SNCF-300-710 master topology
sncf-extension-v1
Every IP, hostname, VLAN and interface used in this course's lessons resolves to this blueprint. Modules only ever add to it — a lab built at lesson 3 is still valid at lesson 40.
Rules this topology is built under
Additive only — this file may ADD devices, interfaces, subnets and VLANs. It may never renumber, rename or re-address anything defined in scor-master-v1.
No SCOR device definition is duplicated here. Reference rows carry a name and an `inherit:` pointer and nothing else.
SNCF addressing comes only from the bands reserved for SNCF in `addressing_allocation` below. Nothing else in the SCOR plan may be consumed.
Public-facing examples use documentation ranges only (198.51.100.0/24, 203.0.113.0/24, 192.0.2.0/24).
Tenants, licences, images and media a learner must supply are in labs/SNCF/BUILDSHEET.md §REQUIREMENTS, never in this topology.
Device inventory
| Device | Role | Image | Interface | Zone | Address | Connected to |
|---|---|---|---|---|---|---|
FMC-01 | — | — | — | — | — | — |
ISE-01 | — | — | — | — | — | — |
SNA-M-01 | — | — | — | — | — | — |
AD-01 | — | — | — | — | — | — |
WS-ADMIN-01 | — | — | — | — | — | — |
FTD-EDGE-01 | — | — | — | — | — | — |
ASA-EDGE-01 | — | — | — | — | — | — |
ASA-EDGE-02 | — | — | — | — | — | — |
SW-ACCESS-01 | — | — | — | — | — | — |
WLC-01 | — | — | — | — | — | — |
WS-INSIDE-01 | — | — | — | — | — | — |
WS-INSIDE-02 | — | — | — | — | — | — |
WS-WIFI-01 | — | — | — | — | — | — |
WSA-01 | — | — | — | — | — | — |
SRV-WEB-01 | — | — | — | — | — | — |
SRV-MAIL-01 | — | — | — | — | — | — |
SRV-DNS-01 | — | — | — | — | — | — |
ESA-01 | — | — | — | — | — | — |
R-ISP-01 | — | — | — | — | — | — |
ATK-KALI-01 | — | — | eth0 | internet | 203.0.113.99/25 | — |
SRV-CLOUD-01 | — | — | — | — | — | — |
R-BRANCH-01 | — | — | — | — | — | — |
SW-BRANCH-01 | — | — | — | — | — | — |
WS-BRANCH-01 | — | — | — | — | — | — |
VMANAGE-01 | — | — | — | — | — | — |
VBOND-01 | — | — | — | — | — | — |
VSMART-01 | — | — | — | — | — | — |
FTD-EDGE-02 | Threat Defense secondary unit (standby in the FTD-EDGE-01 HA pair) | ftdv-10-0-0 | Management0/0 | mgmt | 10.82.22.186/24 | SW-ACCESS-01 Gi0/14 |
GigabitEthernet0/0 | perimeter | 198.51.100.4/24 | R-ISP-01 Gi0/0 segment | |||
GigabitEthernet0/1 | inside | 10.10.1.249/24 | SW-ACCESS-01 Gi0/15 | |||
GigabitEthernet0/2 | dmz | 172.16.1.249/24 | DMZ segment | |||
GigabitEthernet0/3 | ips-span | — | SW-ACCESS-01 Gi0/16 | |||
GigabitEthernet0/4 | ips-inline | — | SW-ACCESS-01 Gi0/17 | |||
GigabitEthernet0/5 | ips-inline | — | SW-ACCESS-01 Gi0/18 | |||
GigabitEthernet0/6 | inside | — | SW-ACCESS-01 Gi0/19 | |||
GigabitEthernet0/7 | ftd-failover | 10.255.2.2/29 | FTD-EDGE-01 Gi0/7 | |||
R-ISP-02 | Second upstream ISP router (ECMP second next hop, route-tracking failover target) | iosv-159-3-m12 | GigabitEthernet0/0 | perimeter | 198.51.100.253/24 | perimeter transit (firewall outside interfaces, R-ISP-01) |
GigabitEthernet0/1 | internet | 203.0.113.2/25 | internet segment (ATK-KALI-01, SRV-CLOUD-01, R-ISP-01 Gi0/1) | |||
Loopback0 | sncf-upstream | 192.0.2.130/32 | BGP router-id, OSPF router-id, SLA-monitor target for sncf-static-route-tracking |
Harness devices (used by a single lesson, not part of the persistent build): ASA-HARNESS · R1 · R2 · FTD-HARNESS
Addressing
Zones and VLANs. A lesson naming an address that is not here fails the addressing lint.
Source of truth: labs/SNCF/blueprint.yaml · owner Taylor Thomas.
The full build sheet is not rendered on the site yet.
Lessons that run on this topology: SNCF-300-710.