initial commit

9 years ago · 0ecdf4aaf8
1 changed files with 563 additions and 0 deletions
--- a/GIT-VIRL-HS-Fulda/smb-asa.virl
+++ b/GIT-VIRL-HS-Fulda/smb-asa.virl
@ -0,0 +1,563 @@
 <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
 <topology xmlns="http://www.cisco.com/VIRL" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" schemaVersion="0.9" xsi:schemaLocation="http://www.cisco.com/VIRL https://raw.github.com/CiscoVIRL/schema/v0.9/virl.xsd">
    <extensions>
        <entry key="management_network" type="String">exclusive</entry>
    </extensions>
    <node name="flat-2" type="ASSET" subtype="FLAT" location="261,80">
        <interface id="0" name="link0"/>
    </node>
    <node name="iosvl2-1" type="SIMPLE" subtype="IOSvL2" location="527,252">
        <extensions>
            <entry key="config" type="string">! IOSvL2 Config generated on 2015-08-13 20:38
 ! by autonetkit_0.15.3
 !
 version 15.2
 service timestamps debug datetime msec
 service timestamps log datetime msec
 no service password-encryption
 service compress-config
 no service config
 enable password cisco
 ip classless
 ip subnet-zero
 no ip domain lookup
 !
 line vty 0 4
 transport input ssh telnet
 exec-timeout 720 0
 password cisco
 login
 !
 line con 0
 password cisco
 !
 hostname iosvl2-1
 !
 boot-start-marker
 boot-end-marker
 !
 !
 !
 no aaa new-model
 !
 !
 !
 !
 !
 !
 !
 !
 ip cef
 no ipv6 cef
 !
 !
 spanning-tree mode pvst
 spanning-tree extend system-id
 !
 vlan internal allocation policy ascending
 !
 !
 !
 !
 !
 !
 !
 !
 interface Loopback0
  description Loopback
 !
 interface GigabitEthernet0/0
  description Mapped to Vlan1 for management
  ! Configured on launch
  switchport mode access
  no shutdown
 !
 interface GigabitEthernet0/1
  description to iosvl2-2
  switchport trunk encapsulation dot1q
  switchport mode trunk
  no shutdown
 !
 interface GigabitEthernet0/2
  description to server-1
  switchport access vlan 2
  switchport mode access
  no shutdown
 !
 interface Vlan1
  description OOB Management
  ! Configured on launch
  no ip address
 !
 !
 ip forward-protocol nd
 !
 no ip http server
 no ip http secure-server
 !
 !
 !
 !
 !
 !
 control-plane
 !
 !
 !
 end
        </entry>
            <entry key="AutoNetkit.mgmt_ip" type="string"></entry>
        </extensions>
        <interface id="0" name="GigabitEthernet0/1"/>
        <interface id="1" name="GigabitEthernet0/2"/>
    </node>
    <node name="iosvl2-2" type="SIMPLE" subtype="IOSvL2" location="401,182">
        <extensions>
            <entry key="config" type="string">! IOSvL2 Config generated on 2015-08-13 20:38
 ! by autonetkit_0.15.3
 !
 version 15.2
 service timestamps debug datetime msec
 service timestamps log datetime msec
 no service password-encryption
 service compress-config
 no service config
 enable password cisco
 ip classless
 ip subnet-zero
 no ip domain lookup
 !
 line vty 0 4
 transport input ssh telnet
 exec-timeout 720 0
 password cisco
 login
 !
 line con 0
 password cisco
 !
 hostname iosvl2-2
 !
 boot-start-marker
 boot-end-marker
 !
 !
 !
 no aaa new-model
 !
 !
 !
 !
 !
 !
 !
 !
 ip cef
 no ipv6 cef
 !
 !
 spanning-tree mode pvst
 spanning-tree extend system-id
 !
 vlan internal allocation policy ascending
 !
 !
 !
 !
 !
 !
 !
 !
 interface Loopback0
  description Loopback
 !
 interface GigabitEthernet0/0
  description Mapped to Vlan1 for management
  ! Configured on launch
  switchport mode access
  no shutdown
 !
 interface GigabitEthernet0/1
  description to iosvl2-1
  switchport trunk encapsulation dot1q
  switchport mode trunk
  no shutdown
 !
 interface GigabitEthernet0/2
  description to iosvl2-3
  switchport trunk encapsulation dot1q
  switchport mode trunk
  no shutdown
 !
 interface GigabitEthernet0/3
  description to iosv-2
  switchport access vlan 2
  switchport mode access
  no shutdown
 !
 interface Vlan1
  description OOB Management
  ! Configured on launch
  no ip address
 !
 !
 ip forward-protocol nd
 !
 no ip http server
 no ip http secure-server
 !
 !
 !
 !
 !
 !
 control-plane
 !
 !
 !
 end
        </entry>
            <entry key="AutoNetkit.mgmt_ip" type="string"></entry>
        </extensions>
        <interface id="0" name="GigabitEthernet0/1"/>
        <interface id="1" name="GigabitEthernet0/2"/>
        <interface id="2" name="GigabitEthernet0/3"/>
    </node>
    <node name="server-1" type="SIMPLE" subtype="server" location="527,346">
        <extensions>
            <entry key="config" type="String">#cloud-config
 bootcmd:
 - ln -s -t /etc/rc.d /etc/rc.local
 hostname: server-1
 manage_etc_hosts: true
 runcmd:
 - start ttyS0
 - systemctl start getty@ttyS0.service
 - systemctl start rc-local
 - sed -i '/^\s*PasswordAuthentication\s\+no/d' /etc/ssh/sshd_config
 - echo "UseDNS no" &gt;&gt; /etc/ssh/sshd_config
 - service ssh restart
 - service sshd restart
 users:
 - default
 - gecos: User configured by VIRL Configuration Engine 0.15.9
  lock-passwd: false
  name: cisco
  plain-text-passwd: cisco
  shell: /bin/bash
  ssh-authorized-keys:
  - VIRL-USER-SSH-PUBLIC-KEY
  sudo: ALL=(ALL) ALL
 write_files:
 - path: /etc/init/ttyS0.conf
  owner: root:root
  content: |
    # ttyS0 - getty
    # This service maintains a getty on ttyS0 from the point the system is
    # started until it is shut down again.
    start on stopped rc or RUNLEVEL=[12345]
    stop on runlevel [!12345]
    respawn
    exec /sbin/getty -L 115200 ttyS0 vt102
  permissions: '0644'
 - path: /etc/systemd/system/dhclient@.service
  content: |
    [Unit]
    Description=Run dhclient on %i interface
    After=network.target
    [Service]
    Type=oneshot
    ExecStart=/sbin/dhclient %i -pf /var/run/dhclient.%i.pid -lf /var/lib/dhclient/dhclient.%i.lease
    RemainAfterExit=yes
  owner: root:root
  permissions: '0644'
 - path: /etc/rc.local
  owner: root:root
  permissions: '0755'
  content: |-
    #!/bin/sh -e
    ifconfig eth1 up 10.0.0.1 netmask 255.255.128.0
    route add -host 192.168.0.4 gw 10.0.0.3 dev eth1
    route add -net 10.0.0.0/17 gw 10.0.0.3 dev eth1
    route add -net 10.0.128.0/30 gw 10.0.0.3 dev eth1
    exit 0
 </entry>
        </extensions>
        <interface id="0" name="eth1" ipv4="10.0.0.1" netPrefixLenV4="17"/>
    </node>
    <node name="iosvl2-3" type="SIMPLE" subtype="IOSvL2" location="261,252">
        <extensions>
            <entry key="config" type="string">! IOSvL2 Config generated on 2015-08-13 20:38
 ! by autonetkit_0.15.3
 !
 version 15.2
 service timestamps debug datetime msec
 service timestamps log datetime msec
 no service password-encryption
 service compress-config
 no service config
 enable password cisco
 ip classless
 ip subnet-zero
 no ip domain lookup
 !
 line vty 0 4
 transport input ssh telnet
 exec-timeout 720 0
 password cisco
 login
 !
 line con 0
 password cisco
 !
 hostname iosvl2-3
 !
 boot-start-marker
 boot-end-marker
 !
 !
 !
 no aaa new-model
 !
 !
 !
 !
 !
 !
 !
 !
 ip cef
 no ipv6 cef
 !
 !
 spanning-tree mode pvst
 spanning-tree extend system-id
 !
 vlan internal allocation policy ascending
 !
 !
 !
 !
 !
 !
 !
 !
 interface Loopback0
  description Loopback
 !
 interface GigabitEthernet0/0
  description Mapped to Vlan1 for management
  ! Configured on launch
  switchport mode access
  no shutdown
 !
 interface GigabitEthernet0/1
  description to iosvl2-2
  switchport trunk encapsulation dot1q
  switchport mode trunk
  no shutdown
 !
 interface GigabitEthernet0/2
  description to server-2
  switchport access vlan 2
  switchport mode access
  no shutdown
 !
 interface Vlan1
  description OOB Management
  ! Configured on launch
  no ip address
 !
 !
 ip forward-protocol nd
 !
 no ip http server
 no ip http secure-server
 !
 !
 !
 !
 !
 !
 control-plane
 !
 !
 !
 end
        </entry>
            <entry key="AutoNetkit.mgmt_ip" type="string"></entry>
        </extensions>
        <interface id="0" name="GigabitEthernet0/1"/>
        <interface id="1" name="GigabitEthernet0/2"/>
    </node>
    <node name="server-2" type="SIMPLE" subtype="server" location="261,346">
        <extensions>
            <entry key="config" type="String">#cloud-config
 bootcmd:
 - ln -s -t /etc/rc.d /etc/rc.local
 hostname: server-2
 manage_etc_hosts: true
 runcmd:
 - start ttyS0
 - systemctl start getty@ttyS0.service
 - systemctl start rc-local
 - sed -i '/^\s*PasswordAuthentication\s\+no/d' /etc/ssh/sshd_config
 - echo "UseDNS no" &gt;&gt; /etc/ssh/sshd_config
 - service ssh restart
 - service sshd restart
 users:
 - default
 - gecos: User configured by VIRL Configuration Engine 0.15.9
  lock-passwd: false
  name: cisco
  plain-text-passwd: cisco
  shell: /bin/bash
  ssh-authorized-keys:
  - VIRL-USER-SSH-PUBLIC-KEY
  sudo: ALL=(ALL) ALL
 write_files:
 - path: /etc/init/ttyS0.conf
  owner: root:root
  content: |
    # ttyS0 - getty
    # This service maintains a getty on ttyS0 from the point the system is
    # started until it is shut down again.
    start on stopped rc or RUNLEVEL=[12345]
    stop on runlevel [!12345]
    respawn
    exec /sbin/getty -L 115200 ttyS0 vt102
  permissions: '0644'
 - path: /etc/systemd/system/dhclient@.service
  content: |
    [Unit]
    Description=Run dhclient on %i interface
    After=network.target
    [Service]
    Type=oneshot
    ExecStart=/sbin/dhclient %i -pf /var/run/dhclient.%i.pid -lf /var/lib/dhclient/dhclient.%i.lease
    RemainAfterExit=yes
  owner: root:root
  permissions: '0644'
 - path: /etc/rc.local
  owner: root:root
  permissions: '0755'
  content: |-
    #!/bin/sh -e
    ifconfig eth1 up 10.0.0.2 netmask 255.255.128.0
    route add -host 192.168.0.4 gw 10.0.0.3 dev eth1
    route add -net 10.0.0.0/17 gw 10.0.0.3 dev eth1
    route add -net 10.0.128.0/30 gw 10.0.0.3 dev eth1
    exit 0
 </entry>
        </extensions>
        <interface id="0" name="eth1" ipv4="10.0.0.2" netPrefixLenV4="17"/>
    </node>
    <node name="asav-1" type="SIMPLE" subtype="ASAv" location="406,79">
        <extensions>
            <entry key="config" type="string">! ASAv Config generated on 2015-08-13 20:38
 ! by autonetkit_0.15.3
 !
 hostname asav-1
 username cisco password cisco privilege 15
 enable password cisco
 passwd cisco
 names
 !
 interface Loopback100
  description loopback
  no ip address
 interface GigabitEthernet0/0
  description to iosv-2
  nameif inside
  security-level 100
  no shutdown
  ip address 10.0.128.1 255.255.255.252
 interface GigabitEthernet0/1
  description to flat-2
  nameif outside
  security-level 0
  no shutdown
  no ip address
 interface Management0/0
  description OOB Management
  management-only
  nameif mgmt
  security-level 100
  no shutdown
  ! Configured on launch
  no ip address
 !
 same-security-traffic permit inter-interface
 logging enable
 logging asdm informational
 user-identity default-domain LOCAL
 aaa authentication ssh console LOCAL
 http server enable
 http 0.0.0.0 0.0.0.0 inside
 ssh 0.0.0.0 0.0.0.0 inside
 telnet 0.0.0.0 0.0.0.0 inside
 http 0.0.0.0 0.0.0.0 mgmt
 ssh 0.0.0.0 0.0.0.0 mgmt
 telnet 0.0.0.0 0.0.0.0 mgmt
 http 0.0.0.0 0.0.0.0 outside
 ssh 0.0.0.0 0.0.0.0 outside
 telnet 0.0.0.0 0.0.0.0 outside
 telnet timeout 15
 console timeout 0
 username cisco password cisco privilege 15
 !
 class-map inspection_default
 match default-inspection-traffic
 !
 !
 policy-map type inspect dns preset_dns_map
 parameters
  message-length maximum client auto
  message-length maximum 512
 policy-map global_policy
 class inspection_default
  inspect ip-options
  inspect netbios
  inspect rtsp
  inspect sunrpc
  inspect tftp
  inspect xdmcp
  inspect dns preset_dns_map
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect rsh
  inspect esmtp
  inspect sqlnet
  inspect sip
  inspect skinny
  inspect icmp
  inspect http
 !
 service-policy global_policy global
 no call-home reporting anonymous
 call-home
 profile CiscoTAC-1
  no active
 end
        </entry>
            <entry key="AutoNetkit.mgmt_ip" type="string"></entry>
        </extensions>
        <interface id="0" name="GigabitEthernet0/0">
            <extensions>
                <entry key="AutoNetkit.security_level" type="Integer">100</entry>
            </extensions>
        </interface>
        <interface id="1" name="GigabitEthernet0/1">
            <extensions>
                <entry key="AutoNetkit.security_level" type="Integer">0</entry>
            </extensions>
        </interface>
    </node>
    <connection dst="/virl:topology/virl:node[3]/virl:interface[1]" src="/virl:topology/virl:node[2]/virl:interface[1]"/>
    <connection dst="/virl:topology/virl:node[5]/virl:interface[1]" src="/virl:topology/virl:node[3]/virl:interface[2]"/>
    <connection dst="/virl:topology/virl:node[5]/virl:interface[2]" src="/virl:topology/virl:node[6]/virl:interface[1]"/>
    <connection dst="/virl:topology/virl:node[4]/virl:interface[1]" src="/virl:topology/virl:node[2]/virl:interface[2]"/>
    <connection dst="/virl:topology/virl:node[1]/virl:interface[1]" src="/virl:topology/virl:node[7]/virl:interface[2]"/>
    <connection dst="/virl:topology/virl:node[3]/virl:interface[3]" src="/virl:topology/virl:node[7]/virl:interface[1]"/>
 </topology>