You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
447 lines
12 KiB
447 lines
12 KiB
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
|
|
<topology xmlns="http://www.cisco.com/VIRL" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" schemaVersion="0.9" xsi:schemaLocation="http://www.cisco.com/VIRL https://raw.github.com/CiscoVIRL/schema/v0.9/virl.xsd">
|
|
<extensions>
|
|
<entry key="management_network" type="String">exclusive</entry>
|
|
</extensions>
|
|
<node name="flat-1" type="ASSET" subtype="FLAT" location="149,274">
|
|
<interface id="0" name="link0"/>
|
|
</node>
|
|
<node name="asav-1" type="SIMPLE" subtype="ASAv" location="329,284">
|
|
<extensions>
|
|
<entry key="config" type="string">! ASAv Config generated on 2015-08-28 10:43
|
|
! by autonetkit_0.18.1
|
|
!
|
|
hostname asav-1
|
|
username cisco password cisco privilege 15
|
|
enable password cisco
|
|
passwd cisco
|
|
names
|
|
!
|
|
interface Loopback100
|
|
description loopback
|
|
no ip address
|
|
interface GigabitEthernet0/0
|
|
description to flat-1
|
|
duplex full
|
|
nameif outside
|
|
security-level 0
|
|
no shutdown
|
|
no ip address
|
|
interface GigabitEthernet0/1
|
|
description to nx-osv-1
|
|
duplex full
|
|
nameif inside
|
|
security-level 100
|
|
no shutdown
|
|
ip address 10.0.128.1 255.255.255.252
|
|
interface Management0/0
|
|
description OOB Management
|
|
duplex full
|
|
management-only
|
|
nameif mgmt
|
|
security-level 100
|
|
no shutdown
|
|
! Configured on launch
|
|
no ip address
|
|
!
|
|
same-security-traffic permit inter-interface
|
|
logging enable
|
|
logging asdm informational
|
|
user-identity default-domain LOCAL
|
|
aaa authentication ssh console LOCAL
|
|
http server enable
|
|
http 0.0.0.0 0.0.0.0 inside
|
|
ssh 0.0.0.0 0.0.0.0 inside
|
|
telnet 0.0.0.0 0.0.0.0 inside
|
|
http 0.0.0.0 0.0.0.0 mgmt
|
|
ssh 0.0.0.0 0.0.0.0 mgmt
|
|
telnet 0.0.0.0 0.0.0.0 mgmt
|
|
http 0.0.0.0 0.0.0.0 outside
|
|
ssh 0.0.0.0 0.0.0.0 outside
|
|
telnet 0.0.0.0 0.0.0.0 outside
|
|
telnet timeout 15
|
|
console timeout 0
|
|
username cisco password cisco privilege 15
|
|
!
|
|
class-map inspection_default
|
|
match default-inspection-traffic
|
|
!
|
|
!
|
|
policy-map type inspect dns preset_dns_map
|
|
parameters
|
|
message-length maximum client auto
|
|
message-length maximum 512
|
|
policy-map global_policy
|
|
class inspection_default
|
|
inspect ip-options
|
|
inspect netbios
|
|
inspect rtsp
|
|
inspect sunrpc
|
|
inspect tftp
|
|
inspect xdmcp
|
|
inspect dns preset_dns_map
|
|
inspect ftp
|
|
inspect h323 h225
|
|
inspect h323 ras
|
|
inspect rsh
|
|
inspect esmtp
|
|
inspect sqlnet
|
|
inspect sip
|
|
inspect skinny
|
|
inspect icmp
|
|
inspect http
|
|
!
|
|
service-policy global_policy global
|
|
no call-home reporting anonymous
|
|
call-home
|
|
profile CiscoTAC-1
|
|
no active
|
|
end
|
|
</entry>
|
|
<entry key="AutoNetkit.mgmt_ip" type="string"></entry>
|
|
</extensions>
|
|
<interface id="0" name="GigabitEthernet0/0"/>
|
|
<interface id="1" name="GigabitEthernet0/1" ipv4="10.0.128.1" netPrefixLenV4="30">
|
|
<extensions>
|
|
<entry key="AutoNetkit.security_level" type="Integer">100</entry>
|
|
</extensions>
|
|
</interface>
|
|
</node>
|
|
<node name="nx-osv-1" type="SIMPLE" subtype="NX-OSv" location="499,288" ipv4="192.168.0.3">
|
|
<extensions>
|
|
<entry key="config" type="string">! NX-OSv Config generated on 2015-08-28 10:43
|
|
! by autonetkit_0.18.1
|
|
!
|
|
version 6.2(1)
|
|
license grace-period
|
|
!
|
|
hostname nx-osv-1
|
|
vdc nx-osv-1 id 1
|
|
allocate interface Ethernet2/1-48
|
|
allocate interface Ethernet3/1-48
|
|
limit-resource vlan minimum 16 maximum 4094
|
|
limit-resource vrf minimum 2 maximum 4096
|
|
limit-resource port-channel minimum 0 maximum 768
|
|
limit-resource u4route-mem minimum 96 maximum 96
|
|
limit-resource u6route-mem minimum 24 maximum 24
|
|
limit-resource m4route-mem minimum 58 maximum 58
|
|
limit-resource m6route-mem minimum 8 maximum 8
|
|
|
|
feature telnet
|
|
|
|
feature ospf
|
|
|
|
username adminbackup password 5 ! role network-operator
|
|
username admin password 5 $1$KuOSBsvW$Cy0TSD..gEBGBPjzpDgf51 role network-admin
|
|
username cisco password 5 $1$Nk7ZkwH0$fyiRmMMfIheqE3BqvcL0C1 role network-operator
|
|
username cisco role network-admin
|
|
username lab password 5 $1$buoy/oqy$.EXQz8rCn72ii8qtdldj00 role network-admin
|
|
no password strength-check
|
|
ip domain-lookup
|
|
copp profile strict
|
|
snmp-server user lab network-admin auth md5 0x5ceb414591539ee35159fca86fdfa101 priv 0x5ceb414591539ee35159fca86fdfa101 localizedkey
|
|
snmp-server user admin network-admin auth md5 0x328945d53e05e8e7207f8c20b142f0b7 priv 0x328945d53e05e8e7207f8c20b142f0b7 localizedkey
|
|
snmp-server user cisco network-operator auth md5 0x55b3c64a53fb95518e75358ee75e82e9 priv 0x55b3c64a53fb95518e75358ee75e82e9 localizedkey
|
|
snmp-server user cisco network-admin
|
|
rmon event 1 log trap public description FATAL(1) owner PMON@FATAL
|
|
rmon event 2 log trap public description CRITICAL(2) owner PMON@CRITICAL
|
|
rmon event 3 log trap public description ERROR(3) owner PMON@ERROR
|
|
rmon event 4 log trap public description WARNING(4) owner PMON@WARNING
|
|
rmon event 5 log trap public description INFORMATION(5) owner PMON@INFO
|
|
|
|
|
|
vlan 1
|
|
|
|
vrf context management
|
|
hardware forwarding unicast trace
|
|
|
|
interface Loopback0
|
|
description Loopback
|
|
ip address 192.168.0.3/32
|
|
ip router ospf 1 area 0
|
|
|
|
interface Ethernet2/1
|
|
description to asav-1
|
|
ip address 10.0.128.2/30
|
|
ip router ospf 1 area 0
|
|
duplex full
|
|
no mac-address
|
|
no shutdown
|
|
|
|
interface Ethernet2/2
|
|
description to iosvl2-1
|
|
ip address 10.0.0.1/17
|
|
ip router ospf 1 area 0
|
|
duplex full
|
|
no mac-address
|
|
no shutdown
|
|
|
|
interface mgmt0
|
|
description OOB Management
|
|
! Configured on launch
|
|
no ip address
|
|
duplex full
|
|
no mac-address
|
|
no shutdown
|
|
vrf member management
|
|
|
|
|
|
line console
|
|
line vty
|
|
router ospf 1
|
|
router-id 192.168.0.3
|
|
</entry>
|
|
<entry key="AutoNetkit.mgmt_ip" type="string"></entry>
|
|
</extensions>
|
|
<interface id="0" name="Ethernet2/1" ipv4="10.0.128.2" netPrefixLenV4="30"/>
|
|
<interface id="1" name="Ethernet2/2" ipv4="10.0.0.1" netPrefixLenV4="17"/>
|
|
</node>
|
|
<node name="iosvl2-1" type="SIMPLE" subtype="IOSvL2" location="629,291">
|
|
<extensions>
|
|
<entry key="config" type="string">! IOSvL2 Config generated on 2015-08-28 10:43
|
|
! by autonetkit_0.18.1
|
|
!
|
|
version 15.2
|
|
service timestamps debug datetime msec
|
|
service timestamps log datetime msec
|
|
no service password-encryption
|
|
service compress-config
|
|
no service config
|
|
enable password cisco
|
|
ip classless
|
|
ip subnet-zero
|
|
no ip domain lookup
|
|
!
|
|
line vty 0 4
|
|
transport input ssh telnet
|
|
exec-timeout 720 0
|
|
password cisco
|
|
login
|
|
!
|
|
line con 0
|
|
password cisco
|
|
!
|
|
hostname iosvl2-1
|
|
!
|
|
boot-start-marker
|
|
boot-end-marker
|
|
!
|
|
!
|
|
!
|
|
no aaa new-model
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
ip cef
|
|
no ipv6 cef
|
|
!
|
|
!
|
|
spanning-tree mode pvst
|
|
spanning-tree extend system-id
|
|
!
|
|
vlan internal allocation policy ascending
|
|
!
|
|
!
|
|
!
|
|
!
|
|
vrf definition Mgmt-intf
|
|
!
|
|
address-family ipv4
|
|
exit-address-family
|
|
!
|
|
address-family ipv6
|
|
exit-address-family
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
interface Loopback0
|
|
description Loopback
|
|
!
|
|
interface GigabitEthernet0/0
|
|
description Mapped to Vlan1 for management
|
|
! Configured on launch
|
|
switchport mode access
|
|
no shutdown
|
|
!
|
|
interface GigabitEthernet0/1
|
|
description to nx-osv-1
|
|
switchport access vlan 2
|
|
switchport mode access
|
|
no shutdown
|
|
!
|
|
interface GigabitEthernet0/2
|
|
description to server-1
|
|
switchport access vlan 2
|
|
switchport mode access
|
|
no shutdown
|
|
!
|
|
interface GigabitEthernet0/3
|
|
description to server-2
|
|
switchport access vlan 2
|
|
switchport mode access
|
|
no shutdown
|
|
!
|
|
interface Vlan1
|
|
description OOB Management
|
|
! Configured on launch
|
|
vrf forwarding Mgmt-intf
|
|
no ip address
|
|
!
|
|
!
|
|
ip forward-protocol nd
|
|
!
|
|
no ip http server
|
|
no ip http secure-server
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
!
|
|
control-plane
|
|
!
|
|
!
|
|
!
|
|
end
|
|
</entry>
|
|
<entry key="AutoNetkit.mgmt_ip" type="string"></entry>
|
|
</extensions>
|
|
<interface id="0" name="GigabitEthernet0/1"/>
|
|
<interface id="1" name="GigabitEthernet0/2"/>
|
|
<interface id="2" name="GigabitEthernet0/3"/>
|
|
</node>
|
|
<node name="server-1" type="SIMPLE" subtype="server" location="769,197">
|
|
<extensions>
|
|
<entry key="config" type="string">#cloud-config
|
|
bootcmd:
|
|
- ln -s -t /etc/rc.d /etc/rc.local
|
|
hostname: server-1
|
|
manage_etc_hosts: true
|
|
runcmd:
|
|
- start ttyS0
|
|
- systemctl start getty@ttyS0.service
|
|
- systemctl start rc-local
|
|
- sed -i '/^\s*PasswordAuthentication\s\+no/d' /etc/ssh/sshd_config
|
|
- echo "UseDNS no" >> /etc/ssh/sshd_config
|
|
- service ssh restart
|
|
- service sshd restart
|
|
users:
|
|
- default
|
|
- gecos: User configured by VIRL Configuration Engine 0.18.9
|
|
lock-passwd: false
|
|
name: cisco
|
|
plain-text-passwd: cisco
|
|
shell: /bin/bash
|
|
ssh-authorized-keys:
|
|
- VIRL-USER-SSH-PUBLIC-KEY
|
|
sudo: ALL=(ALL) ALL
|
|
write_files:
|
|
- path: /etc/init/ttyS0.conf
|
|
owner: root:root
|
|
content: |
|
|
# ttyS0 - getty
|
|
# This service maintains a getty on ttyS0 from the point the system is
|
|
# started until it is shut down again.
|
|
start on stopped rc or RUNLEVEL=[12345]
|
|
stop on runlevel [!12345]
|
|
respawn
|
|
exec /sbin/getty -L 115200 ttyS0 vt102
|
|
permissions: '0644'
|
|
- path: /etc/systemd/system/dhclient@.service
|
|
content: |
|
|
[Unit]
|
|
Description=Run dhclient on %i interface
|
|
After=network.target
|
|
[Service]
|
|
Type=oneshot
|
|
ExecStart=/sbin/dhclient %i -pf /var/run/dhclient.%i.pid -lf /var/lib/dhclient/dhclient.%i.lease
|
|
RemainAfterExit=yes
|
|
owner: root:root
|
|
permissions: '0644'
|
|
- path: /etc/rc.local
|
|
owner: root:root
|
|
permissions: '0755'
|
|
content: |-
|
|
#!/bin/sh -e
|
|
ifconfig eth1 up 10.0.0.2 netmask 255.255.128.0
|
|
route add -net 10.0.0.0/16 gw 10.0.0.1 dev eth1
|
|
route add -net 192.168.0.0/29 gw 10.0.0.1 dev eth1
|
|
exit 0
|
|
</entry>
|
|
</extensions>
|
|
<interface id="0" name="eth1" ipv4="10.0.0.2" netPrefixLenV4="17"/>
|
|
</node>
|
|
<node name="server-2" type="SIMPLE" subtype="server" location="789,358">
|
|
<extensions>
|
|
<entry key="config" type="string">#cloud-config
|
|
bootcmd:
|
|
- ln -s -t /etc/rc.d /etc/rc.local
|
|
hostname: server-2
|
|
manage_etc_hosts: true
|
|
runcmd:
|
|
- start ttyS0
|
|
- systemctl start getty@ttyS0.service
|
|
- systemctl start rc-local
|
|
- sed -i '/^\s*PasswordAuthentication\s\+no/d' /etc/ssh/sshd_config
|
|
- echo "UseDNS no" >> /etc/ssh/sshd_config
|
|
- service ssh restart
|
|
- service sshd restart
|
|
users:
|
|
- default
|
|
- gecos: User configured by VIRL Configuration Engine 0.18.9
|
|
lock-passwd: false
|
|
name: cisco
|
|
plain-text-passwd: cisco
|
|
shell: /bin/bash
|
|
ssh-authorized-keys:
|
|
- VIRL-USER-SSH-PUBLIC-KEY
|
|
sudo: ALL=(ALL) ALL
|
|
write_files:
|
|
- path: /etc/init/ttyS0.conf
|
|
owner: root:root
|
|
content: |
|
|
# ttyS0 - getty
|
|
# This service maintains a getty on ttyS0 from the point the system is
|
|
# started until it is shut down again.
|
|
start on stopped rc or RUNLEVEL=[12345]
|
|
stop on runlevel [!12345]
|
|
respawn
|
|
exec /sbin/getty -L 115200 ttyS0 vt102
|
|
permissions: '0644'
|
|
- path: /etc/systemd/system/dhclient@.service
|
|
content: |
|
|
[Unit]
|
|
Description=Run dhclient on %i interface
|
|
After=network.target
|
|
[Service]
|
|
Type=oneshot
|
|
ExecStart=/sbin/dhclient %i -pf /var/run/dhclient.%i.pid -lf /var/lib/dhclient/dhclient.%i.lease
|
|
RemainAfterExit=yes
|
|
owner: root:root
|
|
permissions: '0644'
|
|
- path: /etc/rc.local
|
|
owner: root:root
|
|
permissions: '0755'
|
|
content: |-
|
|
#!/bin/sh -e
|
|
ifconfig eth1 up 10.0.0.3 netmask 255.255.128.0
|
|
route add -net 10.0.0.0/16 gw 10.0.0.1 dev eth1
|
|
route add -net 192.168.0.0/29 gw 10.0.0.1 dev eth1
|
|
exit 0
|
|
</entry>
|
|
</extensions>
|
|
<interface id="0" name="eth1" ipv4="10.0.0.3" netPrefixLenV4="17"/>
|
|
</node>
|
|
<connection dst="/virl:topology/virl:node[2]/virl:interface[1]" src="/virl:topology/virl:node[1]/virl:interface[1]"/>
|
|
<connection dst="/virl:topology/virl:node[3]/virl:interface[1]" src="/virl:topology/virl:node[2]/virl:interface[2]"/>
|
|
<connection dst="/virl:topology/virl:node[4]/virl:interface[1]" src="/virl:topology/virl:node[3]/virl:interface[2]"/>
|
|
<connection dst="/virl:topology/virl:node[5]/virl:interface[1]" src="/virl:topology/virl:node[4]/virl:interface[2]"/>
|
|
<connection dst="/virl:topology/virl:node[6]/virl:interface[1]" src="/virl:topology/virl:node[4]/virl:interface[3]"/>
|
|
</topology>
|