EVE-NG推广
查看: 5453|回复: 11

4.分享CCIE SEC V5拓扑

337

主题

830

回帖

312万

积分

管理员

Rank: 9Rank: 9Rank: 9

积分
3126023

推广达人宣传达人突出贡献优秀版主论坛元老

QQ
本帖最后由 hbugs001 于 2019-10-3 22:14 编辑

所需镜像下载地址
http://forum.emulatedlab.com/forum.php?mod=viewthread&tid=259&extra=page%3D1

SECV5.png

Images I use:
vwlc-8.3.141
coeus-9-2-0-083-S300V
asa-915-16-k8-CL-L
csr1000v-universalk9.03.16.08.S.155-3.S8
winserver-S2012R2
firepower6-FMC-6.2.3-83
firepower6-NGIPS-6.2.3-83
asav-992-100
i86bi_linux_l2-ipbasek9-ms.high_iron_aug9_2017b.bin
L3-ADVENTERPRISEK9-M-15.4-2T.bin
Win-7



Re: ISE
Find an iso online or get one from cisco. ISE has a 120 day free trial and is not in this torrent.

Re: FMC
No license needed for NGIPS

Re: WSA
Contact Cisco for a 90 days trial. Tell the truth, you are using it for your CCIE Security Lab preparation. They are nice and will give you a new one after it expires.

Re: Gotchas!!
On mab/dot1x switchports you need to use "authentication open" on EVE-NG, not on the real lab.
You can't have mab and dot1x clients on the same switchport. In my lab, I added a VPC client to simulate the phone with the mab_pc and a VPC client to simulate the AP for configuring mab.


Re: Lab Setup
This will take sometime and be very rewarding and requires some linux experience.

First get the images, such as with Win7. You will make the dot1x PC with the static 150.1.7.x IP and dhcp. Then stop it and export it to a new directory.

Use this http://www.eve-ng.net/documentat ... efault-on-qemu-node

You don't want to use commit as in this tutorial. Shutdown the node and use /opt/qemu/bin/qemu-img convert -c -O qcow2 hda.qcow2 ~/dot1xpc.qcow2

Move it a new directory such as, /opt/unetlab/addons/qemu/win-dot1xpc/hda.qcow2

Same with fmc/ngips/wlc/wsa/pc1/pc2/mabpc/cannidatepc/win2kserver...

Such with FMC and NGIPS. I set the ip address and joined NGIPS as a device, then exported the images. With my WSA. I had only installed the license before I exported it. On PC1, I installed anyconnect and set the public then exported. With the win2k, I did dcpromo, set ip to 150.1.7.200, and made the dns entries.

The point is to have it start with an initial "lab" config on all of the appliances and windows machines.


This way when I am done going thru the config, in 3-5 minutes, I can have it reset to starting by stopping the nodes and doing a wipe in EVE-NG, then starting them back up.

_Exports_unetlab_export-20190807-043229.zip

23.91 KB, 下载次数: 57

售价: 20 EML币  [记录]

不忘初心
回复

使用道具 举报

0

主题

5

回帖

124

积分

初级会员

Rank: 2

积分
124
发表于 2019-10-4 06:56:28 | 显示全部楼层
Which EVE Image are you using? Revised edition does  not support import
回复

使用道具 举报

1

主题

14

回帖

119

积分

新手上路

Rank: 1

积分
119
发表于 2019-10-8 14:05:11 | 显示全部楼层
支持支持
回复

使用道具 举报

0

主题

75

回帖

1061

积分

高级会员

Rank: 4

积分
1061
发表于 2019-11-18 00:22:32 | 显示全部楼层
谢谢分享           
回复

使用道具 举报

1

主题

17

回帖

255

积分

初级会员

Rank: 2

积分
255
发表于 2019-11-27 00:15:48 | 显示全部楼层
感谢分享!!!
回复

使用道具 举报

0

主题

11

回帖

137

积分

新手上路

Rank: 1

积分
137
发表于 2020-7-5 21:54:51 | 显示全部楼层
这个可以有  感谢分享
回复

使用道具 举报

0

主题

29

回帖

1586

积分

高级会员

Rank: 4

积分
1586
发表于 2020-7-13 22:16:55 | 显示全部楼层
拓扑看起来少了很大一部分吧,firepower,fmc没看到。
回复

使用道具 举报

0

主题

242

回帖

8万

积分

富可敌国

积分
87319
发表于 2020-7-14 10:43:42 | 显示全部楼层
这个环境挺烧脑的
回复

使用道具 举报

0

主题

12

回帖

42

积分

新手上路

Rank: 1

积分
42
发表于 2020-9-14 08:34:55 | 显示全部楼层
来看看,学习学
回复

使用道具 举报

0

主题

38

回帖

221

积分

初级会员

Rank: 2

积分
221
发表于 2020-11-4 16:25:30 | 显示全部楼层
谢谢楼主分享
回复

使用道具 举报

您需要登录后才可以回帖 登录 | 立即注册

本版积分规则


Copyright   ©2015-2024  EmulatedLab  Powered by Discuz!©   ( 浙ICP备2021010423号-1 )
快速回复 返回列表 返回顶部