VXLAN EVPN practice labs across vendors
14 guided labs that build real VXLAN EVPN data-centre fabrics from the underlay up, across Arista, NVIDIA Cumulus, Cisco Nexus and Juniper. Every lab forwards real traffic between hosts over the overlay, and the checks prove the route types and VNIs were really learned: multihoming, MLAG and vPC, route leaking, border leaves and a multi-vendor fabric.
- Guided labs
- 14
- Follows
- EVPN topics of Cisco DCCOR 350-601, Juniper JNCIS-DC JN0-481, Arista Data Center Engineering and HPE7-A05
- Runs every lab
- Professional
- Devices
- Alpine Linux, vEOS, Cumulus VX, Nexus 9000v, IOSv and vJunos-switch
Who these labs are for
For data-centre and network engineers who want hands-on EVPN skills across vendors.
Each lab forwards real host traffic across the overlay. Where an image can’t show something, the pane says so plainly.
The 14 labs
Every lab in the folder, as the workspace lists them, with what each runs and the smallest plan that fits. Read on 2 November 2026.
VXLAN EVPN course 14 labs
Shared folderVXLAN EVPN fabrics guided labs
From the underlay to multihoming, route leaking and border leaves, then troubleshooting and a capstone.
-
01IP fabric underlay on vEOS spines and Cumulus leaves
Build the routed underlay that every VXLAN tunnel depends on: eBGP on numbered and unnumbered links, equal-cost paths and BFD, across vEOS and Cumulus.
2× Cumulus VX, 2× vEOS
4 vCPU, 8,192 MBFits StandardRuns in the free demo
-
02EVPN control plane with route types 2 and 3
Stretch one VLAN across a routed fabric with EVPN on Cumulus and vEOS leaves, then read the type 3 and type 2 routes that replace flood-and-learn.
3× Alpine Linux, 2× Cumulus VX, 2× vEOS
7 vCPU, 9,728 MBFits Standard
-
03Symmetric IRB with an anycast gateway and an L3 VNI
Make the fabric route: a tenant VRF with an L3 VNI, the same anycast gateway on every leaf, and type 5 routes between Cumulus and vEOS.
3× Alpine Linux, 2× Cumulus VX, 2× vEOS
7 vCPU, 9,728 MBFits Standard
-
04Arista and Cumulus interoperability
Find out why automatic route targets break a mixed fabric, fix it two ways, then read a Cumulus Ethernet segment from the Arista side.
3× Alpine Linux, 2× Cumulus VX, 2× vEOS
7 vCPU, 9,728 MBFits Standard
-
05Multihoming with EVPN ESI-LAG and MLAG
Dual-home a server with an EVPN Ethernet segment on Cumulus and another with MLAG on vEOS, compare them from across the fabric, and fail a link on each.
3× vEOS, 2× Alpine Linux, 2× Cumulus VX
7 vCPU, 11,264 MBFits Standard
-
06Border leaf with type 5 routes and a default route
Connect a tenant VRF to a WAN router through a border leaf, exchange type 5 routes, inject a default route and keep host routes off the WAN.
2× Alpine Linux, 2× Cumulus VX, 2× vEOS, 1× IOSv
7 vCPU, 9,728 MBFits Standard
-
07Multi-tenancy with VRFs and controlled route leaking
Build a second tenant, prove it is isolated, then open a shared-services path across vendors by leaking routes with route targets and filters.
3× Alpine Linux, 2× Cumulus VX, 2× vEOS
7 vCPU, 9,728 MBFits Standard
-
08NX-OS VXLAN EVPN
Build VXLAN EVPN on Cisco Nexus 9000v leaves with an Arista spine: features, the NVE interface, the anycast gateway and an L3 VNI.
3× Alpine Linux, 2× Nexus 9000v, 1× vEOS
8 vCPU, 15,872 MBFits Standard
-
09NX-OS vPC with VXLAN
Pair two Nexus 9000v leaves with vPC, then make them one VTEP with a shared secondary address so a remote Arista leaf reaches the dual-homed server.
2× Alpine Linux, 2× Nexus 9000v, 2× vEOS
8 vCPU, 21,504 MBFits Professional
-
10Junos EVPN-VXLAN with edge-routed bridging
Add a Juniper vJunos-switch leaf to a Cumulus and Arista fabric: a loopback overlay session, a stretched VLAN and type 5 routing across three vendors.
3× Alpine Linux, 2× vEOS, 1× Cumulus VX, 1× vJunos-switch
10 vCPU, 12,800 MBFits Standard
-
11Troubleshooting the underlay
A rack move left three underlay faults behind: a BGP mismatch, a missing loopback and an MTU black hole. Find and fix them from the bottom up.
3× Alpine Linux, 2× Cumulus VX, 2× vEOS
7 vCPU, 9,728 MBFits Standard
-
12Troubleshooting the overlay
Four tickets, four overlay faults: a route target, a VNI and an ESI that do not match, and a silent host with no route to it.
5× Alpine Linux, 2× Cumulus VX, 2× vEOS
9 vCPU, 10,752 MBFits Standard
-
13Operations with MAC mobility and ARP suppression
Read a running fabric: capture VXLAN on the wire, prove what ARP suppression does, and follow a virtual machine between racks through the MAC mobility sequence number.
3× Alpine Linux, 2× Cumulus VX, 2× vEOS
7 vCPU, 9,728 MBFits Standard
-
14Capstone with a two-tenant multi-vendor fabric
Design and build a two-tenant fabric from a requirements list: Cumulus and vEOS leaves, an all-active Ethernet segment, a border leaf and a WAN router.
4× Alpine Linux, 3× vEOS, 2× Cumulus VX, 1× IOSv
10 vCPU, 12,800 MBFits Standard
Devices and images
The exact Add Node images the labs use, and the vCPU and RAM their nodes are set to. Your plan counts what each running node is set to.
| Device | Image in Add Node | Set to | Labs | Nodes |
|---|---|---|---|---|
| Alpine Linux | clbalpinebase-alpine-base-3-20-3 | 1 vCPU, 512 MB | 13 | 39 |
| Arista vEOS | veos-4.33.1.1F | 1 vCPU, 2,048 MB | 14 | 29 |
| NVIDIA Cumulus VX | cumulus-vx-5.9.1 | 1 vCPU, 2,048 MB | 12 | 23 |
| Cisco Nexus 9000v | nxosv9k-9300v-9.3.10 | 2 vCPU, 6,144 MB; 2 vCPU, 8,192 MB | 2 | 4 |
| Cisco IOSv | vios-adventerprisek9-m.SPA.159-3.M6 | 1 vCPU, 512 MB | 2 | 2 |
| Juniper vJunos-switch | vjunosswitch-23.4R2-S2.1 | 4 vCPU, 5,120 MB | 1 | 1 |
How to open the labs
Sign in to your workspace at
lab.cloudlabbox.com.In File Manager, open Shared, then the folder
VXLAN EVPN fabrics guided labs.Open a lab and start its nodes, then open Lab Tasks for the steps.
The labs are read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change a lab, rebuild it in your own folder.


Questions about the VXLAN EVPN labs
Are these VXLAN EVPN labs free?
They’re included with every lab plan, with nothing extra to pay, rather than free. Plans start at £3 a day or £0.50 an hour. To try one first, the free demo gives you 30 minutes with 6 vCPU and 8 GB, enough to run 1 of these labs.
Which plan do I need for these labs?
Professional, with 18 vCPU and 32 GB, runs every lab here. Standard runs 13 of the 14. EVE-NG admits a node by the vCPU and RAM configured on it, so a lab needs the total its running nodes are set to. The biggest here, “NX-OS vPC with VXLAN”, needs 8 vCPU and 21,504 MB. Each lab’s Lab Tasks pane names the plan it needs.
Can I change these labs?
You can start the nodes and configure the devices, but the labs are read-only: changes to the topology can’t be saved. To change one, rebuild it in your own folder.
Are these labs from the vendors?
No. CloudLabBox wrote them to follow the topics of Cisco’s DCCOR 350-601, Juniper’s JNCIS-DC (JN0-481), Arista’s Data Center Engineering and HPE’s HPE7-A05, where they cover VXLAN EVPN. They aren’t training material from the vendors, and CloudLabBox is independent of Arista Networks, Cisco, HPE, Juniper Networks and NVIDIA.
Which plan do I need?
13 of the 14 labs need Standard. Lab 09, vPC on Nexus, needs Professional.
What can’t these labs show?
No Ethernet segment is built across vendors: the multihoming lab builds it on Cumulus and reads it from vEOS. NX-OS suppress-arp is shown being refused, because carving TCAM needs two reloads. Cumulus has no start-up configuration in EVE-NG, so you paste it in Task 0.
Do I need vendor licences for these labs?
No. These labs don’t need any. CloudLabBox doesn’t provide vendor licences or subscriptions.
Try a lab before you choose
The free demo is a real workspace for 30 minutes, with 6 vCPU and 8 GB: enough to run 1 of these labs. No card and no email.
More practice labs
- CCNA practice labs online
- CompTIA Network+ practice labs
- CCNP ENCOR practice labs
- CCNP ENARSI practice labs
- CCNP Service Provider practice labs
- Cisco NX-OS data centre practice labs
- CCIE Enterprise Infrastructure practice labs
- Network automation practice labs
- Cisco ASA firewall practice labs
- Packet analysis labs with Wireshark and tcpdump
- FortiGate practice labs
- FortiGate SD-WAN practice labs
- Cisco Catalyst SD-WAN CLI practice labs
- Palo Alto firewall practice labs
- Check Point CCSA practice labs
- Check Point CCSE practice labs
- Multi-vendor firewall and VPN practice labs
- BGP practice labs across vendors
- Nokia SR OS NRS I practice labs
- MPLS and L3VPN practice labs
- IPv6 practice labs across vendors
- Linux labs for network engineers
- Multi-vendor troubleshooting practice labs
- JNCIA-Junos practice labs
- JNCIS-ENT practice labs
- JNCIA-SEC and JNCIS-SEC practice labs
- JNCIS-SP JN0-364 practice labs
- JNCIP-ENT JN0-650 practice labs
- Arista EOS practice labs
- HPE Aruba Networking CX switching labs
- Huawei HCIA-Datacom practice labs
- HCIP-Datacom Core practice labs
- MikroTik MTCNA practice labs
- MikroTik MTCRE practice labs
- MikroTik MTCINE practice labs
- MikroTik MTCSE practice labs
- MikroTik MTCTCE practice labs
- MikroTik MTCIPv6E practice labs
- All practice labs
CloudLabBox is independent of Arista Networks, Cisco, HPE, Juniper Networks and NVIDIA. The labs follow exam topics and aren’t vendor training material; vendor names identify the exams and the images in the workspace.