0 ISCW Preview

ISCWImplementing Secure Cisco WANs

Preview

CIS 186 ISCW

Rick Graziani

Fall 2007

Rick Graziani [email protected] 2

My Web Site


On-line curriculum


Labs and NetLab


ISCW Exam Certification Guide


Review Questions: On-line curriculum and ISCW Exam Cert Book


Description and Chapters

This course will teach advanced skills required to secure and enhance services in enterprise networks for teleworkers and remote sites.

It will focus on securing remote access, VPN client configuration and other topics including Mulit-Protocol Label Switching (MPLS), IPsec, Cisco device hardening, IOS firewall features, and IOS threat defense features.

1. Remote Network Connectivity Requirements2. Teleworker Connectivity (Simulation)3. IPsec VPNs (Labs)4. Frame Mode MPLS Implmentation (One lab)5. Cisco Device Hardening (Labs)6. Cisco IOS Threat Defense Features (Labs)


Chapter 1 Remote Network Connectivity Requirements

• Enterprise Networking

• Hierarchical Model

• Cisco Enterprise Architecture

• Remote Connection Requirements in a Converged Network

• Remote Connection Considerations

• Intelligent Information Network

• Cisco SONA Framework


Hierarchical Network Model


Cisco Enterprise Architecture


Remote Connection Considerations


Cisco SONA Framework


Chapter 2 Teleworker Connectivity

• Describing Remote Connection Topologies for Teleworkers

• Describing Cable Technology

• Deploying Cable System Technology

• Describing DSL Technology

• Deploying ADSL

• Configuring the CPE as the PPPoE or PPPoA Client

• Troubleshooting Broadband ADSL Configurations

• PPPoE Simulation Practice


Remote Connection Topologies for the Teleworker


Components of the Teleworker Solution


What is a Cable System?


Describing Cable Technology


Deploying Cable System Technology


Describing DSL Technology


Deploying ADSL


Configuring the CPE as the PPPoE or PPPoA Client


Troubleshooting Broadband ADSL Configurations


PPPoE Simulation Practice


Chapter 3 IPsec VPNs

• Introducing VPN Technology

• Understanding IPsec Components and IPsec VPN Features

• Implementing Site-to-Site IPsec VPN Operations

• Configuring IPsec Site-to-Site VPN Using SDM

• Configuring GRE Tunnels over IPsec

• Configuring High-Availability VPNs

• Introducing Cisco Easy VPN

• Configuring Easy VPN Server using Cisco SDM

• Implementing the Cisco VPN Client

• IPsec VPN Lab Exercises


Introducing VPN Technology


Understanding IPsec Components and IPsec VPN Features


Implementing Site-to-Site IPsec VPN Operations


Configuring IPsec Site-to-Site VPN Using SDM


Configuring GRE Tunnels over IPsec


Configuring High-Availability VPNs


Introducing Cisco Easy VPN


Configuring Easy VPN Server using Cisco SDM


Implementing the Cisco VPN Client


Lab 3.1 Configuring SDM on a Router


Lab 3.2 Configuring a Basic GRE Tunnel


Lab 3.3 Configuring Wireshark and SPAN


Lab 3.4 Configuring Site-to-Site IPsec VPNs with SDM


Lab 3.5 Configuring Site-to-Site IPsec VPNs with the IOS CLI


Lab 3.6 Configuring a Secure GRE Tunnel with SDM


Lab 3.7 Configuring a Secure GRE Tunnel with the IOS CLI


Lab 3.8 Configuring IPsec VTIs


Lab 3.9 Configuring Easy VPN with SDM


Lab 3.10 Configuring Easy VPN with the IOS CLI


Chapter 4 Frame Mode MPLS

• Introducing MPLS Networks

• Assigning MPLS Labels to Packets

• Implementing Frame Mode MPLS

• Describing MPLS VPN Technology

• MPLS Lab Exercises


Introducing MPLS Networks


Assigning MPLS Labels to Packets


Implementing Frame Mode MPLS


Describing MPLS VPN Technology


Lab 4.1 Configuring Frame Mode MPLS


Lab 4.2 Challenge Lab: Implementing MPLS VPNs (Optional)


Chapter 5 Cisco Device Hardening

• Thinking Like a Hacker • Mitigating Network Attacks • Network Attacks Using Intelligence • Disabling Unused Cisco Router Network Services and

Interfaces• Securing Cisco Router Administrative Access• Configuring Role-Based CLI • Mitigating Threats and Attacks with Access Lists• Securing Management and Reporting Features • Configuring SNMP • Configuring the NTP Client • Configuring AAA on Cisco Routers • Cisco Device Hardening Lab Exercises


Thinking Like a Hacker


Mitigating Network Attacks


Network Attacks Using Intelligence


Disabling Unused Cisco Router Network Services and Interfaces


Securing Cisco Router Administrative Access


Configuring Role-Based CLI


Mitigating Threats and Attacks with Access Lists


Securing Management and Reporting Features


Configuring SNMP


Configuring the NTP Client


Configuring AAA on Cisco Routers


Lab 5.1 Using SDM One-Step Lockdown


Lab 5.2 Securing a Router with Cisco AutoSecure


Lab 5.3 Disabling Unneeded Services


Lab 5.4 Enhancing Router Security


Lab 5.5 Configuring Logging


Lab 5.6 Configuring AAA Authentication


Lab 5.7 Configuring Role-Based CLI Views


Lab 5.8 Configuring NTP


Chapter 6 Cisco IOS Threat Defense Features

• Introducing the Cisco IOS Firewall

• Configuring Cisco IOS Firewall from the CLI

• Basic and Advanced Firewall Wizards

• Introducing Cisco IOS IPS

• Configuring Cisco IOS IPS

• Threat Defense Lab Exercises


Introducing the Cisco IOS Firewall


Configuring Cisco IOS Firewall from the CLI


Basic and Advanced Firewall Wizards


Introducing Cisco IOS IPS


Configuring Cisco IOS IPS


Lab 6.1 Configuring a Cisco IOS Firewall Using SDM


Lab 6.2 Configuring CBAC


Lab 6.3 Configuring IPS with SDM


Lab 6.4 Configuring IPS with CLI

ISCWImplementing Secure Cisco WANs

Preview

CIS 186 ISCW

Rick Graziani

Fall 2007

0 ISCW Preview

Documents