CCIE Security: Mock Lab #1

I am so grateful for all of you supporting me, and what better way to give back, than by giving you all a Mock Lab.

First draft of the Topology can be found here and I will work as hard as I can to have the finished topology and workbook/questions ready.

All of it can be build in EVE-NG / GNS3, but even better is it if you have have some physical equipment (for ASA Cluster, and Catalyst Dot1x)


  • Flexvpn HUB-Spoke
  • Site-to-Site IKEv1
  • Clientless SSL VPN
  • AnyConnect VPN
  • PKI
  • Dot1x
  • MAB
  • Securing Routing Protocols (BGP and EIGRP)
  • Firepower/FTD/NGIPS
  • ASA A/S
  • ASA A/A (Requires either physical ASA or ASA8.2 image for GNS3)
  • ASA Cluster (Requires physical ASA)
  • TrustSec
  • WCCP
  • WSA

CCIE Security V5 Mock Lab Topology


Please comment below if you like the Mock Lab or something should be changed.