Network and Security Automation Workshop

This repository contains an entire class on creating network automation. It utilizes vSRX and the NetDevOps VM (an Ubuntu development environment). In the course of the lab you will build a multi-node vSRX topology connecting to a single headend.

Course Steps

The course is divided into multiple steps.

Overview

1. Getting a copy of the lab
2. Topology Overview
3. vSRX Topology
4. vSRX Headend Topology
5. Software Overview
6. Installing Software
7. Using Python and PyEZ Library
8. Using Ansible
9. Basic API Review
10. NETCONF Magic

Hands On Lab

1. Configuring NAT
   1. Configuring NAT with NETCONF
   2. Configuring NAT with Ansible
2. Basic Firewall Policies
3. Registering your host
4. VPN connection to headend
5. Enabling Dynamic Routing
6. Creating VPN Firewall Policies
7. Automating Licenses
8. Creating Application Policies
9. Creating IPS Policies
10. Disaster Strikes!
11. Recovering the lab
12. Reviewing the lab

VM Access Information

• VM Host Passwords

Proctor Instructions

• Proctor Instructions
• Classroom Handout

TODO

1. Change topology to be self contained
   • Backend Host - 512MB RAM, 1 vCPU
   • Headend SRX - 2GB RAM, 2 vCPU
   • Student SRX - 3GB RAM, 2 vCPU
   • Student Automation Host - 512MB RAM, 1 vCPU
2. Support VMware Workstation, Fusion, and Virtual Box
   • Add in VMware instructions
3. Remove remote license requirements