SISE-300-715 master topology
sise-extension-v1
Every IP, hostname, VLAN and interface used in this course's lessons resolves to this blueprint. Modules only ever add to it — a lab built at lesson 3 is still valid at lesson 40.
Rules this topology is built under
Additive only, with two named exceptions in `platform_overrides` — image bumps on SW-ACCESS-01 and WLC-01 that keep both names and both management addresses.
No SCOR device definition is duplicated here. Reference rows carry a name and an `inherit:` pointer and nothing else.
SISE addressing comes only from the bands reserved for SISE in `addressing_allocation`. Nothing else in the SCOR plan may be consumed.
Tenants, licences, images, certificates and client media a learner must supply are in labs/SISE/BUILDSHEET.md §REQUIREMENTS, never in this topology.
Device inventory
| Device | Role | Image | Interface | Zone | Address | Connected to |
|---|---|---|---|---|---|---|
FMC-01 | — | — | — | — | — | — |
ISE-01 | — | — | — | — | — | — |
SNA-M-01 | — | — | — | — | — | — |
AD-01 | — | — | — | — | — | — |
WS-ADMIN-01 | — | — | — | — | — | — |
FTD-EDGE-01 | — | — | — | — | — | — |
ASA-EDGE-01 | — | — | — | — | — | — |
ASA-EDGE-02 | — | — | — | — | — | — |
SW-ACCESS-01 | — | — | — | — | — | — |
WLC-01 | — | — | — | — | — | — |
AP-01 | — | — | — | — | — | — |
WS-INSIDE-01 | — | — | — | — | — | — |
WS-INSIDE-02 | — | — | — | — | — | — |
WS-WIFI-01 | — | — | — | — | — | — |
WSA-01 | — | — | — | — | — | — |
SRV-WEB-01 | — | — | — | — | — | — |
SRV-MAIL-01 | — | — | — | — | — | — |
SRV-DNS-01 | — | — | — | — | — | — |
ESA-01 | — | — | — | — | — | — |
R-ISP-01 | — | — | — | — | — | — |
ATK-KALI-01 | — | — | — | — | — | — |
SRV-CLOUD-01 | — | — | — | — | — | — |
R-BRANCH-01 | — | — | — | — | — | — |
SW-BRANCH-01 | — | — | — | — | — | — |
WS-BRANCH-01 | — | — | — | — | — | — |
VMANAGE-01 | — | — | — | — | — | — |
VBOND-01 | — | — | — | — | — | — |
VSMART-01 | — | — | — | — | — | — |
ISE-02 | Identity Services Engine — Secondary PAN + Secondary MnT | ise-3.5-p3 | eth0 | mgmt | 10.82.22.165/24 | SW-ACCESS-01 Gi0/22 |
ISE-03 | Identity Services Engine — dedicated Policy Service Node + pxGrid controller | ise-3.5-p3 | eth0 | mgmt | 10.82.22.167/24 | SW-ACCESS-01 Gi0/23 |
SRV-LDAP-01 | Non-AD LDAP directory (OpenLDAP) — external identity store | ubuntu-24-04-20260307 | eth0 | mgmt | 10.82.22.197/24 | SW-ACCESS-01 Gi0/24 |
VOIP-PHONE-01 | Voice-VLAN endpoint (SIP softphone with CDP/LLDP-MED voice advertisement) | ubuntu-22.04-voice | eth0 | voice | 10.10.220.10/24 | SW-ACCESS-01 Gi0/25 |
Harness devices (used by a single lesson, not part of the persistent build): ASA-HARNESS · R1 · R2
Addressing
Zones and VLANs. A lesson naming an address that is not here fails the addressing lint.
Source of truth: labs/SISE/blueprint.yaml · owner Taylor Thomas.
The full build sheet is not rendered on the site yet.
Lessons that run on this topology: SISE-300-715.