Implementing Secure Converged Wide Area Networks (ISCW)
1.0
Overview/Description
The Implementing Secure Converged Wide Area Networks (ISCW) 1.0
is highly recommended for any individual responsible in any way for
maintenance, operation, or troubleshooting wide area networks
(WANs). This training is also necessary for individuals seeking
certification as a Cisco Certified Network Professional (CCNP).
This course enables learners to implement appropriate technologies
to build and secure WANs, extending the reach of an enterprise
network to teleworkers and remote sites. A primary focus of the
course is on securing remote access and VPN client configuration.
The goal is to train network administrators in the technology and
capabilities needed to use Cisco's hierarchical network model as it
pertains to the WAN, teleworker configuration and access, frame
mode MPLS, site-to-site IPSec VPN, Cisco EZVPN, strategies used to
mitigate network attacks, Cisco device hardening, and IOS firewall
features.
Exclusive Bonus - IP Subnetting Mini-Course
Many network administrators are baffled by the use of IP
subnetting and subnets. BCMSN includes a mini-course that will
introduce the concepts of IP subnetting and subnets. After
reviewing this mini-course learners will understand:
- Decimal to Binary conversion
- Classful IP addresses and Private IP address ranges
- How and why we use Subnetworks
- Calculating the number of Subnets and Hosts available using a
custom Subnet mask
- Calculating the Network number, broadcast address, and valid
range of host addresses when given an IP address and custom Subnet
mask
Target Audience
This course is recommended for any student that desires to learn
more about Cisco networking - especially the implementation of
secure wide area networks. This course is also recommended for any
student interested in professional level Cisco certifications or
beyond.
Prerequisites
The ISCW course focuses on the technology required for enabling
secure wide area networks. To fully benefit from this course, the
student must be familiar with general networking concepts and have
Cisco router operation and configuration experience. Successful
completion of the following courses (or equivalent experience) is
strongly recommended:
- Interconnecting Cisco Networking Devices Part 1
- Interconnecting Cisco Networking Devices Part 2
Certification
CCNP
Exams
642-825 ISCW
Included Labs
- Configuring Frame Mode MPLS
- Configuring Site-to-Site IPSec VPNs
- Configuring GRE Tunnels over IPSec Using SDM
- Configuring IPSec VPN to Back Up a WAN Connection
- Configuring Cisco Easy VPN Server Using SDM
- Securing Cisco Routers
- Securing Cisco Router Management
- Configuring AAA Login Authentication and Exec Authorization on
Cisco Routers
- Configuring a Cisco IOS Firewall - Part 1
- Configuring a Cisco IOS Firewall - Part 2
- Configuring Cisco IOS IPS
Skills
This course covers the following Cisco hardware and
software/operating system versions:
- Versions of the Cisco IOS supporting MPLS, IPSec, and the
Firewall Feature Set
- Cisco VPN Client v 4.0.5
Outline
Module 1: Network Connectivity Requirements
- Lesson1: Describing Network Requirements
- Module Summary
Module 2: Teleworker Connectivity
- Lesson 1: Describing Topologies for Facilitating Remote
Connections
- Lesson 2: Describing Cable Technology
- Lesson 3: Describing DSL Technology
- Lesson 4: Configuring the CPE as the PPPoE or PPPoA Client
- Lesson 5: Verifying Broadband ADSL Configurations
- Module Summary
Module 3: Frame Mode MPLS Implementation
- Lesson 1: Introducing MPLS Networks
- Lesson 2: Assigning MPLS Labels to Packets
- Lesson 3: Implementing Frame Mode MPLS
- Lesson 4: Describing MPLS VPN Technology
- Module Summary
Module 4: IPsec VPNs
- Lesson 1: Understanding IPsec Components and IPsec VPN
Features
- Lesson 2: Implementing Site-to-Site IPsec VPN Operations
- Lesson 3: Configuring IPsec Site-to-Site VPN Using SDM
- Lesson 4: Configuring GRE Tunnels over IPsec
- Lesson 5: Configuring High-Availability Options
- Lesson 6: Configuring Cisco Easy VPN and Easy VPN Server Using
SDM
- Lesson 7: Implementing the Cisco VPN Client
- Module Summary
Module 5: Cisco Device Hardening
- Lesson 1: Mitigating Network Attacks
- Lesson 2: Disabling Unused Cisco Router Network Services and
Interfaces
- Lesson 3: Securing Cisco Router Installations and
Administrative Access
- Lesson 4: Mitigating Threats and Attacks with Access Lists
- Lesson 5: Securing Management and Reporting Features
- Lesson 6: Configuring AAA on Cisco Routers
- Module Summary
Module 6: Cisco IOS Threat Defense Features
- Lesson 1: Introducing the Cisco IOS Firewall
- Lesson 2: Implementing Cisco IOS Firewalls
- Lesson 3: Introducing Cisco IOS IPS
- Lesson 4: Configuring Cisco IOS IPS
- Module Summary
Objectives
- Explain the Cisco hierarchical network model as it pertains to
the WAN
- Describe and implement teleworker configuration and access
- Implement and verify frame mode MPLS
- Describe and configure a site-to-site IPSec VPN
- Describe and configure Cisco EZVPN
- Explain the strategies used to mitigate network attacks
- Describe and configure Cisco device hardening
- Describe and configure IOS firewall features