sends ICMP echo request."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Deny HTTP from 49.80.62.120", "output": "access-list OUTSIDE-IN extended deny tcp host 157.200.153.182 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 157.200.153.182."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Enable interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/5\n no shutdown\n# Enables the interface."}
+{"instruction": "Create static NAT for inside host 153.17.30.171 to 105.147.57.173", "output": "object network INSIDE_HOST\n host 48.51.12.232\n nat (inside,outside) static 63.102.47.100\n# Static NAT mapping for 48.51.12.232."}
+{"instruction": "Configure dynamic PAT for internal network 154.125.23.117/24", "output": "object network INSIDE_NET\n subnet 21.100.15.128 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Add static route to network 174.15.27.191/24 via 170.28.201.37", "output": "route outside 38.218.128.6 255.255.255.0 49.69.94.13\n# Adds static route."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Enable interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/1\n no shutdown\n# Enables the interface."}
+{"instruction": "Ping host 109.228.145.252", "output": "ping 70.119.92.238\n# Sends ICMP echo request."}
+{"instruction": "Configure dynamic PAT for internal network 15.244.108.183/24", "output": "object network INSIDE_NET\n subnet 25.172.199.227 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Create static NAT for inside host 18.247.212.147 to 18.44.156.125", "output": "object network INSIDE_HOST\n host 64.167.197.135\n nat (inside,outside) static 32.65.190.21\n# Static NAT mapping for 64.167.197.135."}
+{"instruction": "Shutdown interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/3\n shutdown\n# Disables the interface."}
+{"instruction": "Enable interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/2\n no shutdown\n# Enables the interface."}
+{"instruction": "Allow SSH access only from 144.119.100.223", "output": "ip access-list standard SSH_ACCESS\n permit 90.166.226.63\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 90.166.226.63."}
+{"instruction": "Add static route to network 119.120.199.71/24 via 27.144.128.233", "output": "route outside 139.245.183.48 255.255.255.0 87.246.35.209\n# Adds static route."}
+{"instruction": "Create static NAT for inside host 31.250.29.147 to 42.254.161.65", "output": "object network INSIDE_HOST\n host 43.177.45.55\n nat (inside,outside) static 106.15.218.99\n# Static NAT mapping for 43.177.45.55."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Configure AnyConnect VPN pool 84.232.52.0-255", "output": "ip local pool ANYCONNECT_POOL 138.222.234.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Block IP 177.201.149.20", "output": "access-list OUTSIDE-IN extended deny ip host 141.248.113.22 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 141.248.113.22."}
+{"instruction": "Ping host 34.204.253.136", "output": "ping 142.70.44.62\n# Sends ICMP echo request."}
+{"instruction": "Allow SSH access only from 55.85.163.3", "output": "ip access-list standard SSH_ACCESS\n permit 38.158.215.126\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 38.158.215.126."}
+{"instruction": "Create IPSec VPN tunnel to peer 152.42.153.251", "output": "crypto map VPN-MAP 10 set peer 96.21.27.133\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Block IP 103.138.223.149", "output": "access-list OUTSIDE-IN extended deny ip host 58.63.171.254 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 58.63.171.254."}
+{"instruction": "Deny HTTP from 104.33.77.164", "output": "access-list OUTSIDE-IN extended deny tcp host 171.200.24.205 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 171.200.24.205."}
+{"instruction": "Enable interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/4\n no shutdown\n# Enables the interface."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Create static NAT for inside host 50.83.66.128 to 90.75.238.13", "output": "object network INSIDE_HOST\n host 111.6.100.162\n nat (inside,outside) static 139.245.99.197\n# Static NAT mapping for 111.6.100.162."}
+{"instruction": "Configure dynamic PAT for internal network 188.101.94.156/24", "output": "object network INSIDE_NET\n subnet 91.15.45.77 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Create static NAT for inside host 43.146.107.248 to 183.165.210.79", "output": "object network INSIDE_HOST\n host 103.64.10.187\n nat (inside,outside) static 137.6.56.40\n# Static NAT mapping for 103.64.10.187."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Assign VLAN 58 to interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/3\n switchport access vlan 56\n# Assigns VLAN 56."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Create IPSec VPN tunnel to peer 91.195.154.222", "output": "crypto map VPN-MAP 10 set peer 62.106.95.160\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Shutdown interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/1\n shutdown\n# Disables the interface."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Configure syslog to 81.71.31.71", "output": "logging host 89.242.48.172\nlogging trap warnings\n# Sends logs to syslog server 89.242.48.172."}
+{"instruction": "Enable interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/0\n no shutdown\n# Enables the interface."}
+{"instruction": "Enable AAA authentication for SSH", "output": "aaa authentication ssh console LOCAL\nusername admin password cisco\n# Enables local AAA for SSH."}
+{"instruction": "Remove existing NAT rule for 45.4.13.181", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 99.83.107.139\n# Removes NAT for 99.83.107.139."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Configure dynamic PAT for internal network 144.96.128.158/24", "output": "object network INSIDE_NET\n subnet 104.115.135.217 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Create IPSec VPN tunnel to peer 160.147.233.165", "output": "crypto map VPN-MAP 10 set peer 106.148.80.41\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Create IPSec VPN tunnel to peer 126.8.100.27", "output": "crypto map VPN-MAP 10 set peer 71.30.95.204\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Allow SSH access only from 125.91.228.176", "output": "ip access-list standard SSH_ACCESS\n permit 171.114.223.244\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 171.114.223.244."}
+{"instruction": "Ping host 110.21.42.59", "output": "ping 48.124.168.63\n# Sends ICMP echo request."}
+{"instruction": "Add static route to network 87.120.48.27/24 via 53.78.20.230", "output": "route outside 114.42.252.25 255.255.255.0 157.37.53.26\n# Adds static route."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Configure dynamic PAT for internal network 128.205.182.25/24", "output": "object network INSIDE_NET\n subnet 14.207.82.106 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Remove existing NAT rule for 75.110.250.112", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 142.188.66.253\n# Removes NAT for 142.188.66.253."}
+{"instruction": "Deny HTTP from 57.187.38.55", "output": "access-list OUTSIDE-IN extended deny tcp host 121.23.205.85 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 121.23.205.85."}
+{"instruction": "Deny HTTP from 182.157.11.123", "output": "access-list OUTSIDE-IN extended deny tcp host 12.32.150.23 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 12.32.150.23."}
+{"instruction": "Configure AnyConnect VPN pool 60.195.128.0-255", "output": "ip local pool ANYCONNECT_POOL 171.87.64.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Create IPSec VPN tunnel to peer 166.67.98.214", "output": "crypto map VPN-MAP 10 set peer 54.251.158.111\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Configure dynamic PAT for internal network 58.191.229.34/24", "output": "object network INSIDE_NET\n subnet 176.39.230.83 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Enable SNMP with community MONITOR", "output": "snmp-server community PUBLIC RO\n# Configures SNMP read-only community."}
+{"instruction": "Create static NAT for inside host 187.114.117.47 to 70.92.200.246", "output": "object network INSIDE_HOST\n host 144.63.95.79\n nat (inside,outside) static 80.136.220.181\n# Static NAT mapping for 144.63.95.79."}
+{"instruction": "Deny HTTP from 106.65.35.177", "output": "access-list OUTSIDE-IN extended deny tcp host 168.177.29.30 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 168.177.29.30."}
+{"instruction": "Configure AnyConnect VPN pool 100.166.92.0-255", "output": "ip local pool ANYCONNECT_POOL 16.155.79.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Enable interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/1\n no shutdown\n# Enables the interface."}
+{"instruction": "Assign VLAN 15 to interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/5\n switchport access vlan 54\n# Assigns VLAN 54."}
+{"instruction": "Create IPSec VPN tunnel to peer 174.165.95.177", "output": "crypto map VPN-MAP 10 set peer 22.179.125.56\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Enable interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/0\n no shutdown\n# Enables the interface."}
+{"instruction": "Shutdown interface GigabitEthernet0/2", "output": "interface GigabitEthernet0/1\n shutdown\n# Disables the interface."}
+{"instruction": "Configure syslog to 81.238.150.226", "output": "logging host 163.183.38.150\nlogging trap warnings\n# Sends logs to syslog server 163.183.38.150."}
+{"instruction": "Shutdown interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/5\n shutdown\n# Disables the interface."}
+{"instruction": "Shutdown interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/1\n shutdown\n# Disables the interface."}
+{"instruction": "Block IP 78.180.201.43", "output": "access-list OUTSIDE-IN extended deny ip host 108.55.44.88 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 108.55.44.88."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Configure AnyConnect VPN pool 52.151.209.0-255", "output": "ip local pool ANYCONNECT_POOL 133.81.30.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Create static NAT for inside host 113.0.227.212 to 67.239.165.112", "output": "object network INSIDE_HOST\n host 69.2.62.82\n nat (inside,outside) static 26.233.157.145\n# Static NAT mapping for 69.2.62.82."}
+{"instruction": "Deny HTTP from 142.152.250.62", "output": "access-list OUTSIDE-IN extended deny tcp host 94.159.190.35 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 94.159.190.35."}
+{"instruction": "Remove existing NAT rule for 163.27.145.116", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 120.111.158.5\n# Removes NAT for 120.111.158.5."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Assign VLAN 16 to interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/3\n switchport access vlan 154\n# Assigns VLAN 154."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Remove existing NAT rule for 167.57.221.17", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 144.252.200.206\n# Removes NAT for 144.252.200.206."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Shutdown interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/1\n shutdown\n# Disables the interface."}
+{"instruction": "Deny HTTP from 97.137.217.75", "output": "access-list OUTSIDE-IN extended deny tcp host 55.245.133.237 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 55.245.133.237."}
+{"instruction": "Enable SNMP with community INTERNAL", "output": "snmp-server community PUBLIC RO\n# Configures SNMP read-only community."}
+{"instruction": "Block IP 52.197.92.101", "output": "access-list OUTSIDE-IN extended deny ip host 125.130.191.172 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 125.130.191.172."}
+{"instruction": "Ping host 35.36.130.219", "output": "ping 90.93.69.190\n# Sends ICMP echo request."}
+{"instruction": "Create IPSec VPN tunnel to peer 155.186.38.106", "output": "crypto map VPN-MAP 10 set peer 40.161.123.39\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Create static NAT for inside host 185.104.122.86 to 106.6.48.62", "output": "object network INSIDE_HOST\n host 133.243.162.191\n nat (inside,outside) static 51.175.58.22\n# Static NAT mapping for 133.243.162.191."}
+{"instruction": "Assign VLAN 83 to interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/1\n switchport access vlan 160\n# Assigns VLAN 160."}
+{"instruction": "Enable SNMP with community BACKUP", "output": "snmp-server community BACKUP RO\n# Configures SNMP read-only community."}
+{"instruction": "Shutdown interface GigabitEthernet0/4", "output": "interface GigabitEthernet0/2\n shutdown\n# Disables the interface."}
+{"instruction": "Create IPSec VPN tunnel to peer 21.115.0.193", "output": "crypto map VPN-MAP 10 set peer 27.156.215.2\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Add static route to network 149.85.141.173/24 via 105.9.188.209", "output": "route outside 190.174.34.53 255.255.255.0 60.213.181.110\n# Adds static route."}
+{"instruction": "Deny HTTP from 40.183.28.14", "output": "access-list OUTSIDE-IN extended deny tcp host 12.39.130.67 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 12.39.130.67."}
+{"instruction": "Assign VLAN 160 to interface GigabitEthernet0/3", "output": "interface GigabitEthernet0/2\n switchport access vlan 61\n# Assigns VLAN 61."}
+{"instruction": "Configure dynamic PAT for internal network 34.243.252.193/24", "output": "object network INSIDE_NET\n subnet 142.208.166.76 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Create IPSec VPN tunnel to peer 38.141.172.43", "output": "crypto map VPN-MAP 10 set peer 71.71.216.83\ncrypto map VPN-MAP 10 match address VPN-TRAFFIC\ncrypto map VPN-MAP 10 set transform-set ESP-AES-SHA\n# Creates site-to-site VPN tunnel."}
+{"instruction": "Deny HTTP from 138.101.215.9", "output": "access-list OUTSIDE-IN extended deny tcp host 182.188.153.202 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 182.188.153.202."}
+{"instruction": "Block IP 53.108.87.92", "output": "access-list OUTSIDE-IN extended deny ip host 185.165.204.181 any\naccess-group OUTSIDE-IN in interface outside\n# Blocks all traffic from 185.165.204.181."}
+{"instruction": "Create static NAT for inside host 57.31.185.6 to 64.181.17.204", "output": "object network INSIDE_HOST\n host 158.152.134.1\n nat (inside,outside) static 164.167.189.234\n# Static NAT mapping for 158.152.134.1."}
+{"instruction": "Show running configuration", "output": "show running-config\n# Displays active configuration."}
+{"instruction": "Allow SSH access only from 119.46.23.117", "output": "ip access-list standard SSH_ACCESS\n permit 110.33.3.88\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 110.33.3.88."}
+{"instruction": "Configure syslog to 18.85.221.6", "output": "logging host 134.155.135.250\nlogging trap warnings\n# Sends logs to syslog server 134.155.135.250."}
+{"instruction": "Allow SSH access only from 86.204.226.11", "output": "ip access-list standard SSH_ACCESS\n permit 149.1.81.100\n line vty 0 4\n access-class SSH_ACCESS in\n# Allows SSH only from 149.1.81.100."}
+{"instruction": "Configure dynamic PAT for internal network 18.204.190.77/24", "output": "object network INSIDE_NET\n subnet 154.151.74.223 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Configure syslog to 77.187.136.109", "output": "logging host 133.142.68.237\nlogging trap warnings\n# Sends logs to syslog server 133.142.68.237."}
+{"instruction": "Remove existing NAT rule for 131.103.195.69", "output": "no object network INSIDE_HOST\nno nat (inside,outside) static 157.175.25.148\n# Removes NAT for 157.175.25.148."}
+{"instruction": "Configure dynamic PAT for internal network 191.244.97.77/24", "output": "object network INSIDE_NET\n subnet 115.203.238.175 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Show routing table", "output": "show route\n# Displays current routing table."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Create static NAT for inside host 86.253.232.127 to 44.128.19.199", "output": "object network INSIDE_HOST\n host 160.201.228.156\n nat (inside,outside) static 100.52.185.158\n# Static NAT mapping for 160.201.228.156."}
+{"instruction": "Enable SNMP with community PUBLIC", "output": "snmp-server community INTERNAL RO\n# Configures SNMP read-only community."}
+{"instruction": "Configure AnyConnect VPN pool 185.33.198.0-255", "output": "ip local pool ANYCONNECT_POOL 15.54.6.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Ping host 65.133.80.172", "output": "ping 191.25.118.74\n# Sends ICMP echo request."}
+{"instruction": "Assign VLAN 151 to interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/4\n switchport access vlan 167\n# Assigns VLAN 167."}
+{"instruction": "Configure AnyConnect VPN pool 103.81.75.0-255", "output": "ip local pool ANYCONNECT_POOL 172.129.208.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Create static NAT for inside host 30.70.195.80 to 137.173.108.166", "output": "object network INSIDE_HOST\n host 127.157.251.164\n nat (inside,outside) static 80.210.249.210\n# Static NAT mapping for 127.157.251.164."}
+{"instruction": "Deny HTTP from 43.74.248.222", "output": "access-list OUTSIDE-IN extended deny tcp host 98.42.207.112 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 98.42.207.112."}
+{"instruction": "Configure syslog to 57.88.5.62", "output": "logging host 76.252.252.101\nlogging trap warnings\n# Sends logs to syslog server 76.252.252.101."}
+{"instruction": "Create static NAT for inside host 112.55.116.36 to 85.189.89.15", "output": "object network INSIDE_HOST\n host 89.35.89.232\n nat (inside,outside) static 178.166.214.81\n# Static NAT mapping for 89.35.89.232."}
+{"instruction": "Deny HTTP from 127.141.94.145", "output": "access-list OUTSIDE-IN extended deny tcp host 140.146.124.52 any eq 80\naccess-group OUTSIDE-IN in interface outside\n# Blocks HTTP from 140.146.124.52."}
+{"instruction": "Configure dynamic PAT for internal network 104.1.97.70/24", "output": "object network INSIDE_NET\n subnet 13.169.231.198 255.255.255.0\n nat (inside,outside) dynamic interface\n# Dynamic PAT for internal subnet."}
+{"instruction": "Add static route to network 106.175.246.57/24 via 92.208.50.123", "output": "route outside 59.131.249.57 255.255.255.0 78.99.63.112\n# Adds static route."}
+{"instruction": "Configure AnyConnect VPN pool 48.141.227.0-255", "output": "ip local pool ANYCONNECT_POOL 171.41.127.0-255\nwebvpn\n enable outside\n anyconnect-essentials\n# Configures AnyConnect VPN pool."}
+{"instruction": "Shutdown interface GigabitEthernet0/1", "output": "interface GigabitEthernet0/3\n shutdown\n# Disables the interface."}
+{"instruction": "Enable interface GigabitEthernet0/0", "output": "interface GigabitEthernet0/3\n no shutdown\n# Enables the interface."}
+{"instruction": "Show interface status", "output": "show interface status\n# Displays interface operational state."}
+{"instruction": "Enable OSPF on interface GigabitEthernet0/0", "output": "router ospf 1\n network 0.0.0.0 255.255.255.255 area 0\n interface GigabitEthernet0/0\n ip ospf 1 area 0\n# Enables OSPF on interface."}
+{"instruction": "Create static NAT for inside host 172.241.93.254 to 33.153.243.108", "output": "object network INSIDE_HOST\n host 155.241.4.130\n nat (inside,outside) static 139.191.158.218\n# Static NAT mapping for 155.241.4.130."}
+{"instruction": "Show VPN session details", "output": "show vpn-sessiondb detail anyconnect\n# Displays current VPN sessions."}
+{"instruction": "Shutdown interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/3\n shutdown\n# Disables the interface."}
+{"instruction": "Assign VLAN 23 to interface GigabitEthernet0/5", "output": "interface GigabitEthernet0/3\n switchport access vlan 88\n# Assigns VLAN 88."}