Cisco Config Sanitizer

Remove sensitive data from Cisco configs before posting on Reddit, Cisco Community, or sending to TAC. The sanitizer redacts passwords, SNMP community strings (including trap host communities), TACACS+ and RADIUS keys, crypto ISAKMP pre-shared keys, banner content, and optionally anonymizes IP addresses using RFC 5737 documentation ranges.

• Redacts enable secret, line passwords, username credentials
• SNMP community strings and snmp-server host trap communities
• TACACS+ and RADIUS shared keys
• Crypto ISAKMP pre-shared keys and PKI certificate blocks
• Banner login/motd content
• Optional: IP address anonymization (RFC 5737 — 192.0.2.x, 198.51.100.x)
• Shows exactly which lines were modified

Part of CiscoTools.dev — free tools for network engineers, built by Brad McCloskey.