Unlike simulation tools limited to one vendor, PNETLab easily handles Cisco (CSR1000v, IOL, IOS-XR, NX-OS), Juniper, Arista, Fortinet, Palo Alto, and Docker containers simultaneously.
Includes fixes for device templates and an issue where pictures within a lab would fail to load. Installation and Upgrade Process
| 防御层 | 机制 | EVE-NG 6.2.0-4 | PNETLab 5.3.11 | 差距说明 | | :--- | :--- | :--- | :--- | :--- | | | Shell元字符清洗 | escapeshellcmd() – PHP标准库函数,过滤所有shell元字符 | secureCmd() – 自定义函数,仅过滤部分字符 | PNETLab 不过滤 $() ,是 CVE-2025-63749 的直接成因。 | | L2 | 圆括号转义 | preg_replace 将 ( ) 转义,使命令替换失效 | 无 | PNETLab 完全缺失此层防护。 | | L3 | 引号转义 | addslashes() – 防止参数截断破坏命令行结构 | 无等价措施 | PNETLab 完全缺失此层。 | | L4 | chroot隔离 | chroot(".") – 限制 QEMU 进程在运行目录内 | 无 chroot | PNETLab 的 QEMU 进程可直接访问宿主机文件系统。 | | L5 | 进程组权限限制 | setgid(32768) – 设置到 unl 组 | 以 root 运行,无限制 | 两者均以 root 身份运行 QEMU 节点,是共同短板。 | | L6 | 只读挂载保护 | mount -B -o ro + chattr +i – 镜像目录只读 | 无 | PNETLab 被入侵后镜像文件可被篡改。 | Pnetlab 5.3.11
The release of brings critical performance optimizations and maintenance upgrades aimed at making heavy virtual labs smoother and more responsive. 🚀 Performance: The Headline Feature
: After adding any new images, always run /opt/unetlab/wrappers/unl_wrapper -a fixpermissions from the root CLI to ensure the images can boot correctly. How to Upgrade PNETLab 4.x to Stable 5.3.11 Version Unlike simulation tools limited to one vendor, PNETLab
🚀 just dropped, and it brings some solid improvements for network engineers, CCIE/EVE-NG users, and homelab enthusiasts.
: The system automatically maps the images. They don't have to worry about fixing "Telnet" ports or broken links. Collaboration 🚀 Performance: The Headline Feature : After adding
Every folder name must follow strict naming conventions (e.g., asav-9.16.1/ , vsrx-18.4/ ). Inside, the virtual disk must be named exactly virtioa.qcow2 or hdd.qcow2 . /opt/unetlab/addons/iol/bin/
Disclaimer: Information is based on PNETLab updates up to early 2026. Always consult the official PNETLab website for the latest updates and release notes. If you want, I can help you: in more detail. List the steps to set up Docker containers.