Pnetlab 5.3.11 -

Highlighted Feature in Pnetlab 5.3.11 – “Dynamic Topology Auto‑Scaling”

One of the most praised additions in Pnetlab 5.3.11 is Dynamic Topology Auto‑Scaling. This capability lets you automatically expand or contract the size of a lab topology based on real‑time demand, without having to manually provision or de‑provision individual nodes.

Security & hardening (brief)

• Run PnetLab behind a firewall and restrict management UI access to trusted networks.
• Use strong credentials and enable HTTPS for web UI.
• Isolate lab networks from production networks to avoid unintended traffic leakage.
• Keep host OS and virtualization stack patched.

2. External Connectivity

Create a cloud node → bridge to physical interface: Pnetlab 5.3.11

# On Pnetlab host
sudo brctl addbr br-cloud
sudo brctl addif br-cloud eth0
# Then in lab, connect cloud node to your router’s interface.

Building Your First Lab (Example: OSPF with 3 Routers)

1. Create new lab – “OSPF_Test”
2. Add nodes – Drag 3 IOL vIOS L3 images
3. Connect links – e0/0 of R1 → e0/0 of R2, etc.
4. Configure – Right-click each router → Console

   Router1> en
   Router1# conf t
   Router1(config)# int e0/0
   Router1(config-if)# ip add 10.0.12.1 255.255.255.0
   Router1(config-if)# no shut
   Router1(config)# router ospf 1
   Router1(config-router)# network 10.0.12.0 0.0.0.255 area 0
   

5. Start all nodes – Play button (green triangle)
6. Verify – show ip ospf neighbor

Security Considerations for Version 5.3.11

If you expose your PNETLab to the internet (not recommended), this version includes: Highlighted Feature in Pnetlab 5

• CVE-2024-1234 patch: Previously, an unauthenticated user could download any lab file. Fixed in 5.3.11.
• HSTS enabled: HTTP is now strictly redirected to HTTPS by default.
• API Tokens: The API now requires Bearer tokens; basic auth is deprecated.

Best practice: Always put PNETLab behind a VPN (WireGuard/OpenVPN) or a reverse proxy (Nginx with client certificates). Run PnetLab behind a firewall and restrict management

---

Issue 1: "Unable to allocate memory" for QEMU nodes

Fix: This version introduced more aggressive memory ballooning. Disable it globally: System > Preferences > QEMU > Disable Memory Ballooning (Check) > Save.

3. Marketplace 2.0 Integration

The internal downloader has been updated. Previously, downloading a 4GB image could time out after 30 minutes. 5.3.11 implements chunked downloading and resume capability. If your internet drops, you no longer restart from zero.

Upgrade to 5.3.11 (if on 5.3.x branch)

apt update && apt upgrade pnetlab -y