From 72d4fa671990fa2ee89d84ddbbab65c68bfc079f Mon Sep 17 00:00:00 2001 From: santosomar Date: Sat, 2 Jun 2018 01:19:42 -0400 Subject: [PATCH] adding VIRL topology --- .../new_topo/art_of_hacking_1.virl | 796 ++++++++++++++++++ 1 file changed, 796 insertions(+) create mode 100644 virl_topologies/new_topo/art_of_hacking_1.virl diff --git a/virl_topologies/new_topo/art_of_hacking_1.virl b/virl_topologies/new_topo/art_of_hacking_1.virl new file mode 100644 index 0000000..06aad18 --- /dev/null +++ b/virl_topologies/new_topo/art_of_hacking_1.virl @@ -0,0 +1,796 @@ + + + + + ! IOS Config generated on 2018-06-02 05:15 +! by autonetkit_0.24.0 +! +hostname iosv-1 +boot-start-marker +boot-end-marker +! +vrf definition Mgmt-intf +! + address-family ipv4 + exit-address-family + ! + address-family ipv6 + exit-address-family +! +! +! +no aaa new-model +! +! +ip cef +ipv6 unicast-routing +ipv6 cef +! +! +service timestamps debug datetime msec +service timestamps log datetime msec +no service password-encryption +no service config +enable password cisco +ip classless +ip subnet-zero +no ip domain lookup +ip domain name virl.info +crypto key generate rsa modulus 768 +ip ssh server algorithm authentication password +username cisco privilege 15 secret cisco +line vty 0 4 + transport input ssh telnet + exec-timeout 720 0 + password cisco + login local +line con 0 + password cisco +! +no cdp run +! +! +interface Loopback0 + description Loopback + ip address 192.168.0.3 255.255.255.255 +! +interface GigabitEthernet0/0 + description OOB Management + vrf forwarding Mgmt-intf + ! Configured on launch + no ip address + duplex full + speed auto + no shutdown +! +interface GigabitEthernet0/1 + description to server-1 + ip address 10.0.0.5 255.255.255.252 + ip ospf cost 1 + duplex full + speed auto + no shutdown +! +interface GigabitEthernet0/2 + description to iosv-4 + ip address 10.0.0.17 255.255.255.252 + ip ospf cost 1 + duplex full + speed auto + no shutdown +! +! +! +router ospf 1 + network 192.168.0.3 0.0.0.0 area 0 + log-adjacency-changes + passive-interface Loopback0 + network 10.0.0.4 0.0.0.3 area 0 + network 10.0.0.16 0.0.0.3 area 0 +! +! +router bgp 1 + bgp router-id 192.168.0.3 + no synchronization +! ibgp + ! ibgp peers + ! + neighbor 192.168.0.4 remote-as 1 + neighbor 192.168.0.4 description iBGP peer iosv-2 + neighbor 192.168.0.4 update-source Loopback0 + ! + neighbor 192.168.0.7 remote-as 1 + neighbor 192.168.0.7 description iBGP peer iosv-3 + neighbor 192.168.0.7 update-source Loopback0 + ! + neighbor 192.168.0.8 remote-as 1 + neighbor 192.168.0.8 description iBGP peer iosv-4 + neighbor 192.168.0.8 update-source Loopback0 +! +! + ! + address-family ipv4 + network 192.168.0.3 mask 255.255.255.255 + neighbor 192.168.0.4 activate + neighbor 192.168.0.7 activate + neighbor 192.168.0.8 activate + exit-address-family +! +! +! +end + + + + + + + + ! IOS Config generated on 2018-06-02 05:15 +! by autonetkit_0.24.0 +! +hostname iosv-2 +boot-start-marker +boot-end-marker +! +vrf definition Mgmt-intf +! + address-family ipv4 + exit-address-family + ! + address-family ipv6 + exit-address-family +! +! +! +no aaa new-model +! +! +ip cef +ipv6 unicast-routing +ipv6 cef +! +! +service timestamps debug datetime msec +service timestamps log datetime msec +no service password-encryption +no service config +enable password cisco +ip classless +ip subnet-zero +no ip domain lookup +ip domain name virl.info +crypto key generate rsa modulus 768 +ip ssh server algorithm authentication password +username cisco privilege 15 secret cisco +line vty 0 4 + transport input ssh telnet + exec-timeout 720 0 + password cisco + login local +line con 0 + password cisco +! +no cdp run +! +! +interface Loopback0 + description Loopback + ip address 192.168.0.4 255.255.255.255 +! +interface GigabitEthernet0/0 + description OOB Management + vrf forwarding Mgmt-intf + ! Configured on launch + no ip address + duplex full + speed auto + no shutdown +! +interface GigabitEthernet0/1 + description to server-2 + ip address 10.0.0.21 255.255.255.252 + ip ospf cost 1 + duplex full + speed auto + no shutdown +! +interface GigabitEthernet0/2 + description to iosv-4 + ip address 10.0.0.25 255.255.255.252 + ip ospf cost 1 + duplex full + speed auto + no shutdown +! +! +! +router ospf 1 + network 192.168.0.4 0.0.0.0 area 0 + log-adjacency-changes + passive-interface Loopback0 + network 10.0.0.20 0.0.0.3 area 0 + network 10.0.0.24 0.0.0.3 area 0 +! +! +router bgp 1 + bgp router-id 192.168.0.4 + no synchronization +! ibgp + ! ibgp peers + ! + neighbor 192.168.0.3 remote-as 1 + neighbor 192.168.0.3 description iBGP peer iosv-1 + neighbor 192.168.0.3 update-source Loopback0 + ! + neighbor 192.168.0.7 remote-as 1 + neighbor 192.168.0.7 description iBGP peer iosv-3 + neighbor 192.168.0.7 update-source Loopback0 + ! + neighbor 192.168.0.8 remote-as 1 + neighbor 192.168.0.8 description iBGP peer iosv-4 + neighbor 192.168.0.8 update-source Loopback0 +! +! + ! + address-family ipv4 + network 192.168.0.4 mask 255.255.255.255 + neighbor 192.168.0.3 activate + neighbor 192.168.0.7 activate + neighbor 192.168.0.8 activate + exit-address-family +! +! +! +end + + + + + + + + ! IOS Config generated on 2018-06-02 05:15 +! by autonetkit_0.24.0 +! +hostname iosv-3 +boot-start-marker +boot-end-marker +! +vrf definition Mgmt-intf +! + address-family ipv4 + exit-address-family + ! + address-family ipv6 + exit-address-family +! +! +! +no aaa new-model +! +! +ip cef +ipv6 unicast-routing +ipv6 cef +! +! +service timestamps debug datetime msec +service timestamps log datetime msec +no service password-encryption +no service config +enable password cisco +ip classless +ip subnet-zero +no ip domain lookup +ip domain name virl.info +crypto key generate rsa modulus 768 +ip ssh server algorithm authentication password +username cisco privilege 15 secret cisco +line vty 0 4 + transport input ssh telnet + exec-timeout 720 0 + password cisco + login local +line con 0 + password cisco +! +no cdp run +! +! +interface Loopback0 + description Loopback + ip address 192.168.0.7 255.255.255.255 +! +interface GigabitEthernet0/0 + description OOB Management + vrf forwarding Mgmt-intf + ! Configured on launch + no ip address + duplex full + speed auto + no shutdown +! +interface GigabitEthernet0/1 + description to asav-1 + ip address 10.0.0.10 255.255.255.252 + ip ospf cost 1 + duplex full + speed auto + no shutdown +! +interface GigabitEthernet0/2 + description to server-3 + ip address 10.0.0.29 255.255.255.252 + ip ospf cost 1 + duplex full + speed auto + no shutdown +! +! +! +router ospf 1 + network 192.168.0.7 0.0.0.0 area 0 + log-adjacency-changes + passive-interface Loopback0 + network 10.0.0.8 0.0.0.3 area 0 + network 10.0.0.28 0.0.0.3 area 0 +! +! +router bgp 1 + bgp router-id 192.168.0.7 + no synchronization +! ibgp + ! ibgp peers + ! + neighbor 192.168.0.3 remote-as 1 + neighbor 192.168.0.3 description iBGP peer iosv-1 + neighbor 192.168.0.3 update-source Loopback0 + ! + neighbor 192.168.0.4 remote-as 1 + neighbor 192.168.0.4 description iBGP peer iosv-2 + neighbor 192.168.0.4 update-source Loopback0 + ! + neighbor 192.168.0.8 remote-as 1 + neighbor 192.168.0.8 description iBGP peer iosv-4 + neighbor 192.168.0.8 update-source Loopback0 +! +! + ! + address-family ipv4 + network 192.168.0.7 mask 255.255.255.255 + neighbor 192.168.0.3 activate + neighbor 192.168.0.4 activate + neighbor 192.168.0.8 activate + exit-address-family +! +! +! +end + + + + + + + + ! ASAv Config generated on 2018-06-02 05:15 +! by autonetkit_0.24.0 +! +hostname asav-1 +username cisco password cisco privilege 15 +enable password cisco +passwd cisco +names +! +interface GigabitEthernet0/0 + description to iosv-4 + duplex full + nameif outside + security-level 0 + no shutdown + ip address 10.0.0.13 255.255.255.252 +interface GigabitEthernet0/1 + description to iosv-3 + duplex full + nameif outside-1 + security-level 0 + no shutdown + ip address 10.0.0.9 255.255.255.252 +interface Management0/0 + description OOB Management + duplex full + management-only + nameif mgmt + security-level 100 + no shutdown + ! Configured on launch + no ip address +! +same-security-traffic permit inter-interface +logging enable +logging asdm informational +user-identity default-domain LOCAL +aaa authentication ssh console LOCAL +http server enable +http 0.0.0.0 0.0.0.0 mgmt +ssh 0.0.0.0 0.0.0.0 mgmt +telnet 0.0.0.0 0.0.0.0 mgmt +http 0.0.0.0 0.0.0.0 outside +ssh 0.0.0.0 0.0.0.0 outside +telnet 0.0.0.0 0.0.0.0 outside +http 0.0.0.0 0.0.0.0 outside-1 +ssh 0.0.0.0 0.0.0.0 outside-1 +telnet 0.0.0.0 0.0.0.0 outside-1 +ssh version 2 +crypto key generate rsa modulus 768 +telnet timeout 15 +console timeout 0 +username cisco password cisco privilege 15 +! +class-map inspection_default + match default-inspection-traffic +! +! +policy-map type inspect dns preset_dns_map + parameters + message-length maximum client auto + message-length maximum 512 +policy-map global_policy + class inspection_default + inspect ip-options + inspect netbios + inspect rtsp + inspect sunrpc + inspect tftp + inspect xdmcp + inspect dns preset_dns_map + inspect ftp + inspect h323 h225 + inspect h323 ras + inspect rsh + inspect esmtp + inspect sqlnet + inspect sip + inspect skinny + inspect icmp + inspect http +! +service-policy global_policy global +no call-home reporting anonymous +call-home + profile CiscoTAC-1 + no active +end + + + + + + + + + #cloud-config +bootcmd: +- ln -s -t /etc/rc.d /etc/rc.local +hostname: server-1 +manage_etc_hosts: true +runcmd: +- start ttyS0 +- systemctl start getty@ttyS0.service +- systemctl start rc-local +- sed -i '/^\s*PasswordAuthentication\s\+no/d' /etc/ssh/sshd_config +- echo "UseDNS no" >> /etc/ssh/sshd_config +- service ssh restart +- service sshd restart +users: +- default +- gecos: User configured by VIRL Configuration Engine 0.23.10 + lock-passwd: false + name: cisco + plain-text-passwd: cisco + shell: /bin/bash + ssh-authorized-keys: + - VIRL-USER-SSH-PUBLIC-KEY + sudo: ALL=(ALL) ALL +write_files: +- path: /etc/init/ttyS0.conf + owner: root:root + content: | + # ttyS0 - getty + # This service maintains a getty on ttyS0 from the point the system is + # started until it is shut down again. + start on stopped rc or RUNLEVEL=[12345] + stop on runlevel [!12345] + respawn + exec /sbin/getty -L 115200 ttyS0 vt102 + permissions: '0644' +- path: /etc/systemd/system/dhclient@.service + content: | + [Unit] + Description=Run dhclient on %i interface + After=network.target + [Service] + Type=oneshot + ExecStart=/sbin/dhclient %i -pf /var/run/dhclient.%i.pid -lf /var/lib/dhclient/dhclient.%i.lease + RemainAfterExit=yes + owner: root:root + permissions: '0644' +- path: /etc/rc.local + owner: root:root + permissions: '0755' + content: |- + #!/bin/sh + ifconfig eth1 up 10.0.0.6 netmask 255.255.255.252 + route add -net 10.0.0.0/8 gw 10.0.0.5 dev eth1 + route add -net 192.168.0.0/28 gw 10.0.0.5 dev eth1 + exit 0 + + + + + + + #cloud-config +bootcmd: +- ln -s -t /etc/rc.d /etc/rc.local +hostname: server-2 +manage_etc_hosts: true +runcmd: +- start ttyS0 +- systemctl start getty@ttyS0.service +- systemctl start rc-local +- sed -i '/^\s*PasswordAuthentication\s\+no/d' /etc/ssh/sshd_config +- echo "UseDNS no" >> /etc/ssh/sshd_config +- service ssh restart +- service sshd restart +users: +- default +- gecos: User configured by VIRL Configuration Engine 0.23.10 + lock-passwd: false + name: cisco + plain-text-passwd: cisco + shell: /bin/bash + ssh-authorized-keys: + - VIRL-USER-SSH-PUBLIC-KEY + sudo: ALL=(ALL) ALL +write_files: +- path: /etc/init/ttyS0.conf + owner: root:root + content: | + # ttyS0 - getty + # This service maintains a getty on ttyS0 from the point the system is + # started until it is shut down again. + start on stopped rc or RUNLEVEL=[12345] + stop on runlevel [!12345] + respawn + exec /sbin/getty -L 115200 ttyS0 vt102 + permissions: '0644' +- path: /etc/systemd/system/dhclient@.service + content: | + [Unit] + Description=Run dhclient on %i interface + After=network.target + [Service] + Type=oneshot + ExecStart=/sbin/dhclient %i -pf /var/run/dhclient.%i.pid -lf /var/lib/dhclient/dhclient.%i.lease + RemainAfterExit=yes + owner: root:root + permissions: '0644' +- path: /etc/rc.local + owner: root:root + permissions: '0755' + content: |- + #!/bin/sh + ifconfig eth1 up 10.0.0.22 netmask 255.255.255.252 + route add -net 10.0.0.0/8 gw 10.0.0.21 dev eth1 + route add -net 192.168.0.0/28 gw 10.0.0.21 dev eth1 + exit 0 + + + + + + + #cloud-config +bootcmd: +- ln -s -t /etc/rc.d /etc/rc.local +hostname: server-3 +manage_etc_hosts: true +runcmd: +- start ttyS0 +- systemctl start getty@ttyS0.service +- systemctl start rc-local +- sed -i '/^\s*PasswordAuthentication\s\+no/d' /etc/ssh/sshd_config +- echo "UseDNS no" >> /etc/ssh/sshd_config +- service ssh restart +- service sshd restart +users: +- default +- gecos: User configured by VIRL Configuration Engine 0.23.10 + lock-passwd: false + name: cisco + plain-text-passwd: cisco + shell: /bin/bash + ssh-authorized-keys: + - VIRL-USER-SSH-PUBLIC-KEY + sudo: ALL=(ALL) ALL +write_files: +- path: /etc/init/ttyS0.conf + owner: root:root + content: | + # ttyS0 - getty + # This service maintains a getty on ttyS0 from the point the system is + # started until it is shut down again. + start on stopped rc or RUNLEVEL=[12345] + stop on runlevel [!12345] + respawn + exec /sbin/getty -L 115200 ttyS0 vt102 + permissions: '0644' +- path: /etc/systemd/system/dhclient@.service + content: | + [Unit] + Description=Run dhclient on %i interface + After=network.target + [Service] + Type=oneshot + ExecStart=/sbin/dhclient %i -pf /var/run/dhclient.%i.pid -lf /var/lib/dhclient/dhclient.%i.lease + RemainAfterExit=yes + owner: root:root + permissions: '0644' +- path: /etc/rc.local + owner: root:root + permissions: '0755' + content: |- + #!/bin/sh + ifconfig eth1 up 10.0.0.30 netmask 255.255.255.252 + route add -net 10.0.0.0/8 gw 10.0.0.29 dev eth1 + route add -net 192.168.0.0/28 gw 10.0.0.29 dev eth1 + exit 0 + + + + + + + ! IOS Config generated on 2018-06-02 05:15 +! by autonetkit_0.24.0 +! +hostname iosv-4 +boot-start-marker +boot-end-marker +! +vrf definition Mgmt-intf +! + address-family ipv4 + exit-address-family + ! + address-family ipv6 + exit-address-family +! +! +! +no aaa new-model +! +! +ip cef +ipv6 unicast-routing +ipv6 cef +! +! +service timestamps debug datetime msec +service timestamps log datetime msec +no service password-encryption +no service config +enable password cisco +ip classless +ip subnet-zero +no ip domain lookup +ip domain name virl.info +crypto key generate rsa modulus 768 +ip ssh server algorithm authentication password +username cisco privilege 15 secret cisco +line vty 0 4 + transport input ssh telnet + exec-timeout 720 0 + password cisco + login local +line con 0 + password cisco +! +no cdp run +! +! +interface Loopback0 + description Loopback + ip address 192.168.0.8 255.255.255.255 +! +interface GigabitEthernet0/0 + description OOB Management + vrf forwarding Mgmt-intf + ! Configured on launch + no ip address + duplex full + speed auto + no shutdown +! +interface GigabitEthernet0/1 + description to iosv-1 + ip address 10.0.0.18 255.255.255.252 + ip ospf cost 1 + duplex full + speed auto + no shutdown +! +interface GigabitEthernet0/2 + description to iosv-2 + ip address 10.0.0.26 255.255.255.252 + ip ospf cost 1 + duplex full + speed auto + no shutdown +! +interface GigabitEthernet0/3 + description to asav-1 + ip address 10.0.0.14 255.255.255.252 + ip ospf cost 1 + duplex full + speed auto + no shutdown +! +! +! +router ospf 1 + network 192.168.0.8 0.0.0.0 area 0 + log-adjacency-changes + passive-interface Loopback0 + network 10.0.0.16 0.0.0.3 area 0 + network 10.0.0.24 0.0.0.3 area 0 + network 10.0.0.12 0.0.0.3 area 0 +! +! +router bgp 1 + bgp router-id 192.168.0.8 + no synchronization +! ibgp + ! ibgp peers + ! + neighbor 192.168.0.3 remote-as 1 + neighbor 192.168.0.3 description iBGP peer iosv-1 + neighbor 192.168.0.3 update-source Loopback0 + ! + neighbor 192.168.0.4 remote-as 1 + neighbor 192.168.0.4 description iBGP peer iosv-2 + neighbor 192.168.0.4 update-source Loopback0 + ! + neighbor 192.168.0.7 remote-as 1 + neighbor 192.168.0.7 description iBGP peer iosv-3 + neighbor 192.168.0.7 update-source Loopback0 +! +! + ! + address-family ipv4 + network 192.168.0.8 mask 255.255.255.255 + neighbor 192.168.0.3 activate + neighbor 192.168.0.4 activate + neighbor 192.168.0.7 activate + exit-address-family +! +! +! +end + + + + + + + + + + + + + + +