python-netgear-switch-library 0.0.post332__tar.gz → 0.0.post336__tar.gz

{python_netgear_switch_library-0.0.post332 → python_netgear_switch_library-0.0.post336}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-netgear-switch-library
-Version: 0.0.post332
+Version: 0.0.post336
 Summary: Python library and CLI to query and control Netgear switches over SNMP, NSDP and HTTP.
 Author-email: Tim Ansell <me@mith.ro>
 License-Expression: Apache-2.0

python_netgear_switch_library-0.0.post336/docs/superpowers/specs/2026-08-02-snmp-surface-findings.md

@@ -0,0 +1,151 @@
+# Measured SNMP surface — hostname, logging, users, ports
+
+Ground truth for expanding the library's functional coverage. Everything here
+was **measured**, not inferred: each OID below was read from a live switch, and
+where a CLI equivalent exists the two were compared.
+
+Captured 2026-08-02 by `snmpbulkwalk -v2c -c public -On <host> 1.3.6.1`.
+All five reachable switches answer on community `public`.
+
+| Host | Model | OIDs walked |
+|---|---|---|
+| 10.1.5.11 | `gsm7228ps` (S3300-52X) | 103071 |
+| 10.1.5.13 | `m4300-24x` | 190448 |
+| 10.1.5.20 | `m4300-16x` | (walk in progress) |
+| 10.1.5.22 | `gsm7252ps` | (walk in progress) |
+| 10.2.5.10 | `gs728tpp` | (walk in progress) |
+
+## How the vendor OIDs were located
+
+Not by guessing at a MIB — no Netgear MIB file is available here, and
+`snmptranslate` cannot name even the standard subtrees because only the
+NET-SNMP MIBs are installed.
+
+Instead: read the switch's configuration over its CLI first, then **search the
+walk for those exact values**. The syslog server `10.1.5.1`, the local port
+`514`, the severity `info` and the username `admin` are all distinctive enough
+to pin the column they live in. This is faster than the walk/change/walk diff
+and just as grounded, because the CLI output and the OID value are the same
+fact observed twice.
+
+It also caught a mislabelling that a MIB-free guess would have shipped: the
+subtree `4526.<family>.17` looks like logging until you notice it holds port
+`123` and the string `"NTP Bits: 0x1c6900a8"`. **`4526.x.17` is SNTP, not
+syslog.** The syslog host `10.1.5.1` appears in both subtrees because the same
+box is this fleet's NTP server and its syslog server.
+
+## Functional map of the surface (gsm7228ps, 87684 parsed varbinds)
+
+| Varbinds | Area | Library covers it? |
+|---|---|---|
+| 42612 | NETGEAR vendor `4526.11` | a few OIDs only |
+| 35777 | RMON-MIB `1.3.6.1.2.1.16` | no |
+| 1502 | IF-MIB `ifTable` | yes (ports, admin/oper status) |
+| 1501 | IF-MIB `ifXTable` | partly (HC counters, `ifHighSpeed`, `ifAlias`) |
+| 1416 | **EtherLike-MIB `dot3` — duplex** | **no** |
+| 1329 | P-BRIDGE-MIB | no |
+| 880 | ENTITY-MIB | yes (fan/PSU inventory) |
+| 780 | BRIDGE-MIB FDB | yes (`get_macs`) |
+| 563 | Q-BRIDGE-MIB | yes (VLANs) |
+| 537 | POWER-ETHERNET-MIB | yes (PoE) |
+| 206 | SNMPv2-MIB system | partly — `sysName` **not** exposed |
+| 194 | SNMP-USER-BASED-SM / VACM | no (SNMP users, distinct from local users) |
+
+## Hostname
+
+`sysName` — `1.3.6.1.2.1.1.5.0` — reads on **all five** switches. Standard MIB,
+so it does not depend on a vendor subtree, and it is the one hostname source
+that works on the `gs728tpp` (which has no vendor OIDs at all).
+
+**`sysName` is not the same value as the configured `hostname`.** Measured on
+`m4300-16x` (10.1.5.20):
+
+| Source | Value |
+|---|---|
+| `sysName` (SNMP) | `sw-netgear-m4300-16x-poe-s2` |
+| `show hosts` → "Host name" | `sw-netgear-m4300-16x-poe-s2` |
+| `show running-config \| include hostname` | `manage-sw-netgear-m4300-16x-poe-s2` |
+
+So `sysName` tracks `show hosts`, and the configured `hostname` is a *different*
+string. On `gsm7252ps` the divergence is starker: `show running-config | include
+hostname` returns **nothing at all** while `sysName` and `show hosts` both
+report `sw-netgear-gsm7252ps-s1`.
+
+A `get_hostname` that reads `sysName` on SNMP and `show running-config` on the
+CLI would therefore return **different answers for the same switch** — which the
+cross-backend equivalence tests would rightly fail. The CLI reader must parse
+`show hosts`, not `show running-config`.
+
+## Logging / syslog
+
+`4526.<family>.14` on **both** vendor families, with the same column layout —
+`4526.11.14` on the S3300 family and `4526.10.14` on FASTPATH.
+
+| OID (family arc as `x`) | Meaning | Measured |
+|---|---|---|
+| `4526.x.14.1.1.1.0` | console logging admin mode | `1` |
+| `4526.x.14.1.1.4.0` | console severity filter | `1` |
+| `4526.x.14.1.2.1.0` | buffered logging admin mode | `2` |
+| `4526.x.14.1.2.2.0` | buffered severity filter | `3` |
+| `4526.x.14.1.4.1.0` | **syslog admin mode** | `1` (m4300), `2` (S3300) |
+| `4526.x.14.1.4.3.0` | **syslog local port** | `514` |
+| `4526.x.14.1.4.4.0` | syslog max hosts | `8` |
+| `4526.x.14.1.6.2.0` | email-alert from-address | `switch@netgear.com` |
+| `4526.x.14.2.1.0` | log messages received | `82948` |
+| `4526.x.14.2.2.0` | log messages dropped | `0` |
+| `4526.x.14.3.1.0` | buffered log entry count | `82081` |
+| `4526.x.14.3.2.1.2.<n>` | buffered log message text | `<13> Aug 2 05:14:36 …` |
+
+### Syslog host table — `4526.10.14.1.4.5.1.<col>.<index>`
+
+Present on `m4300-24x`, absent on `gsm7228ps` (which has no syslog host
+configured — consistent, not a MIB difference).
+
+| Col | Meaning | Measured | CLI cross-check |
+|---|---|---|---|
+| 2 | address type | `1` | — |
+| 3 | **host address** | `10.1.5.1` | `10.1.5.1` |
+| 4 | **port** | `514` | `514` |
+| 5 | **severity** | `6` | `info` |
+| 7 | **row status / state** | `1` | `Active` |
+| 9, 10 | counters | `1`, `0` | — |
+
+Every field of `show logging hosts` is accounted for by a column, and the two
+agree. That is a genuine SNMP↔CLI cross-verification of the same state.
+
+### CLI equivalents (measured on 3 FASTPATH switches)
+
+- `show logging` — globals. The m4300s additionally report a source interface.
+- `show logging hosts` — the host table. **The column set differs by firmware**:
+  the m4300s emit `Index/IP/Severity/Port/Status/Mode/Auth/Cert#`, the
+  `gsm7252ps` emits only the first five. A parser fixed to one shape breaks on
+  the other.
+- `show syslog` does **not** exist — `% Invalid input detected` on all three.
+
+## Local users
+
+Found on the S3300 family at `4526.11.1.2.1.3.2.1.<col>.0`:
+
+| Col | Measured |
+|---|---|
+| 2 | `"admin"` (username) |
+| 4, 5, 6, 7, 9 | `2`, `1`, `2`, `1`, `0` |
+| 11 | `15` (privilege level) |
+
+**The FASTPATH family does not mirror this**: `4526.10.1.2.1.3` is empty on the
+m4300-24x, and no varbind anywhere in its 156077 parsed values equals the string
+`admin`. Local users therefore look absent from FASTPATH SNMP and will need the
+CLI (`show users`) — but that is a statement about one firmware on one SKU and
+must be confirmed on the other FASTPATH units before it is recorded as a limit.
+
+Note `1.3.6.1.6.3.15.1.2.2.1.3…` also yields `admin` — that is an **SNMPv3 USM
+user**, a different thing from a local login account. They must not be conflated.
+
+## Not yet located
+
+- Service protocols (HTTP/HTTPS/telnet/SSH enable state and ports). Searching
+  the vendor subtree for the values 22/23/80/443 returns only false positives,
+  where the number is a table *index* rather than a configured port.
+- Port speed/duplex **configuration** (as opposed to `ifHighSpeed`, which is the
+  negotiated rate). EtherLike-MIB `dot3` at `1.3.6.1.2.1.10.7` carries 1416
+  varbinds on the S3300 and is the obvious candidate for duplex status.

{python_netgear_switch_library-0.0.post332 → python_netgear_switch_library-0.0.post336}/src/netgear_switch/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '0.0.post332'
-__version_tuple__ = version_tuple = (0, 0, 'post332')
+__version__ = version = '0.0.post336'
+__version_tuple__ = version_tuple = (0, 0, 'post336')
 
 __commit_id__ = commit_id = None

{python_netgear_switch_library-0.0.post332 → python_netgear_switch_library-0.0.post336}/src/netgear_switch/cli_read.py

@@ -103,5 +103,14 @@ class CliReader:
     def get_mgmt_ip(self) -> MgmtIpConfig:
         return parse.parse_mgmt_ip(self.session.run(self._spec.network_cmd))
 
+    def get_hostname(self) -> str:
+        """The switch's host name, from ``show hosts``.
+
+        See ``parse.parse_hostname`` for why this command and not
+        ``show running-config``: the two report different values, and only this
+        one agrees with SNMP's ``sysName``.
+        """
+        return parse.parse_hostname(self.session.run(self._spec.hosts_cmd))
+
     def identify(self) -> DetectedModel:
         return parse.parse_version(self.session.run(self._spec.version_cmd), MODELS)

{python_netgear_switch_library-0.0.post332 → python_netgear_switch_library-0.0.post336}/src/netgear_switch/cli_write.py

@@ -561,8 +561,10 @@ class CliWriter:
             timeouts=timeouts or _DEFAULT_POE_TIMEOUTS,
             sleep=sleep,
             clock=clock,
-            recovered=lambda st: st is not None
-            and st.detect in (PoEDetect.DELIVERING, PoEDetect.SEARCHING),
+            recovered=lambda st: (
+                st is not None
+                and st.detect in (PoEDetect.DELIVERING, PoEDetect.SEARCHING)
+            ),
             timeout_message=(
                 f"PoE port {port} still in FAULT after clear within {{timeout}}s"
             ),
@@ -596,6 +598,52 @@ class CliWriter:
     def _port_status(self, port: int) -> PortStatus | None:
         return next((p for p in self._reader.get_ports() if p.port == port), None)
 
+    # --- host name -----------------------------------------------------------
+
+    def set_hostname(self, name: str, *, force: bool = False) -> None:
+        """Set the switch's host name, via global-config ``hostname <name>``.
+
+        Not force-gated: renaming cannot strand the switch and is reversible by
+        writing the old name back, unlike ``set_mgmt_ip`` below which drops the
+        session that issues it. ``force`` is accepted so the signature matches
+        every other writer.
+
+        Verified by re-reading ``show hosts``. That command, rather than
+        ``show running-config``, is deliberate and load-bearing here: the two
+        report different values on real hardware (see
+        ``protocols.cli.parse.parse_hostname``), and ``show hosts`` is the one
+        that agrees with SNMP, so a CLI write verified this way is also
+        observable over SNMP.
+
+        Nothing is persisted -- no ``write memory`` -- exactly like every other
+        write in this module.
+        """
+        del force  # accepted for a uniform writer signature; nothing to gate
+        if not name.strip():
+            # `hostname` with no argument is rejected by the device itself
+            # ("Command not found / Incomplete command"), so sending it would
+            # surface as a confusing CliCommandError from deep in _in_mode.
+            # CLEARING a host name is a different operation -- FASTPATH spells
+            # it `no hostname` -- and that has not been driven against real
+            # hardware here, so it is not offered rather than guessed at.
+            raise ValueError(
+                "hostname must not be empty; clearing a switch's host name is "
+                "`no hostname` on FASTPATH, which this library does not "
+                "implement because it has not been verified on a device"
+            )
+        before = self._reader.get_hostname()
+        self._in_mode(
+            [self._spec.configure_cmd],
+            [self._spec.hostname_config_cmd.format(name=name)],
+        )
+        after = self._reader.get_hostname()
+        if after != name:
+            raise WriteVerificationError(
+                f"`show hosts` reports {after!r} after setting hostname {name!r}",
+                before=before,
+                after=after,
+            )
+
     # --- management IP + reboot --------------------------------------------
 
     def set_mgmt_ip(

{python_netgear_switch_library-0.0.post332 → python_netgear_switch_library-0.0.post336}/src/netgear_switch/nsdp_read.py

@@ -216,6 +216,18 @@ class NsdpReader:
         dev = self._device([Tag.PORT_PVID])
         return [(p.port_id, p.vlan_id) for p in dev.port_pvids]
 
+    def get_hostname(self) -> str:
+        """The switch's host name, from the NSDP ``HOSTNAME`` tag (0x0003).
+
+        The same value SNMP would report as ``sysName`` -- except that a Plus
+        switch has no SNMP agent at all, which is why NSDP carries it.
+
+        A switch that has never been named answers the tag with nothing, and
+        that is a real answer rather than a failure: unlike SNMP's ``sysName``,
+        which is a mandatory scalar, this tag is genuinely optional.
+        """
+        return self._device([Tag.HOSTNAME]).hostname or ""
+
     def get_mgmt_ip(self) -> MgmtIpConfig:
         return _mgmt(
             self._device([Tag.IP_ADDRESS, Tag.NETMASK, Tag.GATEWAY, Tag.DHCP_MODE])
@@ -270,6 +282,10 @@ class AsyncNsdpReader:
         dev = await self._device([Tag.PORT_PVID])
         return [(p.port_id, p.vlan_id) for p in dev.port_pvids]
 
+    async def get_hostname(self) -> str:
+        """Async twin of ``NsdpReader.get_hostname`` -- see there."""
+        return (await self._device([Tag.HOSTNAME])).hostname or ""
+
     async def get_mgmt_ip(self) -> MgmtIpConfig:
         return _mgmt(
             await self._device(

{python_netgear_switch_library-0.0.post332 → python_netgear_switch_library-0.0.post336}/src/netgear_switch/protocols/cli/commands.py

@@ -94,6 +94,18 @@ class CliModelSpec:
     environment_cmd: str = "show environment"
     network_cmd: str = "show network"
     interface_stats_cmd: str = "show interface ethernet {iface}"
+    # Host name. `show hosts` and NOT `show running-config | include hostname`:
+    # the two report DIFFERENT values, measured 2026-08-02. On m4300-16x
+    # (10.1.5.20) `show hosts` gives "sw-netgear-m4300-16x-poe-s2" while
+    # running-config gives "manage-sw-netgear-m4300-16x-poe-s2", and on
+    # gsm7252ps (10.1.5.22) running-config carries no hostname line at all while
+    # `show hosts` still reports one. `show hosts` is the one that agrees with
+    # SNMP's sysName, so it is what keeps the two backends returning the same
+    # answer for the same switch.
+    hosts_cmd: str = "show hosts"
+    # Global-config directive. Quoted on the wire by the device's own
+    # running-config output ('hostname "sw-netgear-m4300-24x"').
+    hostname_config_cmd: str = "hostname {name}"
 
     # --- physical-interface naming -----------------------------------------
     # How this model's firmware ADDRESSES one physical port in a command

{python_netgear_switch_library-0.0.post332 → python_netgear_switch_library-0.0.post336}/src/netgear_switch/protocols/cli/parse.py

@@ -30,6 +30,7 @@ from __future__ import annotations
 import re
 from typing import TYPE_CHECKING
 
+from ...errors import CliCommandError
 from ...models import (
     DetectedModel,
     IpMode,
@@ -605,6 +606,46 @@ def parse_environment(text: str) -> list[Sensor]:
     return out
 
 
+# ---------------------------------------------------------------------------
+# show hosts -> host name
+# ---------------------------------------------------------------------------
+
+
+def parse_hostname(text: str) -> str:
+    """``show hosts`` -> the switch's host name.
+
+    The command reports far more than the name -- DNS servers, the domain list,
+    resolver retry counts, the static host-to-address table -- and only the
+    first labelled field is wanted::
+
+        Host name...................................... sw-netgear-m4300-24x
+        Default domain................................. Domain name is not configured
+        Name servers (Preference order)................ 8.8.8.8, 10.1.5.1
+
+    Captured 2026-08-02 from m4300-24x (10.1.5.13), m4300-16x (10.1.5.20) and
+    gsm7252ps (10.1.5.22); all three label it exactly "Host name".
+
+    This is deliberately NOT ``show running-config | include hostname``. The two
+    report different values: on m4300-16x running-config holds
+    "manage-sw-netgear-m4300-16x-poe-s2" against this command's
+    "sw-netgear-m4300-16x-poe-s2", and on gsm7252ps running-config has no
+    hostname line at all while this command still answers. ``show hosts`` is the
+    one that matches SNMP's sysName, so parsing it is what stops the CLI and
+    SNMP backends disagreeing about the same switch.
+
+    Raises rather than returning "" when the label is absent: every FASTPATH
+    switch measured answers it, so silence means the command failed or the
+    output drifted, and a blank host name would be a fabrication.
+    """
+    name = labelled_values(text).get("Host name")
+    if name is None:
+        raise CliCommandError(
+            "`show hosts` output carries no 'Host name' field; got: "
+            + " ".join(text.split())[:200]
+        )
+    return name.strip()
+
+
 # ---------------------------------------------------------------------------
 # show network -> management IP
 # ---------------------------------------------------------------------------

{python_netgear_switch_library-0.0.post332 → python_netgear_switch_library-0.0.post336}/src/netgear_switch/protocols/snmp/oids.py

@@ -21,6 +21,23 @@ SYS_DESCR = "1.3.6.1.2.1.1.1.0"  # sysDescr: text incl. the model name
 SYS_OBJECT_ID = "1.3.6.1.2.1.1.2.0"  # sysObjectID: read-only signal, unused
 # for matching (no known OID->model table exists -- see parse.py's
 # detect_model_from_sysdescr docstring).
+# sysName: the switch's host name. A STANDARD MIB-II scalar, which is why it is
+# the one hostname source that also works on gs728tpp -- that agent publishes no
+# Netgear vendor subtree at all.
+#
+# WRITABLE on every SNMP model in this fleet. Measured 2026-08-02 by SETting the
+# value the switch already had: a zero-impact writability probe, since the device
+# state cannot change but a read-only column still answers notWritable. All five
+# accepted -- gsm7228ps (10.1.5.11) on community `public`, which is the only one
+# it has, and m4300-24x (.13), m4300-16x (.20), gsm7252ps (.22) and gs728tpp
+# (10.2.5.10) on `private`.
+#
+# NOT the same value as the FASTPATH `hostname` running-config directive. On
+# m4300-16x sysName is "sw-netgear-m4300-16x-poe-s2" while running-config holds
+# "manage-sw-netgear-m4300-16x-poe-s2", and on gsm7252ps running-config carries
+# no hostname at all. sysName tracks `show hosts`, which is therefore what the
+# CLI reader parses so that the two backends cannot disagree.
+SYS_NAME = "1.3.6.1.2.1.1.5.0"
 IF_TYPE = "1.3.6.1.2.1.2.2.1.3"  # ifType (6=ethernetCsmacd=physical)
 IF_ADMIN_STATUS = "1.3.6.1.2.1.2.2.1.7"  # ifAdminStatus (1=up,2=down)
 IF_OPER_STATUS = "1.3.6.1.2.1.2.2.1.8"  # ifOperStatus  (1=up,2=down)

{python_netgear_switch_library-0.0.post332 → python_netgear_switch_library-0.0.post336}/src/netgear_switch/protocols/snmp/parse.py

@@ -826,6 +826,27 @@ def _scalar_text(rows: Sequence[SnmpRow], oid: str) -> str | None:
     return None
 
 
+def parse_hostname(rows: Sequence[SnmpRow]) -> str:
+    """Extract ``sysName`` from one exact-OID GET.
+
+    Raises rather than returning a placeholder when the scalar is absent. Every
+    switch in this fleet answers ``sysName`` -- it is a mandatory MIB-II scalar
+    -- so an absent one is a real failure to report, not an empty hostname to
+    invent. An empty *string* is a different thing and is passed through: a
+    switch with no name configured genuinely has one.
+    """
+    from . import oids
+
+    value = _scalar_text(rows, oids.SYS_NAME)
+    if value is None:
+        raise SnmpError(
+            f"switch did not answer sysName ({oids.SYS_NAME}); it is a mandatory "
+            "MIB-II scalar, so this is an agent or transport failure rather "
+            "than an absent hostname"
+        )
+    return value
+
+
 def parse_system_info(rows: Sequence[SnmpRow]) -> tuple[str | None, str | None]:
     """Extract the raw sysDescr/sysObjectID scalar text from one combined GET.
 

{python_netgear_switch_library-0.0.post332 → python_netgear_switch_library-0.0.post336}/src/netgear_switch/snmp_read.py

@@ -193,6 +193,14 @@ class SnmpReader:
             w(oids.IP_ADDRESS_IFINDEX),  # RFC-4293 fallback (M4300)
         )
 
+    def get_hostname(self) -> str:
+        """The switch's host name, from the standard MIB-II ``sysName`` scalar.
+
+        Standard, so this works on every SNMP model -- including ``gs728tpp``,
+        which publishes no Netgear vendor subtree at all.
+        """
+        return parse.parse_hostname(self.client.get([oids.SYS_NAME]))
+
     def get_system_info(self) -> DetectedModel:
         """Identify this switch's model via sysDescr (see ``read_system_info``).
 
@@ -320,6 +328,10 @@ class AsyncSnmpReader:
             await w(oids.IP_ADDRESS_IFINDEX),  # RFC-4293 fallback (M4300)
         )
 
+    async def get_hostname(self) -> str:
+        """Async twin of ``SnmpReader.get_hostname`` -- see there."""
+        return parse.parse_hostname(await self.client.get([oids.SYS_NAME]))
+
     async def get_system_info(self) -> DetectedModel:
         """Async twin of ``SnmpReader.get_system_info`` -- see there."""
         return await async_read_system_info(self.client)

{python_netgear_switch_library-0.0.post332 → python_netgear_switch_library-0.0.post336}/src/netgear_switch/snmp_write.py

@@ -238,9 +238,7 @@ def _plan_switchport_membership(
             # rebuild it from the membership the port actually has.
             allowed = _vlan_bitmap({untagged_vlan, *want_tagged})
         varbinds.append(
-            SetVarbind(
-                f"{oids.FASTPATH_SWITCHPORT_ALLOWED_VLANS}.{port}", allowed, "x"
-            )
+            SetVarbind(f"{oids.FASTPATH_SWITCHPORT_ALLOWED_VLANS}.{port}", allowed, "x")
         )
         varbinds.append(
             SetVarbind(
@@ -558,9 +556,7 @@ class SnmpWriter:
             self.client.set(vb)
         problem = _switchport_divergence(plan, vlan, port, self._reader.get_vlans())
         if problem is not None:
-            raise WriteVerificationError(
-                problem, before=before, after=self._vlan(vlan)
-            )
+            raise WriteVerificationError(problem, before=before, after=self._vlan(vlan))
 
     def _switchport_vlan_bitmap(self, base_oid: str, port: int) -> bytes:
         """A switchport VLAN-list column's octets, or an all-zero 512-byte map."""
@@ -596,11 +592,18 @@ class SnmpWriter:
         raw_egress = self._raw_bitmap(oids.DOT1Q_VLAN_STATIC_EGRESS, vlan)
         raw_untagged = self._raw_bitmap(oids.DOT1Q_VLAN_STATIC_UNTAGGED, vlan)
         new_egress, new_untagged = membership_bitmaps(
-            mode=mode, port=port,
-            egress=(raw_egress if raw_egress is not None
-                    else encode_port_bitmap(before.member_ports)),
-            untagged=(raw_untagged if raw_untagged is not None
-                      else encode_port_bitmap(before.untagged_ports)),
+            mode=mode,
+            port=port,
+            egress=(
+                raw_egress
+                if raw_egress is not None
+                else encode_port_bitmap(before.member_ports)
+            ),
+            untagged=(
+                raw_untagged
+                if raw_untagged is not None
+                else encode_port_bitmap(before.untagged_ports)
+            ),
             width_bytes=vlan_bitmap_width(self.model),
         )
         egress_vb = SetVarbind(
@@ -704,6 +707,30 @@ class SnmpWriter:
                 after=after,
             )
 
+    def set_hostname(self, name: str, *, force: bool = False) -> None:
+        """Set the switch's host name via the standard MIB-II ``sysName``.
+
+        GROUNDED, unlike ``set_mgmt_ip`` below: ``sysName`` was confirmed
+        writable on every SNMP model in this fleet on 2026-08-02, by SETting
+        each switch the value it already held. See ``oids.SYS_NAME`` for the
+        hosts and communities, and for why this is NOT the same value as the
+        FASTPATH ``hostname`` running-config directive.
+
+        Not force-gated: renaming a switch cannot strand it the way a mgmt-IP
+        write can, and it is trivially reversible by writing the old name back.
+        ``force`` is accepted so the signature matches every other writer.
+        """
+        del force  # accepted for a uniform writer signature; nothing to gate
+        before = self._reader.get_hostname()
+        self.client.set_many([SetVarbind(oids.SYS_NAME, name, "s")])
+        after = self._reader.get_hostname()
+        if after != name:
+            raise WriteVerificationError(
+                f"sysName is {after!r} after writing {name!r}",
+                before=before,
+                after=after,
+            )
+
     def set_mgmt_ip(
         self, address: str, netmask: str, gateway: str, *, force: bool = False
     ) -> None:
@@ -982,11 +1009,18 @@ class AsyncSnmpWriter:
         raw_egress = await self._raw_bitmap(oids.DOT1Q_VLAN_STATIC_EGRESS, vlan)
         raw_untagged = await self._raw_bitmap(oids.DOT1Q_VLAN_STATIC_UNTAGGED, vlan)
         new_egress, new_untagged = membership_bitmaps(
-            mode=mode, port=port,
-            egress=(raw_egress if raw_egress is not None
-                    else encode_port_bitmap(before.member_ports)),
-            untagged=(raw_untagged if raw_untagged is not None
-                      else encode_port_bitmap(before.untagged_ports)),
+            mode=mode,
+            port=port,
+            egress=(
+                raw_egress
+                if raw_egress is not None
+                else encode_port_bitmap(before.member_ports)
+            ),
+            untagged=(
+                raw_untagged
+                if raw_untagged is not None
+                else encode_port_bitmap(before.untagged_ports)
+            ),
             width_bytes=vlan_bitmap_width(self.model),
         )
         egress_vb = SetVarbind(
@@ -1078,6 +1112,19 @@ class AsyncSnmpWriter:
                 after=after,
             )
 
+    async def set_hostname(self, name: str, *, force: bool = False) -> None:
+        """Async twin of ``SnmpWriter.set_hostname`` -- see there."""
+        del force  # accepted for a uniform writer signature; nothing to gate
+        before = await self._reader.get_hostname()
+        await self.client.set_many([SetVarbind(oids.SYS_NAME, name, "s")])
+        after = await self._reader.get_hostname()
+        if after != name:
+            raise WriteVerificationError(
+                f"sysName is {after!r} after writing {name!r}",
+                before=before,
+                after=after,
+            )
+
     async def set_mgmt_ip(
         self, address: str, netmask: str, gateway: str, *, force: bool = False
     ) -> None:

{python_netgear_switch_library-0.0.post332 → python_netgear_switch_library-0.0.post336}/src/netgear_switch/virtual/cli_fastpath.py

@@ -127,6 +127,44 @@ def render_network(state: VirtualSwitchState) -> str:
     )
 
 
+# --- show hosts -------------------------------------------------------------
+
+
+def render_hosts(state: VirtualSwitchState) -> str:
+    """``show hosts``, transcribed from real output captured 2026-08-02.
+
+    From m4300-24x (10.1.5.13), m4300-16x (10.1.5.20) and gsm7252ps
+    (10.1.5.22). All three label the name exactly "Host name", and the resolver
+    and static-mapping sections around it are reproduced because the reader has
+    to pick one field out of them -- a mock emitting only the wanted line would
+    not exercise that at all.
+
+    The trailing static-mapping tables are the empty form all three returned;
+    none had a host-to-address mapping configured.
+    """
+    return "\n".join(
+        [
+            _dotted("Host name", state.hostname),
+            _dotted("Default domain", "Domain name is not configured"),
+            _dotted("Default domain list", "Domain Name List is not configured"),
+            _dotted("Domain Name Lookup", "Enabled"),
+            _dotted("Number of retries", "2"),
+            _dotted("Retry timeout period", "3"),
+            _dotted("Name servers (Preference order)", "10.1.5.1"),
+            "",
+            "Configured host name-to-address mapping:",
+            "",
+            " Host                                Addresses",
+            "------------------------ ----------------------",
+            "No host name is configured to IP address",
+            "",
+            " Host                   Total   Elapsed    Type        Addresses",
+            "---------------------- -------  -------    ----        --------------",
+            "No hostname is mapped to an IP address",
+        ]
+    )
+
+
 # --- show port all ----------------------------------------------------------
 
 

{python_netgear_switch_library-0.0.post332 → python_netgear_switch_library-0.0.post336}/src/netgear_switch/virtual/faces/cli.py

@@ -59,6 +59,7 @@ _COPY_RE = re.compile(r"^copy\s+(\S+)\s+(\S+)$")
 
 # --- configuration-mode commands -------------------------------------------
 _CONFIGURE_RE = re.compile(r"^config(?:ure)?(?: terminal)?$")
+_HOSTNAME_RE = re.compile(r'^hostname\s+("?[^"]+"?)$')
 _VLAN_DATABASE_RE = re.compile(r"^vlan database$")
 _VLAN_CREATE_RE = re.compile(r"^vlan (\d+)$")
 _VLAN_NAME_RE = re.compile(r"^vlan name (\d+) (\S+)$")
@@ -339,6 +340,14 @@ class VirtualCliFace:
         if self._mode == _VLAN_DB:
             return self._vlan_db_command(c)
         if self._mode == _CONFIG:
+            m = _HOSTNAME_RE.match(c)
+            if m:
+                # The device stores the name unquoted; its running-config
+                # renders it quoted, and `show hosts` reports it bare. Accept
+                # either form on the wire so a caller that quotes is not
+                # silently given a name with quotes embedded in it.
+                self.state.hostname = m.group(1).strip().strip('"')
+                return _ACCEPTED
             m = _INTERFACE_RE.match(c)
             if m:
                 port = cli_fastpath.port_for_iface(self.state, m.group(1))
@@ -406,6 +415,8 @@ class VirtualCliFace:
             return cli_fastpath.render_environment(self.state)
         if c == self.spec.network_cmd:
             return cli_fastpath.render_network(self.state)
+        if c == self.spec.hosts_cmd:
+            return cli_fastpath.render_hosts(self.state)
         m = _SHOW_VLAN_ID_RE.match(c)
         if m:
             return cli_fastpath.render_vlan_detail(self.state, int(m.group(1)))

{python_netgear_switch_library-0.0.post332 → python_netgear_switch_library-0.0.post336}/src/netgear_switch/virtual/seed.py

@@ -2123,7 +2123,9 @@ _M4300_24X_SWITCHPORT: dict[int, _SwitchportRow] = {
     # VLAN (90) differs from its NATIVE VLAN (5) -- proving membership follows
     # col4 not col3 in trunk mode -- with a genuinely sparse allowed list.
     5: (
-        2, 90, 5,
+        2,
+        90,
+        5,
         frozenset({1, 5, 6, 7, 10, 20, 41, 90, 99, 121, 141}),
         {1, 90},
         set(),
@@ -2393,6 +2395,9 @@ def seed_m4300_24x() -> VirtualSwitchState:
         mode="static",
     )
     state = VirtualSwitchState(
+        # Measured 2026-08-02: sysName and `show hosts` both report this on the
+        # real switch. Was empty here, which no real FASTPATH switch is.
+        hostname="sw-netgear-m4300-24x",
         model_key="m4300-24x",
         ports=ports,
         vlans=vlans,
@@ -2587,6 +2592,9 @@ def seed_m4300_16x() -> VirtualSwitchState:
         ),
     ]
     state = VirtualSwitchState(
+        # Measured 2026-08-02: sysName and `show hosts` both report this on the
+        # real switch. Was empty here, which no real FASTPATH switch is.
+        hostname="sw-netgear-m4300-16x-poe-s2",
         model_key="m4300-16x",
         ports=ports,
         vlans=vlans,