Enterprise WAN config generator
Router-side templates: MPLS VRF definitions for a PE router, SD-WAN IPsec overlays, VXLAN layer-2 stretches and 6in4 IPv6 tunnels.
PE router VRF and BGP definitions
Defaults to ASN:100
MPLS L3VPN — provider edge config
! Cisco IOS-XE — MPLS L3VPN provider edge (PE) configuration ! Isolation comes from VRFs and route targets. MPLS does NOT encrypt traffic: ! run IPsec on top if confidentiality is required. vrf definition CUSTOMER-A rd 65000:100 ! address-family ipv4 route-target export 65000:100 route-target import 65000:100 exit-address-family ! interface GigabitEthernet0/0/1 description Link to CE at CUSTOMER-A vrf forwarding CUSTOMER-A ip address 10.1.1.1 255.255.255.252 no shutdown ! router bgp 65000 ! address-family vpnv4 neighbor RR-GROUP send-community extended exit-address-family ! address-family ipv4 vrf CUSTOMER-A neighbor 10.1.1.2 remote-as 65100 neighbor 10.1.1.2 activate neighbor 10.1.1.2 as-override neighbor 10.1.1.2 soft-reconfiguration inbound exit-address-family ! end
This transport is not encrypted
MPLS separates customers with labels and VRFs, which is isolation, not confidentiality. Anyone with access to the provider core sees your traffic — run IPsec or WireGuard on top if that matters.
Review before pasting into a production device
These are templates built from your inputs — interface names, routing protocols and address plans differ between networks. Read every line, then stage the change in a maintenance window.
Generated locally, stored nowhere
Keys and passwords come from your browser's crypto RNG. Nothing you type or generate is sent to a server, written to storage, or recoverable by anyone once you close this tab.