--- title: VPN Labs With netlab « ipSpace.net blog | daily.dev description: A step-by-step guide to building an MPLS/VPN lab using the netlab tool. The topology uses six nodes — four Linux hosts and two Arista EOS PE-routers — with two... canonical: https://daily.dev/posts/vpn-labs-with-netlab-ipspace-net-blog-i3wmbkm2j twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: VPN Labs With netlab « ipSpace.net blog | daily.dev og:description: A step-by-step guide to building an MPLS/VPN lab using the netlab tool. The topology uses six nodes — four Linux hosts and two Arista EOS PE-routers — with two... og:url: https://daily.dev/posts/vpn-labs-with-netlab-ipspace-net-blog-i3wmbkm2j og:image: https://api.daily.dev/og/posts/i3WmBKm2j.png og:image:alt: VPN Labs With netlab « ipSpace.net blog og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # VPN Labs With netlab « ipSpace.net blog **[ipSpace.net Blog](https://daily.dev/sources/ipspace)** · 5 min read · 0 upvotes · 0 comments ## Summary A step-by-step guide to building an MPLS/VPN lab using the netlab tool. The topology uses six nodes — four Linux hosts and two Arista EOS PE-routers — with two VRFs (red and blue). The netlab configuration modules vrf, bgp, mpls, and ospf are enabled on the PE-routers, with LDP and VPNv4 activated via simple YAML parameters. Route distinguishers and route targets are assigned automatically. The post includes sample BGP, routing table, and MPLS LFIB outputs, plus the full generated Arista EOS configuration for PE1. MPLS data plane support in cEOS was confirmed working from release 4.32.1F with netlab 1.9.0. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What netlab configuration modules do I need to enable MPLS/VPN on Arista EOS PE-routers? Four modules are required on each PE-router: vrf (for VRF instances), bgp (to transport VPNv4 address family updates between PEs), mpls (to enable LDP and BGP VPNv4), and ospf (to propagate loopback addresses in the IBGP design). In the topology file, set mpls.ldp: True and mpls.vpn: True as global module parameters alongside bgp.as. _Network engineers building MPLS labs track netlab module updates and cEOS compatibility on daily.dev._ ### From which Arista cEOS release does MPLS data plane work with netlab? MPLS data plane works in Arista cEOS release 4.32.1F and is supported from netlab release 1.9.0. Earlier cEOS releases had data-plane quirks that prevented full MPLS forwarding in containerized environments. _Engineers validating cEOS versions for lab use find compatibility notes like these on daily.dev._ ## Similar posts on daily.dev - [MPLS/VPN with SR-MPLS Core « ipSpace.net blog](https://daily.dev/posts/mpls-vpn-with-sr-mpls-core-ipspace-net-blog-nw3uwiphe) · ipSpace.net Blog · 0 upvotes · 0 comments - [EVPN with SR-MPLS Core « ipSpace.net blog](https://daily.dev/posts/evpn-with-sr-mpls-core-ipspace-net-blog-taobtibzc) · ipSpace.net Blog · 0 upvotes · 0 comments - [BGP-Free Core with SR-MPLS « ipSpace.net blog](https://daily.dev/posts/bgp-free-core-with-sr-mpls-ipspace-net-blog-h7kronzy3) · ipSpace.net Blog · 0 upvotes · 0 comments - [Multivendor SR-MPLS « ipSpace.net blog](https://daily.dev/posts/multivendor-sr-mpls-ipspace-net-blog-qekokwduk) · ipSpace.net Blog · 0 upvotes · 0 comments --- Tags: [#networking](https://daily.dev/tags/networking), [#vpn](https://daily.dev/tags/vpn) [View this post on daily.dev](https://daily.dev/posts/vpn-labs-with-netlab-ipspace-net-blog-i3wmbkm2j) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"VPN Labs With netlab « ipSpace.net blog","url":"https://daily.dev/posts/vpn-labs-with-netlab-ipspace-net-blog-i3wmbkm2j","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/vpn-labs-with-netlab-ipspace-net-blog-i3wmbkm2j"},"datePublished":"2026-08-11T08:53:52.087Z","dateModified":"2026-08-11T09:10:07.203Z","description":"A step-by-step guide to building an MPLS/VPN lab using the netlab tool. The topology uses six nodes — four Linux hosts and two Arista EOS PE-routers — with two...","image":"https://media.daily.dev/image/upload/s--CxzD6vbw--/f_auto/v1722860399/public/Placeholder%2005","thumbnailUrl":"https://media.daily.dev/image/upload/s--CxzD6vbw--/f_auto/v1722860399/public/Placeholder%2005","isAccessibleForFree":true,"articleSection":"ipSpace.net Blog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"ipSpace.net Blog","logo":"https://media.daily.dev/image/upload/s--xS7E82MT--/f_auto,q_auto/v1786438303/logos/ipspace?_a=BAMAMicg0","url":"https://daily.dev/sources/ipspace"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/vpn-labs-with-netlab-ipspace-net-blog-i3wmbkm2j","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"networking,vpn","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"ipSpace.net Blog","item":"https://daily.dev/sources/ipspace"},{"@type":"ListItem","position":3,"name":"VPN Labs With netlab « ipSpace.net blog"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/vpn-labs-with-netlab-ipspace-net-blog-i3wmbkm2j#faq","mainEntity":[{"@type":"Question","name":"What netlab configuration modules do I need to enable MPLS/VPN on Arista EOS PE-routers?","acceptedAnswer":{"@type":"Answer","text":"Four modules are required on each PE-router: vrf (for VRF instances), bgp (to transport VPNv4 address family updates between PEs), mpls (to enable LDP and BGP VPNv4), and ospf (to propagate loopback addresses in the IBGP design). In the topology file, set mpls.ldp: True and mpls.vpn: True as global module parameters alongside bgp.as. Network engineers building MPLS labs track netlab module updates and cEOS compatibility on daily.dev."}},{"@type":"Question","name":"From which Arista cEOS release does MPLS data plane work with netlab?","acceptedAnswer":{"@type":"Answer","text":"MPLS data plane works in Arista cEOS release 4.32.1F and is supported from netlab release 1.9.0. Earlier cEOS releases had data-plane quirks that prevented full MPLS forwarding in containerized environments. Engineers validating cEOS versions for lab use find compatibility notes like these on daily.dev."}}]} ```