Lab Guide - CCNSP

Cyberoam Certified Network & Security Courses

Lab Guide CCNSP

Intended Audience Who should read this guide?
The Lab Guide is documentation for trainers/admin to help them setup training lab for an upcoming
CCNSP training. Cyberoam Global Training Team highly recommends that CCNSP lab should be as
per this document so as to facilitate participants with all labs shown in the handbook.
Equipment required for training
Cyberoam appliance model minimum CR25iNG or above running on latest CyberoamOS (Refer
csc.cyberoam.com for the latest version) for the trainer. Please note: 25iNG or above appliance
is required so that the trainer can demonstrate logging & reporting module.
CR 25iNG and above appliance for each participant (in case of hardware)/ Any model of virtual
UTM.
LCD/LED Projector.
Laptop / Desktop for each participant.
All laptop / desktop must have access to Internet via Cyberoam.
Switch to connect Laptop / Desktop / CR.
Enough UTP cables for connectivity.
Internet connectivity with at least two links or can be simulated by connecting two appliances.
Click on the link below that matches your training lab scenario
Training based on Hardware Appliances
o One appliance per participant
o Shared appliance between participants
Training based on Virtual Appliances

Lab Guide - CCNSP

Cyberoam Certified Network & Security Courses

Case: Hardware Appliances (Without Sharing)

Lab Setup Diagram

Lab Configurations
With reference to the network diagram, the IP schema of the lab will be as follow:
The Gateway Device will provide Internet connectivity to the participant appliances and will act as a
Firewall.
Gateway LAN IP: 192.168.0.1 Subnet Mask: 255.255.0.0

Student IP Schema:
X= Student Number.
WAN IP: 192.168.x.1 Subnet Mask: 255.255.0.0
LAN IP: 172.16.x.1 Subnet Mask: 255.255.255.0
DMZ IP: 10.10.x.1 Subnet Mask: 255.255.255.0

Lab Guide - CCNSP

Cyberoam Certified Network & Security Courses

Case: Hardware Appliances (Sharing)

Lab Setup Diagram

Lab Configurations
With reference to the network diagram, the IP schema of the lab will be as follow:
The Gateway Device will provide Internet connectivity to the participant appliances and will act as a
Firewall.
Gateway LAN IP: 192.168.0.1 Subnet Mask: 255.255.0.0

Student IP Schema:
X= Student Number 1, Y=Student Number 2 (Assume X & Y are sharing same appliance)
For Student X:
WAN IP: 192.168.x.1 Subnet Mask: 255.255.0.0
LAN IP: 172.16.x.1 Subnet Mask: 255.255.255.0
DMZ IP: 10.10.x.1 Subnet Mask: 255.255.255.0
Student Y:
WAN IP: 192.168.x.1 Subnet Mask: 255.255.0.0
LAN IP: 172.16.y.1 Subnet Mask: 255.255.255.0
DMZ IP: 10.10.x.1 Subnet Mask: 255.255.255.0
Please note: Labs like Deployment modes, factory reset, firmware restore, upgrade, etc. will be group
activity per each appliance.
Trainer will have to guide participants on how to create multiple LAN zones on the shared appliance.

Lab Guide - CCNSP

Cyberoam Certified Network & Security Courses

Case: Virtual Appliances

Trainer may have Physical/Virtual Appliance with the same configuration as shown below, but the
participant appliances will be virtual.
Lab Setup Diagram

Pre-requisites
In the Virutal Machine Properties, keep the participant appliance WAN Port bridged with the physical
NIC. Also, Replicate Physical Network connection state option should be checked. This way the
participant appliance will get the WAN IP address which is leased from the upstream trainer appliance.

Lab Guide - CCNSP

Cyberoam Certified Network & Security Courses

It is observed that the above setup works well with Physical NICs and hence Cyberoam Global
Training Team recommends using the participants physical NIC connection in place of Wireless NIC.
Minimum Hardware requirement to run VMware player/Workstation should be met along with the
following. Please note: VMware workstation/Player must be installed on the participants machine prior
to the training.
One vCPU
1 GB vRAM
3 vNIC
1 Serial Port
1 USB Port
Atleast 5 GB of free disk space
DHCP server scopes should be turned off on all the appliances, i.e. on the trainer appliance LAN port
should be in the IP schema as defined by the diagram. Participant appliances should be assigned
Static IP on WAN port. Similarly, participant appliances LAN port should not be a DHCP server.
How to get Virtual Appliances
To procure virtual appliances for your upcoming training, a trainer is required to email the Cyberoam
Global Training Team a minimum of 2 weeks prior to the training date. It is also the responsibility of
trainer to ensure that the minimum hardware requirements for running virtual appliances is met with.
Lab Configurations
With reference to the network diagram, the IP schema of the lab will be as follow:
The Gateway Device will provide Internet connectivity to the participant appliances and will act as a
Firewall.
Gateway LAN IP: 192.168.0.1 Subnet Mask: 255.255.0.0

Lab Guide - CCNSP

Cyberoam Certified Network & Security Courses

Student IP Schema:
X= Student Number.
WAN IP: 192.168.x.1 Subnet Mask: 255.255.0.0
LAN IP: 172.16.x.1 Subnet Mask: 255.255.255.0
DMZ IP: 10.10.x.1 Subnet Mask: 255.255.255.0