Configuration tool for virtual private network (VPN) topologies. In particular implementations, a method includes accessing a network topology configuration set comprising one or more route target groups (RTGs), wherein each RTG comprises a topology type identifier, one or more site identifiers, one or more role identifiers associated with each of the site identifiers, and one or more route target identifiers; generating one or more route target statements, based on the topology type identifier and role identifiers of one or more RTGs, defining the export or import of network layer reachability information between one or more routing nodes in a virtual private network (VPN) topology; and transmitting the one or more route target statements to one or more routing nodes.