Global Financial Data Center & Multi-Region Cloud Backbone

Simulasi Skenario Architect Level (45 Perangkat / 240 Menit) - Spine-Leaf, VXLAN EVPN, SD-WAN & Zero Trust

Nilai Praktikum
0 / 100
Topologi Data Center & Cloud Interconnect (Klik Perangkat untuk Konfigurasi)
Global Cloud WAN
AS 65000
!
Edge ASA-1 (Active)
198.51.100.1
!
Edge ASA-2 (Standby)
198.51.100.2
!
Core Router HQ-1
10.0.0.1
!
Core Router HQ-2
10.0.0.2
!
SD-WAN Branch Controller
10.254.0.1
!
Spine SW-1
10.100.0.1
!
Spine SW-2
10.100.0.2
!
Spine SW-3
10.100.0.3
!
Spine SW-4
10.100.0.4
!
Leaf-1 (Web)
VNI 10001
!
Leaf-2 (DB)
VNI 10002
!
Leaf-3 (VoIP)
VLAN 150
!
Leaf-4 (POS)
VLAN 200
!
Leaf-5 (WiFi/802.1x)
Dot1x / WLC
!
Leaf-6 (DMZ/WAF)
WAF Inline
!
Leaf-7 (HFT Trading)
< 10ms Latency
!
Leaf-8 (Storage)
MTU 9000
Web Cluster (2 Node)
DB Cluster (2 Node)
CME VoIP Phone (2001-2010)
Branch POS Terminal
WLC & RADIUS Server
WAF Web Banking DMZ
HFT Trading Workstation
iSCSI NAS Storage
5 Modul Skenario Interaktif (Total 100 Point)
1. High-Speed Spine-Leaf Architecture & VXLAN EVPN
25 Point
Full Spine-Leaf Mesh (tanpa link inter-spine/leaf). BGP/OSPF underlay & Overlay VXLAN EVPN VNI 10001-10002 aktif.
2. Multi-Region SD-WAN & Dynamic Path (PfR)
20 Point
SD-WAN Overlay Tunneling ter-enkripsi. PfR: HFT Trading via Leased Line (<10ms), Backup/CCTV via Internet.
3. Zero-Trust Security, WAF & Micro-Segmentation
25 Point
Micro-segmentation: Isolasi DB (Leaf-2) hanya dari Web (Leaf-1). WAF filter SQLi/XSS aktif. RADIUS Dot1x aktif di HQ.
4. Enterprise Unified CME VoIP & Storage Cluster
15 Point
Cisco CME registrasi IP Phone 2001-2010 di Voice VLAN 150 (QoS CoS=5). Storage NAS Leaf-8 aktif MTU 9000 (Jumbo Frames).
5. Disaster Recovery Failover & Anti-DDoS Mitigation
15 Point
Simulasi Stateful Failover ASA/Spine-1 (<5 detik) serta pencegahan banjir SYN/ICMP menggunakan uRPF & Storm Control.
Terminal Diagnostic & Audit Log
DC-CORE-CONSOLE#