From 0ecdf4aaf81fd6fabc700e3d2ec63f07bbd539f1 Mon Sep 17 00:00:00 2001 From: Sebastian Rieger Date: Thu, 3 Sep 2015 23:35:26 +0200 Subject: [PATCH] initial commit --- GIT-VIRL-HS-Fulda/smb-asa.virl | 563 +++++++++++++++++++++++++++++++++ 1 file changed, 563 insertions(+) create mode 100644 GIT-VIRL-HS-Fulda/smb-asa.virl diff --git a/GIT-VIRL-HS-Fulda/smb-asa.virl b/GIT-VIRL-HS-Fulda/smb-asa.virl new file mode 100644 index 0000000..9d64cd1 --- /dev/null +++ b/GIT-VIRL-HS-Fulda/smb-asa.virl @@ -0,0 +1,563 @@ + + + + exclusive + + + + + + + ! IOSvL2 Config generated on 2015-08-13 20:38 +! by autonetkit_0.15.3 +! +version 15.2 +service timestamps debug datetime msec +service timestamps log datetime msec +no service password-encryption +service compress-config +no service config +enable password cisco +ip classless +ip subnet-zero +no ip domain lookup +! +line vty 0 4 +transport input ssh telnet +exec-timeout 720 0 +password cisco +login +! +line con 0 +password cisco +! +hostname iosvl2-1 +! +boot-start-marker +boot-end-marker +! +! +! +no aaa new-model +! +! +! +! +! +! +! +! +ip cef +no ipv6 cef +! +! +spanning-tree mode pvst +spanning-tree extend system-id +! +vlan internal allocation policy ascending +! +! +! +! +! +! +! +! +interface Loopback0 + description Loopback +! +interface GigabitEthernet0/0 + description Mapped to Vlan1 for management + ! Configured on launch + switchport mode access + no shutdown +! +interface GigabitEthernet0/1 + description to iosvl2-2 + switchport trunk encapsulation dot1q + switchport mode trunk + no shutdown +! +interface GigabitEthernet0/2 + description to server-1 + switchport access vlan 2 + switchport mode access + no shutdown +! +interface Vlan1 + description OOB Management + ! Configured on launch + no ip address +! +! +ip forward-protocol nd +! +no ip http server +no ip http secure-server +! +! +! +! +! +! +control-plane +! +! +! +end + + + + + + + + + ! IOSvL2 Config generated on 2015-08-13 20:38 +! by autonetkit_0.15.3 +! +version 15.2 +service timestamps debug datetime msec +service timestamps log datetime msec +no service password-encryption +service compress-config +no service config +enable password cisco +ip classless +ip subnet-zero +no ip domain lookup +! +line vty 0 4 +transport input ssh telnet +exec-timeout 720 0 +password cisco +login +! +line con 0 +password cisco +! +hostname iosvl2-2 +! +boot-start-marker +boot-end-marker +! +! +! +no aaa new-model +! +! +! +! +! +! +! +! +ip cef +no ipv6 cef +! +! +spanning-tree mode pvst +spanning-tree extend system-id +! +vlan internal allocation policy ascending +! +! +! +! +! +! +! +! +interface Loopback0 + description Loopback +! +interface GigabitEthernet0/0 + description Mapped to Vlan1 for management + ! Configured on launch + switchport mode access + no shutdown +! +interface GigabitEthernet0/1 + description to iosvl2-1 + switchport trunk encapsulation dot1q + switchport mode trunk + no shutdown +! +interface GigabitEthernet0/2 + description to iosvl2-3 + switchport trunk encapsulation dot1q + switchport mode trunk + no shutdown +! +interface GigabitEthernet0/3 + description to iosv-2 + switchport access vlan 2 + switchport mode access + no shutdown +! +interface Vlan1 + description OOB Management + ! Configured on launch + no ip address +! +! +ip forward-protocol nd +! +no ip http server +no ip http secure-server +! +! +! +! +! +! +control-plane +! +! +! +end + + + + + + + + + + #cloud-config +bootcmd: +- ln -s -t /etc/rc.d /etc/rc.local +hostname: server-1 +manage_etc_hosts: true +runcmd: +- start ttyS0 +- systemctl start getty@ttyS0.service +- systemctl start rc-local +- sed -i '/^\s*PasswordAuthentication\s\+no/d' /etc/ssh/sshd_config +- echo "UseDNS no" >> /etc/ssh/sshd_config +- service ssh restart +- service sshd restart +users: +- default +- gecos: User configured by VIRL Configuration Engine 0.15.9 + lock-passwd: false + name: cisco + plain-text-passwd: cisco + shell: /bin/bash + ssh-authorized-keys: + - VIRL-USER-SSH-PUBLIC-KEY + sudo: ALL=(ALL) ALL +write_files: +- path: /etc/init/ttyS0.conf + owner: root:root + content: | + # ttyS0 - getty + # This service maintains a getty on ttyS0 from the point the system is + # started until it is shut down again. + start on stopped rc or RUNLEVEL=[12345] + stop on runlevel [!12345] + respawn + exec /sbin/getty -L 115200 ttyS0 vt102 + permissions: '0644' +- path: /etc/systemd/system/dhclient@.service + content: | + [Unit] + Description=Run dhclient on %i interface + After=network.target + [Service] + Type=oneshot + ExecStart=/sbin/dhclient %i -pf /var/run/dhclient.%i.pid -lf /var/lib/dhclient/dhclient.%i.lease + RemainAfterExit=yes + owner: root:root + permissions: '0644' +- path: /etc/rc.local + owner: root:root + permissions: '0755' + content: |- + #!/bin/sh -e + ifconfig eth1 up 10.0.0.1 netmask 255.255.128.0 + route add -host 192.168.0.4 gw 10.0.0.3 dev eth1 + route add -net 10.0.0.0/17 gw 10.0.0.3 dev eth1 + route add -net 10.0.128.0/30 gw 10.0.0.3 dev eth1 + exit 0 + + + + + + + ! IOSvL2 Config generated on 2015-08-13 20:38 +! by autonetkit_0.15.3 +! +version 15.2 +service timestamps debug datetime msec +service timestamps log datetime msec +no service password-encryption +service compress-config +no service config +enable password cisco +ip classless +ip subnet-zero +no ip domain lookup +! +line vty 0 4 +transport input ssh telnet +exec-timeout 720 0 +password cisco +login +! +line con 0 +password cisco +! +hostname iosvl2-3 +! +boot-start-marker +boot-end-marker +! +! +! +no aaa new-model +! +! +! +! +! +! +! +! +ip cef +no ipv6 cef +! +! +spanning-tree mode pvst +spanning-tree extend system-id +! +vlan internal allocation policy ascending +! +! +! +! +! +! +! +! +interface Loopback0 + description Loopback +! +interface GigabitEthernet0/0 + description Mapped to Vlan1 for management + ! Configured on launch + switchport mode access + no shutdown +! +interface GigabitEthernet0/1 + description to iosvl2-2 + switchport trunk encapsulation dot1q + switchport mode trunk + no shutdown +! +interface GigabitEthernet0/2 + description to server-2 + switchport access vlan 2 + switchport mode access + no shutdown +! +interface Vlan1 + description OOB Management + ! Configured on launch + no ip address +! +! +ip forward-protocol nd +! +no ip http server +no ip http secure-server +! +! +! +! +! +! +control-plane +! +! +! +end + + + + + + + + + #cloud-config +bootcmd: +- ln -s -t /etc/rc.d /etc/rc.local +hostname: server-2 +manage_etc_hosts: true +runcmd: +- start ttyS0 +- systemctl start getty@ttyS0.service +- systemctl start rc-local +- sed -i '/^\s*PasswordAuthentication\s\+no/d' /etc/ssh/sshd_config +- echo "UseDNS no" >> /etc/ssh/sshd_config +- service ssh restart +- service sshd restart +users: +- default +- gecos: User configured by VIRL Configuration Engine 0.15.9 + lock-passwd: false + name: cisco + plain-text-passwd: cisco + shell: /bin/bash + ssh-authorized-keys: + - VIRL-USER-SSH-PUBLIC-KEY + sudo: ALL=(ALL) ALL +write_files: +- path: /etc/init/ttyS0.conf + owner: root:root + content: | + # ttyS0 - getty + # This service maintains a getty on ttyS0 from the point the system is + # started until it is shut down again. + start on stopped rc or RUNLEVEL=[12345] + stop on runlevel [!12345] + respawn + exec /sbin/getty -L 115200 ttyS0 vt102 + permissions: '0644' +- path: /etc/systemd/system/dhclient@.service + content: | + [Unit] + Description=Run dhclient on %i interface + After=network.target + [Service] + Type=oneshot + ExecStart=/sbin/dhclient %i -pf /var/run/dhclient.%i.pid -lf /var/lib/dhclient/dhclient.%i.lease + RemainAfterExit=yes + owner: root:root + permissions: '0644' +- path: /etc/rc.local + owner: root:root + permissions: '0755' + content: |- + #!/bin/sh -e + ifconfig eth1 up 10.0.0.2 netmask 255.255.128.0 + route add -host 192.168.0.4 gw 10.0.0.3 dev eth1 + route add -net 10.0.0.0/17 gw 10.0.0.3 dev eth1 + route add -net 10.0.128.0/30 gw 10.0.0.3 dev eth1 + exit 0 + + + + + + + ! ASAv Config generated on 2015-08-13 20:38 +! by autonetkit_0.15.3 +! +hostname asav-1 +username cisco password cisco privilege 15 +enable password cisco +passwd cisco +names +! +interface Loopback100 + description loopback + no ip address +interface GigabitEthernet0/0 + description to iosv-2 + nameif inside + security-level 100 + no shutdown + ip address 10.0.128.1 255.255.255.252 +interface GigabitEthernet0/1 + description to flat-2 + nameif outside + security-level 0 + no shutdown + no ip address +interface Management0/0 + description OOB Management + management-only + nameif mgmt + security-level 100 + no shutdown + ! Configured on launch + no ip address +! +same-security-traffic permit inter-interface +logging enable +logging asdm informational +user-identity default-domain LOCAL +aaa authentication ssh console LOCAL +http server enable +http 0.0.0.0 0.0.0.0 inside +ssh 0.0.0.0 0.0.0.0 inside +telnet 0.0.0.0 0.0.0.0 inside +http 0.0.0.0 0.0.0.0 mgmt +ssh 0.0.0.0 0.0.0.0 mgmt +telnet 0.0.0.0 0.0.0.0 mgmt +http 0.0.0.0 0.0.0.0 outside +ssh 0.0.0.0 0.0.0.0 outside +telnet 0.0.0.0 0.0.0.0 outside +telnet timeout 15 +console timeout 0 +username cisco password cisco privilege 15 +! +class-map inspection_default + match default-inspection-traffic +! +! +policy-map type inspect dns preset_dns_map + parameters + message-length maximum client auto + message-length maximum 512 +policy-map global_policy + class inspection_default + inspect ip-options + inspect netbios + inspect rtsp + inspect sunrpc + inspect tftp + inspect xdmcp + inspect dns preset_dns_map + inspect ftp + inspect h323 h225 + inspect h323 ras + inspect rsh + inspect esmtp + inspect sqlnet + inspect sip + inspect skinny + inspect icmp + inspect http +! +service-policy global_policy global +no call-home reporting anonymous +call-home + profile CiscoTAC-1 + no active +end + + + + + + 100 + + + + + 0 + + + + + + + + + +