nxos: add n9kv eBGP lab and wire lab_builder for NX-OS

infra/README.md

@@ -95,13 +95,13 @@ few starting points:
 
 **Interface mapping**: containerlab `ethN` maps to vendor interfaces:
 
-| containerlab | Junos (vJunos-router) | Arista (cEOS) |
-| ------------ | --------------------- | ------------- |
-| eth0         | management (auto)     | Management0   |
-| eth1         | ge-0/0/0              | Ethernet1     |
-| eth2         | ge-0/0/1              | Ethernet2     |
-| eth3         | ge-0/0/2              | Ethernet3     |
-| ethN         | ge-0/0/(N-1)          | EthernetN     |
+| containerlab | Junos (vJunos-router) | Arista (cEOS) | NX-OS (N9Kv) |
+| ------------ | --------------------- | ------------- | ------------ |
+| eth0         | management (auto)     | Management0   | mgmt0        |
+| eth1         | ge-0/0/0              | Ethernet1     | Ethernet1/1  |
+| eth2         | ge-0/0/1              | Ethernet2     | Ethernet1/2  |
+| eth3         | ge-0/0/2              | Ethernet3     | Ethernet1/3  |
+| ethN         | ge-0/0/(N-1)          | EthernetN     | Ethernet1/N  |
 
 ### Step 2: Launch EC2 and Upload
 
@@ -357,6 +357,18 @@ Run on EC2 as `PYTHONPATH=src python3 -m lab_builder <command>`:
 | `show ip ospf neighbor \| json`         | `show/<node>/`    | OSPF status          |
 | `show isis neighbors \| json`           | `show/<node>/`    | ISIS status          |
 
+### Cisco NX-OS (N9Kv)
+
+| Command                    | Goes to           | Purpose              |
+| -------------------------- | ----------------- | -------------------- |
+| `show running-config`      | `configs/<node>/` | Device config        |
+| `show interface`           | `show/<node>/`    | Interface properties |
+| `show ip route vrf all`    | `show/<node>/`    | Main routing table   |
+| `show ip bgp vrf all`      | `show/<node>/`    | BGP routes           |
+| `show ip bgp all neighbor` | `show/<node>/`    | BGP peer details     |
+| `show version`             | `show/<node>/`    | Software version     |
+| `show vrf`                 | `show/<node>/`    | VRF info             |
+
 ## Snapshot Directory Structure
 
 The output matches the lab-validation framework's expected layout:
@@ -474,6 +486,7 @@ the large Juniper VM images and reducing bootstrap time from ~5 min to
 | `juniper_vjunosevolved` | Junos Evolved (PTX) | admin / admin@123 | ~15 min   | Yes          |
 | `juniper_crpd`          | Junos cRPD          | root / clab123    | ~1 min    | No           |
 | `arista_ceos`           | Arista EOS          | admin / admin     | ~1 min    | No           |
+| `cisco_n9kv`            | Cisco NX-OS (N9Kv)  | admin / admin     | 5-10 min  | Yes          |
 
 **Junos platform selection**: vJunos-router (MX) does NOT support `family
 ethernet-switching`, VLANs with IRBs, or EVPN bridge domains. Labs that use
@@ -484,6 +497,10 @@ pure IP routing (underlay, L3VPN, route reflectors, CE devices).
 under a minute. Startup configs use standard EOS CLI format. cEOS-64
 (64-bit) is required for containerlab.
 
+**Cisco NX-OS (N9Kv)**: Nexus 9000v virtual switch image running NX-OS.
+Requires KVM (vrnetlab-based). Startup configs use standard NX-OS CLI
+format. Interface mapping: eth1 → Ethernet1/1, eth2 → Ethernet1/2, etc.
+
 ## Troubleshooting
 
 **SSH connection refused after deploy**: vJunos-router takes 5-10 minutes to

snapshots/nxos_n9kv_ebgp/batfish/layer1_topology.json

@@ -0,0 +1,14 @@
+{
+    "edges": [
+        {
+            "node1": {
+                "hostname": "r1",
+                "interfaceName": "Ethernet1/1"
+            },
+            "node2": {
+                "hostname": "r2",
+                "interfaceName": "Ethernet1/1"
+            }
+        }
+    ]
+}

snapshots/nxos_n9kv_ebgp/configs/r1/show_running-config.txt

@@ -0,0 +1,191 @@
+
+!Command: show running-config
+!Running configuration last done at: Wed May 20 03:54:57 2026
+!Time: Wed May 20 04:01:53 2026
+
+version 10.3(9) Bios:version  
+hostname r1
+vdc r1 id 1
+  limit-resource vlan minimum 16 maximum 4094
+  limit-resource vrf minimum 2 maximum 4096
+  limit-resource port-channel minimum 0 maximum 511
+  limit-resource m4route-mem minimum 58 maximum 58
+  limit-resource m6route-mem minimum 8 maximum 8
+
+feature telnet
+feature nxapi
+feature scp-server
+feature bgp
+feature netconf
+feature grpc
+
+no password strength-check
+username admin password 5 $5$CHIOFM$I03zGjuKGXGuX/FlHpnmLASJtuW3EipbOzUs4K138l4  role network-admin
+ssh key rsa 2048 
+ip domain-lookup
+copp profile strict
+snmp-server user admin network-admin auth md5 3772B6814E2F5118AC2A4E7168119A482CAF priv aes-128 480BFF9262537174D84867393908B07C2FB5 localizedV2key
+rmon event 1 log trap public description FATAL(1) owner PMON@FATAL
+rmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL
+rmon event 3 log trap public description ERROR(3) owner PMON@ERROR
+rmon event 4 log trap public description WARNING(4) owner PMON@WARNING
+rmon event 5 log trap public description INFORMATION(5) owner PMON@INFO
+
+vlan 1
+
+vrf context management
+  ip route 0.0.0.0/0 10.0.0.2
+  ipv6 route 0::/0 2001:db8::1
+
+interface Ethernet1/1
+  no switchport
+  ip address 10.0.0.0/31
+  no shutdown
+
+interface Ethernet1/2
+
+interface Ethernet1/3
+
+interface Ethernet1/4
+
+interface Ethernet1/5
+
+interface Ethernet1/6
+
+interface Ethernet1/7
+
+interface Ethernet1/8
+
+interface Ethernet1/9
+
+interface Ethernet1/10
+
+interface Ethernet1/11
+
+interface Ethernet1/12
+
+interface Ethernet1/13
+
+interface Ethernet1/14
+
+interface Ethernet1/15
+
+interface Ethernet1/16
+
+interface Ethernet1/17
+
+interface Ethernet1/18
+
+interface Ethernet1/19
+
+interface Ethernet1/20
+
+interface Ethernet1/21
+
+interface Ethernet1/22
+
+interface Ethernet1/23
+
+interface Ethernet1/24
+
+interface Ethernet1/25
+
+interface Ethernet1/26
+
+interface Ethernet1/27
+
+interface Ethernet1/28
+
+interface Ethernet1/29
+
+interface Ethernet1/30
+
+interface Ethernet1/31
+
+interface Ethernet1/32
+
+interface Ethernet1/33
+
+interface Ethernet1/34
+
+interface Ethernet1/35
+
+interface Ethernet1/36
+
+interface Ethernet1/37
+
+interface Ethernet1/38
+
+interface Ethernet1/39
+
+interface Ethernet1/40
+
+interface Ethernet1/41
+
+interface Ethernet1/42
+
+interface Ethernet1/43
+
+interface Ethernet1/44
+
+interface Ethernet1/45
+
+interface Ethernet1/46
+
+interface Ethernet1/47
+
+interface Ethernet1/48
+
+interface Ethernet1/49
+
+interface Ethernet1/50
+
+interface Ethernet1/51
+
+interface Ethernet1/52
+
+interface Ethernet1/53
+
+interface Ethernet1/54
+
+interface Ethernet1/55
+
+interface Ethernet1/56
+
+interface Ethernet1/57
+
+interface Ethernet1/58
+
+interface Ethernet1/59
+
+interface Ethernet1/60
+
+interface Ethernet1/61
+
+interface Ethernet1/62
+
+interface Ethernet1/63
+
+interface Ethernet1/64
+
+interface mgmt0
+  vrf member management
+  ip address 10.0.0.15/24
+  ipv6 address 2001:db8::2/64
+
+interface loopback0
+  ip address 1.1.1.1/32
+icam monitor scale
+
+line console
+line vty
+router bgp 65001
+  router-id 1.1.1.1
+  address-family ipv4 unicast
+    network 1.1.1.1/32
+  neighbor 10.0.0.1
+    remote-as 65002
+    address-family ipv4 unicast
+
+
+