Metrostate Cyber Defense

Metrostate CCDC 2026

Click any component in the topology to jump straight into the matching ESXi console tab. All links open in a new browser tab.

Direct Access Deck

Plain list of every shortcut in case the topology overlay is blocked by a browser extension.

VyOS Router

Core routing node

  • External: 172.31.21.2/29
  • net1: 172.16.101.1/24
  • net2: 172.16.102.1/24
  • ESXi: 10.100.1.130

Credentials

  • vyos / changeme
Open ESXi Console

Palo Alto

Left-side firewall

  • Outside: 172.16.101.240/24
  • Inside: 172.20.242.254/24
  • Mgmt: 172.20.242.150

Credentials

  • admin / Changeme123
Open ESXi Console

Cisco FTD

Perimeter firewall

  • Outside: 172.16.102.254/24
  • Inside: 172.20.240.254/24
  • Mgmt: 192.168.45.45 (MGMT-FTD)
  • Mgmt: 172.20.240.200
  • VyOS: 172.16.102.33

Credentials

  • admin / Changeme123
Open ESXi Console

Windows 10 External

Use this VM to check external service IPs (DNS, webmail, websites, etc.).

Open ESXi Console

Wkst Ubuntu 24

Desktop testing host

  • LAN: DHCP
  • Public: dynamic

Credentials

  • sysadmin / changeme
Open ESXi Console

Ecom Ubuntu 24

Storefront

  • LAN: 172.20.242.104
  • Public: 172.25.39.11

Credentials

  • sysadmin / changeme
Open ESXi Console

Webmail Fedora 42

Messaging endpoint

  • LAN: 172.20.242.101
  • Public: 172.25.39.39

Credentials

  • sysadmin / changeme
Open ESXi Console

Splunk

Security analytics

  • LAN: 172.20.242.20
  • Public: 172.25.39.9

Credentials

  • root / changemenow
  • sysadmin / changemenow
  • admin / changeme
Open ESXi Console

Windows for Linux subnet 172.20.242

Windows for Linux

Open ESXi Console

Wkst Windows 11

Blue-team workstation

  • LAN: 172.20.240.100
  • Public: 172.25.39.144

Credentials

  • administrator / !Password123
  • UserOne / ChangeMe123
Open ESXi Console

FTP Server 2022

File transfer staging

  • LAN: 172.20.240.104
  • Public: 172.25.39.162

Credentials

  • administrator / !Password123
Open ESXi Console

AD / DNS Server 2019

Identity & name services

  • LAN: 172.20.240.102
  • Public: 172.25.39.155

Credentials

  • administrator / !Password123
Open ESXi Console

Web Server 2019

Public web tier

  • LAN: 172.20.240.101
  • Public: 172.25.39.140

Credentials

  • administrator / !Password123
Open ESXi Console

Resources

Quick shortcuts for shared tooling services.

Nextcloud

Team cloud drive and shared docs.

http://10.100.1.190/index.php/login

Open Resource

Enumeration Windows Files

Browse Windows-based enumeration drops.

http://10.100.1.190:9000/

Open Resource

Enumeration Files

General file drop for Linux/Unix enumeration.

http://10.100.1.190:8080

Open Resource

Templates

Templates for injects and banners configs.

http://10.100.1.189:8881

Open Resource

Infrastructure Topology

VyOS Router Palo Alto Cisco FTD Ecom Ubuntu 24 Webmail Fedora 42 Splunk Wkst Ubuntu 24 AD / DNS Server 2019 Web Server 2019 FTP Server 2022 Wkst Windows 11

Additional Lab Machines

Extra hosts that sit outside the primary training deck but still need fast ESXi access.

Kali Workstation

Off-path tooling box

  • eth0: 172.16.101.17
  • eth2: 10.100.1.189
  • eth3: 172.20.240.201
  • eth4: 172.20.242.222
  • tailscale0: 100.77.92.69
Open ESXi Console

Devya Net2 network

Devya's Ubuntu 24 workstation

Open ESXi Console

Debian-Net1

Net1 Debian host

  • ens192: 172.16.101.18
  • docker0: 172.17.0.1
  • br-b234e32b4e18: 172.18.0.1
  • bb8: 192.168.3.27
Open ESXi Console

Kali on Palo Network

For testing connectivity and nmap scans

  • LAN: 172.20.242.69

Credentials

  • metro / metro
Open ESXi Console

Kali on Cisco Network 240

For testing connectivity and nmap scans

  • LAN: 172.20.240.89

Credentials

  • metro / metro
Open ESXi Console