AutoCon4 • Network Automation Lab
Live GNS3 topologies plus a live Containerlab + SONiC node for cloud-datacenter workflows. WireGuard VPN provides secure remote access to the lab, and all traffic routes through a Caddy reverse proxy with automatic TLS termination.
Built by Graham Paasch – network automation engineer. This AutoCon4 out-of-band lab runs GNS3 and Containerlab + SONiC side-by-side for modern cloud fabrics. It exists to prove he can take a messy real-world network, model it cleanly, and automate it with production-grade tooling.
This is my end-to-end automation lab: I designed the topology, built the GNS3 fabric, and deployed a live containerlab + SONiC baseline. It exists to prove I can take a messy real-world environment, define a source-of-truth, and ship production-ready automation and documentation.
Access the lab through WireGuard VPN on UDP port 51820. Once connected, you'll be on the 10.66.6.0/24 management network with direct access to lab nodes, jump hosts, and internal services. All public services route through Caddy reverse proxy with automatic Let's Encrypt certificates.
For AutoCon4, the lab runs an Enterprise Campus/DC profile; the same automation patterns extend to ISP, cloud, IoT, and industrial topologies.
/home/gpaasch/containerlab/sonic.ymlsonic (node clab-sonic-sonic1)172.30.30.0/24 (isolated from GNS3)Battle your way to CCIE certification! A browser-based RPG that makes studying for the CCIE Automation v1.1 Practical Exam fun and addictive.
MAESTRO is the out-of-band automation host for this lab. It runs Ansible, Nornir, and Terraform against the current GNS3 fabric and live containerlab SONiC nodes, giving you a single place to drive configuration, validation, and live demos.
See what is live now: GNS3 plus a running Containerlab SONiC baseline, and the path to multi-node leaf/spine labs.
View Roadmap
See the dual-spine VXLAN core, campus pods, and WAN edges exactly as they render in the live project.
Open Build Guide
Jump into SD-WAN routers, firewalls, or Nexus leaves straight from the browser—no VPN client required.
Launch OOB ConsoleSelect a device to load the exact config rendered from the automation repo (Ansible/Nornir). Perfect for walkthroughs or self-study.
Loading CAMPUS-CORE-01…
Every toggle on this page can be reproduced as code from MAESTRO, using the same Ansible, Nornir, and Terraform you see in the Git repository. The lab is designed so that any topology profile can be driven by the same automation patterns.
Deploy
Validate
Model
For lab maintainers and operators; safe to skip if you’re just evaluating the project.
This section is for lab maintainers and operators. It captures file paths, ports, and low-level details needed to keep the environment running.
lab.grahampaasch.com → static site + Guacamole on 127.0.0.1:8080gns3.lab... → reverse proxy into 127.0.0.1:3080 with legacy path cleanupcontainerlab.lab... → static portal for SONiC containerlab entry + operator notes/home/gpaasch/autocon4 (inventory + templates)/srv/autocon4 for every hostnameOperational notes for running and maintaining the lab day to day.
These notes are written for lab maintainers and operators, not first-time visitors. They document operational quirks, troubleshooting tips, and things I learned while building MAESTRO.
/home/gpaasch/autocon4