What's new

2.23 — 22 October 2026

The router-on-a-stick template now creates a subinterface for a native VLAN that is not one of the listed VLANs (encapsulation dot1Q native, with no IP address). Previously, such a native VLAN was omitted.
The trademark notice in the program now names Catalyst, matching the website.

New template, Security: secure unused ports. It places unused switch ports in access mode with DTP disabled, can assign them to a VLAN and add a description, and shuts them down. A VLAN that already exists keeps its name.
The VLAN hopping mitigation template no longer renames the black-hole VLAN unless a name is entered, creates the unused native VLAN only when trunk ports are listed, and can add a description to unused ports.
The OSPF single-area setup template can enable OSPF directly on interfaces (ip ospf area ), in addition to network statements. Its help explains that a single interface address uses the wildcard mask 0.0.0.0.
Basics: SSH remote access can use the administrator account created in Basics: device setup, so the account is entered once.
The morning baseline creates an administrator account with privilege 15 and offers a choice of RSA key size.
When a 1024-bit RSA key is selected, the commands include a note that IOS XE 17.11 and later disable SSH with keys shorter than 2048 bits, and a hint explains the device’s key-size warning.
The practice devices can imitate a Catalyst 9200 switch and a Catalyst 8200 router running IOS XE, or a Catalyst 2960 and an ISR 2911 running IOS 15. Each computer remembers the selection.

The OSPF interface settings template can set the reference bandwidth (auto-cost reference-bandwidth), which sets the cost of every link on the router.
Templates no longer pre-fill settings that must differ between devices or are not always wanted: passive interfaces, the OSPF router ID, the point-to-point network type, the IPv6 link-local address and the HSRP priority.
The morning baseline, SSH and VTY access templates configure VTY lines 0 to 15.
Static, default and floating routes accept an exit interface and a next hop together, the recommended form on Ethernet.
Basics: device setup can set a minimum password length, add a local administrator account and have the VTY lines log in with it. The morning baseline can set the minimum password length.
Hiding the side panel (F6) also hides the show-command buttons, leaving a plain terminal.

When a switch rejects “switchport trunk encapsulation dot1q”, the app now explains the cause: switches that support only 802.1Q trunks, such as the 2960, 9200 and 9300, do not have this command. The hint advises leaving the line out and using “switchport mode trunk”.
The practice switch now rejects “switchport trunk encapsulation”, as a real 2960 does, and places the ^ marker under the word it cannot use.

The first version offered for download. These notes cover 2.17 to 2.19.

Renamed Slatewise, with its own icon on the window and taskbar. The Display window can add a desktop shortcut that uses the icon.
The instructor password is read only from the settings file beside the program, is stored with stronger hashing, and must be at least 8 characters long.
The command log masks passwords, keys and community strings, including abbreviated forms.
Slatewise has no network features. The Console port box accepts console ports only.
Settings that let another computer save the configuration now ask for confirmation first: SNMP write access, NETCONF, RESTCONF, the SCP server and the web server.
The templates reject values IOS would not accept, such as IPv6 addresses with a zone ID and VLAN numbers outside 1 to 4094.
Improved reliability: a damaged settings file, an unusually long line from a device, or a complex practice filter no longer stops or freezes the program, and startup problems are reported.

Cisco, Catalyst and IOS are trademarks of Cisco Systems, Inc. Slatewise is an independent project, not affiliated with or endorsed by Cisco.