CCIE Security v6 Practice Lab v1.0
3 | P a g e
Web: https://ccielabcenter.com Mail: care@ccielabcenter.com Study Group: https://t.me/cciestudygroup
Table of Contents Page No
1. Lab Details 4
1.1 Lab Summary 4
1.2 Initial Configuration 10
2. Texas DC Site Deployment 24
2.1 CONFIGURE ASA1 & 2 FOR ACTIVE/STANDBY 24
2.2 Configure Static routing on ASA1 28
2.3 Configure telnet & SSH access on ASA1 from inside 29
2.4 Configure OSPF on ASA1 for MPLS link 30
2.5 Web server 10.10.10.254 should accessible from New Jersey ,Virginia & New York using MPLS Link 31
2.6 telnet-ssh should accessible from Virginia & New York using MPLS Link 34
3. Deployment of California 35
3.1 Configuring ASA3 interfaces with below configuration 35
3.2 Configuring ASA3 with Static routes 10.10.30.0/24 & 10.10.40.0/24—Next hop is 172.16.20.2 36
Default routes—Next hop is 192.168.200.1
3.3 Configuring ASA3 for SNMP with inside host 10.10.40.254 37
3.4 Configuring ASA3 for logging with inside host 10.10.40.254 37
3.5 Configuring Banner for ASA3 with below message 38
3.6 Configuring Static NAT for Web(HTTP,HTTPS) & FTP-RDP. 38
3.7 Configuring Internet access on 10.10.30.0/24 & 10.10.40.0/24 Network 44
4. Deployment of Virginia & New 45
4.1 Configuring Internet access for 10.20.20.0/24 on R2 45
4.2 Configuring Internet access for 10.30.10.0/24 on R3 router 47
4.3 Configuring single Gateway IPSec VPN between R2 & R3 with internet access 49
4.4 Configuring Dual Gateway IPSec VPN between R2 & R3 with internet access 54
5. Deployment of Virginia & New York 63
5.1 Configuring IPSec VPN between ASA4 & 5 63
VIP享7折，此内容立减5.97元 
