CML

Cisco Modeling Labs
start on demand

Cisco's official network-simulation platform — runs virtual topologies of real Cisco node types (IOS, IOS-XE, IOS-XR, NX-OS) for design, testing and certification study. Runs as VM 105 on Proxmox; normally powered off.

Version
2.10.0
upgraded from 2.8 on 2026-07-08
Mgmt IP
192.168.10.16
VM 105 · Bod · C2960CX-3 Gi0/2
Resources
8 GB
50 GB disk · 4 vCPU
Ext-conn
192.168.10.17
lab edge → home LAN
Access
Web UI & API — https://192.168.10.16 (API /api/v0), login admin.
In-lab device login arild (priv-15); shared password across CML / EVE-NG / lab devices.
CLI helper on the server — ~/.cml_query.sh /path (read-only API queries).
Labs
LabNodesFocusNetwork
Arild LAB15× IOSvL2 switches (sw1–sw5)L2 · VLANs · VTP10.0.0.0/16
Arild LAB25× IOL-XE routers (R1–R5)RIP · EIGRP · OSPF · BGP redistribution10.1.0.0/16
Arild Lab 3alpine · ubuntu · serverendpoints / services
LAB1 — switches (10.0.0.0/16)
SwitchNodeIOS-XEMgmt IP (access SVI)Inter-switch links
sw1IOSvL217.1510.0.10.1 (Vlan10)Vlan11 10.0.11.1 · edge Et0/3 192.168.10.17
sw2IOSvL217.1510.0.20.1 (Vlan20)Vlan11 10.0.11.2 · Vlan12 10.0.12.1
sw3IOSvL217.1510.0.30.1 (Vlan30)Vlan12 10.0.12.2 · Vlan13 10.0.13.1
sw4IOSvL217.1510.0.40.1 (Vlan40)Vlan13 10.0.13.2 · Vlan14 10.0.14.1
sw5IOSvL217.1810.0.50.1 (Vlan50)Vlan14 10.0.14.2
LAB2 — routers (10.1.0.0/16)
RouterNode · protocolIOS-XELoopback0Reachable at
R1IOL-XE · RIP17.1510.1.1.1192.168.10.17 (edge)
R2IOL-XE · EIGRP17.1510.1.2.210.1.11.2
R3IOL-XE · EIGRP17.1510.1.3.310.1.12.2
R4IOL-XE · OSPF17.1510.1.4.410.1.13.2
R5IOL-XE · BGP17.1510.1.5.510.1.14.2
Lab addressing & routing
Each lab reaches the home LAN via an edge router on 192.168.10.17; the ASUS has static routes 10.0.0.0/16 and 10.1.0.0/16.17. Convention inside a lab: loopbacks 10.1.R.R/32, core P2P /30 on 10.1.1x.x, per-router LANs 10.1.<R>0.0/24.
Notes
Config lives on the running node disk — run Extract Configurations before Wipe/upgrade or the config is lost (only a day-0 stub persists in the lab DB).
SSH host keys are wiped with the node — regenerate with crypto key generate rsa modulus 3072 after a wipe.
Config backups (per-device) — ~/switch-backups/cml-recovery/<date>/ on the Linux server.
Upgrade gotcha (2.10+): the docker-ce repo line ships commented out, so Cockpit upgrades report SUCCESS but silently hold — uncomment download.docker.com … noble stable, apt-get update, then re-run. See Wiki → CML.