Skip to content
Log in Sign up My account

Sim 11: AAA with Local Fallback, CoPP and a VTY ACL

Blueprint 5.1, 5.2 · Difficulty: Hard · Time target: 20 minutes

R1 still uses a shared Telnet password on its VTY lines. Move it to AAA with TACACS+ and a local fallback account, restrict remote management to SSH from the management subnet, and protect the control plane from ICMP floods.

Download the lab

CML lab file · EVE-NG lab file

3 nodes. The lab boots in its starting configuration. CML: Import a lab, then start it. EVE-NG: import the .unl from the lab list; if your image folder names differ, edit each node's image.

Topology

graph LR
  ADM["ADMIN-PC<br/>192.168.100.10"]
  TAC["TACACS+ server<br/>192.168.100.20<br/>may be offline"]
  SWM["Mgmt switch"]
  R1["R1<br/>C8000v"]
  USR["USER-PC<br/>10.10.10.10"]
  ADM --- SWM
  TAC --- SWM
  SWM -- "192.168.100.0/24 - Gi1 .1" --- R1
  R1 -- "Gi2 .1 - 10.10.10.0/24" --- USR
Node CML image
R1 Catalyst 8000v
ADMIN-PC, USER-PC IOSv with no ip routing (it has an SSH client)
Mgmt switch CML unmanaged switch
TACACS+ server Optional. Leave it out to test the local fallback.

Free account required for the rest

The rest of this page is for members. You're seeing a free sample. A free account unlocks everything: every question bank, the timed exams, the cram sheets, the simulations and the lab files.

Create a free account Log in