Virtual Network Labs with EVE-NG

This article is adapted from an Archetype SC Lunch & Learn presented by Rhys Jenkins and Alex Padgett.

Before you make a network change, you want to know one thing: will it work the way you think it will? EVE-NG gives you a safe lab to prove it first, so you can keep making progress without creating a production headache. As Palo Alto Networks puts it, “Use this virtual playground to learn and test features or complex topics that you might not be able to do in your production network.”

Emulated Virtual Environment – Next Generation (EVE-NG) is a browser-based network lab platform that lets you build realistic topologies using virtual routers, switches, firewalls, and servers. You can practice, troubleshoot, and validate designs in a sandbox before you touch the live environment.

This article explains what EVE-NG is, when it’s useful, how to build your first lab, and the features that make it valuable for training, PoCs, and safer change testing.

What is EVE-NG?

EVE-NG is a tool that lets you build a “practice network” on your computer. Instead of working on your live environment, you can set up a virtual version of it in a web browser—routers, switches, firewalls, servers, and more, connected the same way they would be in the real world.

That means you can try changes, learn, and troubleshoot in a safe sandbox. And if something doesn’t behave the way you expected, tools like packet capture help you see what’s happening behind the scenes before it shows up as a surprise after go-live.

Why EVE-NG Exists

Once you have a virtual “practice network,” the value becomes pretty obvious: you can test ideas and changes without putting your real environment on the line. EVE-NG gives you a safe place to build, break, fix, and repeat, so you’re learning and validating in the lab, not in production.

Teams use it in a few practical ways. It’s great for training and certification prep because you can recreate real-world setups. It’s also useful for proofs of concept, when you want to see if a design will actually work before you invest time or budget. And it’s ideal for change rehearsal—things like firewall rule updates, routing changes, or migrations, so you can catch issues early instead of discovering them after go-live. If you’re working with automation, you can test scripts and workflows against a full lab topology, and you can save labs as templates to share with others. That’s the same idea Arista points to: “Create a virtual twin of your production network… for pre-production testing of changes… and for training your operations team.”

The payoff is simple: you get confidence. You prove the concept in the lab first, then roll it out with fewer surprises and a much lower chance of a production headache.

Building Your First Lab (Step-by-Step)

Here’s a simple way to build your first EVE-NG lab and start testing right away:

• Create a new lab in the browser (your blank workspace).
• Add a few nodes you recognize—router, switch, firewall, and an endpoint is a great starter set.
• Connect the nodes to match your diagram (this is your virtual “cabling”).
• Start the devices, then open the console for each one.
• Configure the basics: IP addresses, gateways, routes/VLANs, and a basic firewall rule if one is in the path.
• Test in layers: first hop, then end-to-end (don’t skip straight to the final test).
• If something fails, use packet capture to see where traffic stops.
• When it works, save the lab as a template so you can reuse it for training, troubleshooting, or rehearsing changes before they become a production headache.

Key Features You’ll Actually Use

EVE-NG isn’t just a canvas for diagrams—it gives you practical tools to test and troubleshoot as you build. A few features you’ll use often include:

• Packet capture to confirm where traffic is flowing (or stopping)
• Templates to reuse proven labs instead of rebuilding from scratch
• Bridge / cloud connectivity to tie your lab into the underlying network when needed
• Interface views/graphs to help spot behavior over time (when enabled)

A Few Tips Before You Go Bigger

• Start with a small, “known good” lab, then expand it.
• Label devices and links so your topology stays readable.
• Save a clean baseline template before experimenting.
• Change one thing at a time when testing so results are clear.

Putting EVE-NG to Work

EVE-NG gives you a safe, realistic way to build and test network environments without touching production or relying on physical hardware. It’s a practical tool for training, proofs of concept, and rehearsing changes, especially when you want to validate behavior before rollout.

To get the most value, start with a small lab that mirrors a real scenario you care about. Test in layers, use packet capture when something doesn’t behave, and save working labs as templates so you’re not rebuilding from scratch every time.

If you want help designing, validating, and supporting the networks you rely on, Archetype SC can help through our Network Management and Network Security services.