Skip to content
Log in Sign up My account

Sim 10: SPAN, ERSPAN, Syslog and SNMPv3

Blueprint 4.1, 4.3 · Difficulty: Medium · Time target: 20 minutes

The security team needs packet copies from the user LAN, both on a local analyzer at the access switch and on a remote analyzer at the data center. The operations team needs R1 to send syslog and SNMPv3 traps to the management station.

Download the lab

CML lab file · EVE-NG lab file

8 nodes. The lab boots in its starting configuration. CML: Import a lab, then start it. EVE-NG: import the .unl from the lab list; if your image folder names differ, edit each node's image.

Topology

graph LR
  H1["H1<br/>10.10.10.11"]
  H2["H2<br/>10.10.10.12"]
  AN1["ANALYZER1"]
  SW1["SW1<br/>IOSvL2"]
  R1["R1 C8000v<br/>Lo0 10.255.255.1"]
  R2["R2 C8000v<br/>Lo0 10.255.255.2"]
  AN2["ANALYZER2"]
  NMS["NMS<br/>192.168.100.50"]
  H1 -- "Gi0/1" --- SW1
  H2 -- "Gi0/2" --- SW1
  AN1 -- "Gi0/3" --- SW1
  SW1 -- "Gi0/0 - VLAN 10 10.10.10.0/24 - Gi2 .1" --- R1
  R1 -- "Gi1 .1 - 10.1.2.0/30 - Gi1 .2" --- R2
  R2 -- "Gi3" --- AN2
  R1 -- "Gi3 .1 - 192.168.100.0/24" --- NMS
Node CML image
SW1 IOSvL2
R1, R2 Catalyst 8000v
H1, H2, ANALYZER1, ANALYZER2, NMS Ubuntu or Alpine (the NMS needs snmp tools for testing)

Free account required for the rest

The rest of this page is for members. You're seeing a free sample. A free account unlocks everything: every question bank, the timed exams, the cram sheets, the simulations and the lab files.

Create a free account Log in