Skip to content
Log in Sign up My account

The Network Engineer's Field Bag

This article lists the categories of kit worth carrying to a site visit, a closet or a data center, and the laptop setup that makes the hardware useful. It is written around failure modes: what you need when a switch has no management IP, a link will not come up, or a cable run is a mystery. It names categories, not brands, and quotes no prices.

How to think about the bag

Almost every site visit falls into one of four jobs: get a console on a device, prove or fix a physical link, identify what is plugged into what, and move a file or config on or off a box. Pack for those four, then add the rest.

graph LR
    A["Laptop + serial adapter"] --> B["Console access"]
    C["Cable tester, toner, PoE tester"] --> D["Copper link proof"]
    E["Inspection scope, cleaner, power meter"] --> F["Fiber link proof"]
    G["TFTP / SCP / USB stick"] --> H["Image and config transfer"]
    B --> I["Fixed device"]
    D --> I
    F --> I
    H --> I

Console access

Console access is the one item you cannot improvise. Carry more than one way in.

RJ45 rollover cable. The classic light-blue Cisco console cable. A rollover reverses the pins end to end (pin 1 to pin 8, 2 to 7, and so on), which is why a straight Ethernet cable does not work as a console cable. Carry one for the RJ45-to-DB9 case and one RJ45-to-USB serial adapter that already contains the USB-to-serial chip.

USB mini-B console. Many Catalyst switches and ISR routers have a USB mini-B console port next to the RJ45 one. On many Cisco platforms the USB console takes priority over the RJ45 port while a cable is plugged in, so do not leave a USB cable connected and then wonder why the RJ45 session is silent. Check the platform documentation for the exact behaviour on the model in front of you.

USB-C. Newer hardware is moving to USB-C for console. Do not assume; look at the port, and carry a USB-C to USB-C and a USB-A to USB-C cable so you are covered either way. A cable that only charges will not present a serial device, so mark the data-capable ones.

Adapters. A small bag of adapters is cheap insurance: DB9 to USB serial, RJ45 to DB9 female, RJ45 to DB9 male, USB-A to USB-C and a USB-C hub with Ethernet. Cisco-style RJ45 console pinouts are not universal across vendors, so for non-Cisco gear check the pinout before you plug in.

Serial settings. Cisco console defaults to 9600 baud, 8 data bits, no parity, 1 stop bit, no flow control. If you see garbage, the speed is wrong (or the device was configured with speed on line con 0, or it is in ROMMON at a different rate). Try 9600, then 115200.

Tip

Buy USB serial adapters on chip type, not on how they look. FTDI and Silicon Labs chips generally have stable drivers on all operating systems. Some very cheap clones with counterfeit chips have been blocked by driver updates. Test every adapter before the trip.

Fiber: inspect, clean, inspect

Most "bad fiber" is a dirty connector. The sequence matters.

  1. Inspect the connector end-face with a fiber inspection scope (a handheld probe that connects to a laptop or phone, or a standalone unit). Inspect both the cable and the port it plugs into where the port allows.
  2. Clean if there is any contamination. A one-click cleaner pen handles most patch-cord connectors and works through bulkhead adapters. Lint-free wipes with fiber-grade isopropyl alcohol are for stubborn residue, followed by a dry pass.
  3. Inspect again. Never assume the clean worked. Cleaning a scratched or pitted end-face does not fix it; replace the patch cord.

Keep dust caps on everything that is not plugged in, including SFPs. Fit caps on the transceiver as well as on the cable.

Eye safety. Never look into the end of a fiber or into an SFP with the link live. Most data-center optics are low power but invisible, and some long-reach optics are not harmless. Use a scope with built-in filtering, and put it on a dead cable.

Optics and fiber testing

  • Visual fault locator (VFL). A red laser pen that shows breaks and tight bends in short runs and identifies which patch cord is which at a panel. It also identifies fibers in a bundle.
  • Optical power meter and light source. Gives you a loss figure for a run so you can compare it against the link budget of the optic.
  • OTDR. Shows where along a long run the loss occurs. Worth borrowing or renting for campus or metro fiber, rarely worth carrying every day.
  • SFP and optic testers. Standalone units that take a pluggable and report whether it is recognized, its power levels and sometimes line-rate loopback results. They are also useful for checking coded third-party optics before you install them in production.
  • Loopback plugs and a short patch. A loopback lets you test an optic and port without another end.

You can get much of this information from the switch itself:

show interfaces transceiver detail
show interfaces GigabitEthernet1/0/1 status
show interfaces GigabitEthernet1/0/1 | include error|CRC

Digital optical monitoring (DOM) output shows transmit and receive power, temperature and voltage per optic. Compare receive power to the optic's documented sensitivity range, not to a number you remember.

Warning

Third-party optics may work, may be refused by the platform, or may be accepted but unsupported by the vendor's TAC. Cisco platforms have commands such as service unsupported-transceiver to allow unrecognized optics, but using them is a support decision, not a technical one. Know your organization's policy before you rely on it.

Copper: testers, toners and TDR

Three tools cover most copper problems.

Basic cable tester. A pair of units that check continuity, wire map (opens, shorts, crossed or split pairs) and sometimes length. It tells you whether a patch cord or termination is wired correctly. It does not tell you whether the cable will run gigabit reliably.

Certifier. A certification tester measures the cable against a standard (insertion loss, NEXT, return loss and so on) and produces a pass or fail report. This is what you need when someone has to sign off a new cable plant. Most engineers use one at a customer site or borrow one, rather than carrying one.

Tone generator and probe. The generator puts a signal on a pair; the probe, held near the cable or at the patch panel, finds the other end. Use it to trace an unlabeled run. Use a toner that is designed for network cabling and keep it away from live equipment ports unless its documentation says it is safe.

Switch-based TDR. Many Catalyst switches can estimate cable length and faults themselves:

test cable-diagnostics tdr interface GigabitEthernet1/0/1
show cable-diagnostics tdr interface GigabitEthernet1/0/1

Run it with the cable disconnected from the far end for the clearest result, and note that supported ports and accuracy vary by platform.

PoE testers

When an access point or phone does not power up, the question is whether the port delivers power, at what class, and how much. A PoE tester shows the presence of voltage, the 802.3 type it detects (802.3af, 802.3at, 802.3bt), and the negotiated class. For comparison, the standards define roughly 15.4 W at the source for 802.3af, 30 W for 802.3at and higher tiers for 802.3bt, with less power available at the device after cable loss.

Pair the tester with the switch view:

show power inline
show power inline GigabitEthernet1/0/5 detail
show logging | include ILPOWER

Common causes of a dead powered device: an exhausted power budget on the switch, a cable with a bad pair, a power-hungry device on a port capped at a lower class, and a port that is shut down or in err-disable.

Hand tools, labels and consumables

  • Multi-tool and driver set. Small Phillips and flat drivers, a Torx set for rack hardware, a small adjustable wrench, pliers and a snip. Add a rack-screw and cage-nut set with the installation tool, because it is always missing.
  • Punch-down tool, crimper and a spare jack kit if you do terminations. Carry replacement RJ45 connectors and boots.
  • Flashlight or headlamp. Hands-free beats a phone torch in a dark closet.
  • Velcro ties, zip ties and cable cutters. Prefer Velcro in racks you will touch again.
  • Labels. A thermal label printer or a pen and self-laminating labels. Label both ends of a cable with the same identifier, and put the label where it can be read without moving the cable. A common scheme: local device and port, remote device and port. If you keep an IPAM or DCIM source of truth (see IPAM and Source-of-Truth Tools), print the label from that record so paper and database agree.
  • Spare patch cords in a few lengths and colors, spare SFPs of the common types you run, a small switch or PoE injector, and a USB drive formatted FAT32.
  • Power. A short extension, a travel power strip and spare laptop and phone chargers.

Laptop setup

The best hardware is useless if the laptop cannot talk to it. Prepare the laptop before the trip, not on site.

Terminal and serial.

  • Windows: PuTTY, SecureCRT, MobaXterm or Windows Terminal with the built-in OpenSSH client. See Terminal and Productivity Tools.
  • Linux and macOS: screen, minicom or picocom. For example:
# Linux (adapter usually appears as ttyUSB0 or ttyACM0)
ls /dev/ttyUSB* /dev/ttyACM*
picocom -b 9600 /dev/ttyUSB0
# macOS
ls /dev/tty.usb*
screen /dev/tty.usbserial-XXXX 9600

On Linux, add yourself to the group that owns serial devices (often dialout) and log in again, or you will see permission denied. Exit picocom with Ctrl-A then Ctrl-X, and screen with Ctrl-A then K.

Serial drivers. Modern Windows, macOS and Linux include drivers for common USB serial chips and for USB CDC-ACM consoles. Older Windows versions may need the vendor's USB console driver for the mini-B port. Install any needed drivers and confirm the COM port shows up in Device Manager before you leave.

File transfer servers.

  • TFTP. tftpd-hpa or dnsmasq on Linux, a standalone TFTP server on Windows. TFTP is plain and unauthenticated; use it on an isolated link and turn it off afterwards.
  • SCP. Preferred when the device supports it. On IOS XE:
configure terminal
 ip scp server enable
 username admin privilege 15 secret ChangeMe
 aaa new-model
 aaa authorization exec default local
end
copy scp://[email protected]/image.bin flash:
  • HTTP or USB. Many platforms can also copy from a USB drive (copy usbflash0:image.bin flash:) which avoids network setup entirely.

Network setup. A static address on the laptop's Ethernet adapter in the management subnet (or a link-local plan for isolated devices), a firewall rule that allows the TFTP server on the interface you are using, and a USB Ethernet adapter as a second interface.

Documentation offline. Download the platform guides and your own runbooks as PDFs. Site Wi-Fi is not guaranteed.

Session logging. Turn on terminal logging for every console session. It is the cheapest record of exactly what happened on the device.

Tip

Make a one-page checklist and keep it in the bag. The usual misses are the console adapter, the right USB-C cable, a charger, and the images and configs you meant to copy.

A minimal kit and a full kit

Scenario Carry
Quick closet visit Laptop, USB serial adapter, rollover cable, USB mini-B and USB-C cables, patch cord, flashlight, labels
Install or refresh Above plus tester, toner, PoE tester, punch-down and crimp tools, spare optics, FAT32 USB drive, cable ties
Fiber work Above plus inspection scope, one-click cleaners, wipes and alcohol, VFL, power meter, loopbacks, dust caps

References