Description

Securing Networks with Cisco Routers and Switches (SNRS) v3.0 is an instructor-led course presented by Cisco training partners to their end-user customers. This five-day course focuses on providing the network specialists with the knowledge and skills needed to secure Cisco IOS router and switch-based networks. Learners will be able to secure the network environment using existing Cisco IOS features, including installing and configuring Cisco IOS Classic Firewall, Cisco IOS Zone-Based Policy Firewall, user group-based firewall, Cisco IOS intrusion prevention system (IPS), authentication proxy, implementing secure tunnels using IP Security (IPsec) technology, and implementing advanced switch security. This course also covers advanced virtual private network (VPN) technologies.

Objectives

• Implement Layer 2 security features on a network using Cisco IOS commands
• Implement Cisco Network Foundation Protection on Cisco IOS routers
• Design, install, configure, and troubleshoot site-to-site VPNs using Cisco Integrated Services routers
• Design, install, configure, and troubleshoot remote-access communications using Cisco IOS security features
• Install, configure, and troubleshoot URL filtering, NAT and PAT, Cisco IOS Classic Firewall, Cisco IOS Zone-Based Policy Firewall, and Cisco IOS IPS on a Cisco Integrated Services router

Prerequisites

• Cisco Certified Network Associate (CCNA) certification
• Basic knowledge of Cisco IOS networking and security terms and concepts
• Basic knowledge of the Windows operating system

Who Should Attend

• The primary audience for this course is as follows:
  • Network designers
  • Network administrators
  • Network engineers
• The secondary audience for this course is as follows:
  • Network managers
  • Program managers
  • Project managers

• Module 1: Network Platform Security with Switches
  • Lesson 1: Configuring Advanced Layer 2 Security
  • Lesson 2: Introducing Cisco IBNS
  • Lesson 3: Implementing Basic 802.1X Authentication
  • Lesson 4: Configuring Advanced 802.1X Authentication and Authorization
• Module 2: Network Platform Security with Routers
  • Lesson 1: Examining the Cisco Network Foundation Protection Strategy
  • Lesson 2: Securing the Control Plane
  • Lesson 3: Securing the Management Plane
  • Lesson 4: Securing the Data Plane
• Module 3: Secure Site-to-Site Communications
  • Lesson 1: Examining VPN and IPsec Fundamentals
  • Lesson 2: Implementing IPsec VPNs with PKI
  • Lesson 3: Implementing GRE over IPsec
  • Lesson 4: Configuring High-Availability VPNs and VTI
  • Lesson 5: Implementing DMVPN
  • Lesson 6: Implementing GET VPN
• Module 4: Secure Remote Access Communications
  • Lesson 1: Implementing Cisco IOS Remote Access Using Cisco Easy VPN
  • Lesson 2: Examining a Cisco IOS SSL VPN
• Module 5: Threat Control and Containment
  • Lesson 1: Configuring NAT and PAT
  • Lesson 2: Configuring a Cisco IOS Classic Firewall
  • Lesson 3: Configuring a Cisco IOS Zoned-Based Policy Firewall
  • Lesson 4: Configuring Cisco IOS IPS

Lab Outline

• Lab 1-1: Configure Advanced Layer 2 Security
• Lab 1-2: Configure Basic 802.1X Authentication
• Lab 1-3: Configure Advanced 802.1X Authentication
• Lab 1-4: Configure 802.1X VLAN Assignments
• Lab 2-1: Configure the Cisco Network Foundation Protection Strategy
• Lab 3-1: Configure A Site-To Site VPN Using Certificates
• Lab 3-2: Configure a GRE over IPsec Tunnel
• Lab 3-3: Configure a DMVPN Spoke Using Cisco SDM
• Lab 3-4: Configure GET VPN Using CLI
• Lab 4-1: Configure Cisco Easy VPN Remote
• Lab 4-2: Configure Cisco Easy VPN Server
• Lab 4-3: Configure a Cisco IOS SSL VPN
• Lab 5-1: Configure Cisco IOS Classic Firewall on a Cisco Router
• Lab 5-2: Configure a Cisco IOS Zone-Based Policy Firewall with URL Filtering
• Lab 5-3: Configure Cisco IOS IPS on a Cisco Router