SVPN-300-730 master topology
svpn-extension-v1
Every IP, hostname, VLAN and interface used in this course's lessons resolves to this blueprint. Modules only ever add to it — a lab built at lesson 3 is still valid at lesson 40.
Rules this topology is built under
Additive only — this file may ADD devices, interfaces and zones. It never renumbers, renames or re-addresses anything defined in scor-master-v1.
Reference rows carry a name and an `inherit:` pointer and nothing else.
Public-facing examples use documentation ranges only (198.51.100.0/24, 203.0.113.0/24, 192.0.2.0/24).
Device inventory
| Device | Role | Image | Interface | Zone | Address | Connected to |
|---|---|---|---|---|---|---|
R-ISP-01 | — | — | — | — | — | — |
R-BRANCH-01 | — | — | — | — | — | — |
SW-BRANCH-01 | — | — | — | — | — | — |
WS-BRANCH-01 | — | — | — | — | — | — |
WS-ADMIN-01 | — | — | — | — | — | — |
FTD-EDGE-01 | — | — | — | — | — | — |
FMC-01 | — | — | — | — | — | — |
ASA-EDGE-01 | — | — | — | — | — | — |
ISE-01 | — | — | — | — | — | — |
SRV-WEB-01 | — | — | — | — | — | — |
WS-INSIDE-01 | — | — | — | — | — | — |
SW-ACCESS-01 | — | — | — | — | — | — |
AD-01 | — | — | — | — | — | — |
R-HUB-01 | HQ VPN head-end (DMVPN hub / NHS, FlexVPN server) | iosv-159-3-m12 | GigabitEthernet0/0 | perimeter | 198.51.100.10/24 | perimeter transit (firewall outside interfaces, R-ISP-01) |
Loopback10 | hq-servers | 10.10.10.254/24 | the HQ prefix the hub protects and advertises | |||
Tunnel0 | dmvpn-overlay | 10.255.10.254/24 | DMVPN mGRE hub interface; NHRP next-hop server | |||
Loopback11 | flexvpn-overlay | 10.255.11.254/32 | FlexVPN virtual-template unnumbered source | |||
R-BRANCH-02 | Second branch router (DMVPN / FlexVPN spoke) | iosv-159-3-m12 | GigabitEthernet0/0 | branch2-wan | 192.0.2.6/30 | R-ISP-01 Gi0/3 |
GigabitEthernet0/1 | branch2 | 10.20.2.1/24 | WS-BRANCH-02 eth0 | |||
Tunnel0 | dmvpn-overlay | 10.255.10.2/24 | DMVPN spoke tunnel | |||
Tunnel11 | flexvpn-overlay | 10.255.11.2/32 | FlexVPN spoke tunnel (address pushed by the hub's local AAA) | |||
WS-BRANCH-02 | Branch 2 workstation (spoke-to-spoke test host) | alpine-base-3-23-3 | eth0 | branch2 | 10.20.2.100/24 | R-BRANCH-02 Gi0/1 |
Addressing
Zones and VLANs. A lesson naming an address that is not here fails the addressing lint.
Source of truth: labs/SVPN/blueprint.yaml · owner Taylor Thomas.
The full build sheet is not rendered on the site yet.
Lessons that run on this topology: SVPN-300-730.