|
Description
Implementing Secure Converged Wide Area Networks (ISCW) v1.0 is an advanced instructor-led course that introduces techniques and features that enable or enhance WAN and remote access solutions. This five-day course focuses on using one or more of the available WAN connection technologies for remote access between enterprise sites.
This course includes cable modems and DSL with Network Address Translation (NAT), Multiprotocol Label Switching (MPLS) virtual private networks (VPNs), and network security using VPNs with IPsec encryption and Internet Key Exchange (IKE) keys. Successful graduates will be able to secure the network environment using existing Cisco IOS security features, and configure the three primary components of the Cisco IOS Firewall feature set (firewall, intrusion prevention system [IPS], and authentication, authorization, and accounting [AAA]). This task-oriented course teaches the knowledge and skills needed to secure Cisco IOS router networks using features and commands in Cisco IOS software, and using a router configuration application. This course is part of the recommended learning path for learners seeking the Cisco CCNP®. Objectives
After completing this course the student should be able to:
- Explain the Cisco hierarchical network model as it pertains to the WAN
- Describe and implement teleworker configuration and access
- Implement and verify frame mode MPLS
- Describe and configure a site-to-site IPSEC VPN
- Describe and configure Cisco EZVPN
- Explain the strategies used to mitigate network attacks
- Describe and configure Cisco device hardening
- Describe and configure IOS firewall features
Prerequisites
The knowledge and skills that a learner must have before attending this course are as follows:
- Completion of the Introduction to Cisco Networking Technologies (INTRO) and the Interconnecting Cisco Network Devices (ICND) courses, or Cisco CCNA® certification
- Ability to complete the initial configuration of a Cisco switch
- Ability to create basic interswitch connections
- Ability to complete the initial configuration of a Cisco router
- Basic knowledge of routing (static, default router, default gateway, and basic NAT and PAT)
- Basic knowledge of concepts linked to routing protocols (classful versus classless routing protocol, single area OSPF, RIP, EIGRP, administrative distance, and interoperations)
- Basic knowledge of standard WAN technologies (Frame Relay, PPP, and HDLC)
- Fundamental security knowledge, including the presence of hackers, viruses, and other security threats
- Fundamental knowledge of IP addressing, including the format of IPv4 addresses, the concept of subnetting, VLSM and CIDR, and static and default routing
- Basic knowledge of standard and extended ACLs
- Ability to use client utilities including Telnet, IPCONFIG, Trace Route, Ping, FTP, TFTP, and HyperTerminal or other terminal emulation programs
- Basic IOS familiarity, including accessing the CLI on a Cisco device and specifically implementing the debug and show commands
Who Should Attend
The primary audience for this course is as follows:
- Candidates for Cisco CCNP, CCDP®, and CCIP® certifications
- Candidates for Cisco CCIE® Routing and Switching and CCIE Communications and Services certifications
- Network administrators and technicians who are responsible for implementing and troubleshooting complex routed network environments
- Customers or channel resellers who are experienced with Cisco products or who have a broad knowledge of the internetworking industry
- Network technicians who are experienced with Cisco products and services
- Network administrators who are responsible for implementing and managing medium-to-large business networks
- Senior network support staff who perform a help-desk role in a medium- or enterprise-sized company that has internal network support-escalation staff
- Network support staff who design, implement, and troubleshoot Layer 3 connectivity issues
|