Implementing Secure Converged Wide Area Networks (ISCW) 1.0
ObjectivesImplementing Secure Converged Wide Area Networks (ISCW) v1.0 is an advanced instructor-led course that introduces techniques and features that enable or enhance WAN and remote access solutions. This five-day course focuses on using one or more of the available WAN connection technologies for remote access between enterprise sites. This course includes cable modems and DSL with Network Address Translation (NAT), Multiprotocol Label Switching (MPLS) virtual private networks (VPNs), and network security using VPNs with IPsec encryption and Internet Key Exchange (IKE) keys. Successful graduates will be able to secure the network environment using existing Cisco IOS security features, and configure the three primary components of the Cisco IOS Firewall feature set (firewall, intrusion prevention system [IPS], and authentication, authorization, and accounting [AAA]). This task-oriented course teaches the knowledge and skills needed to secure Cisco IOS router networks using features and commands in Cisco IOS software, and using a router configuration application. This course is part of the recommended learning path for learners seeking the Cisco CCNP®
Entry requirementsThe knowledge and skills that a learner must have before attending this course are as follows: * Completion of the Interconnecting Cisco Network Devices (ICND1 and ICND2) courses, or Cisco CCNA® certification * Ability to complete the initial configuration of a Cisco switch * Ability to create basic interswitch connections * Ability to complete the initial configuration of a Cisco router * Basic knowledge of routing (static, default router, default gateway, and basic NAT and PAT) * Basic knowledge of concepts linked to routing protocols (classful versus classless routing protocol, single area OSPF, RIP, EIGRP, administrative distance, and interoperations) * Basic knowledge of standard WAN technologies (Frame Relay, PPP, and HDLC) * Fundamental security knowledge, including the presence of hackers, viruses, and other security threats * Fundamental knowledge of IP addressing, including the format of IPv4 addresses, the concept of subnetting, VLSM and CIDR, and static and default routing * Basic knowledge of standard and extended ACLs * Ability to use client utilities including Telnet, IPCONFIG, Trace Route, Ping, FTP, TFTP, and HyperTerminal or other terminal emulation programs * Basic IOS familiarity, including accessing the CLI on a Cisco device and specifically implementing the debug and show commands
Academic titleImplementing Secure Converged Wide Area Networks (ISCW) 1.0
Course descriptionUpon completing this course, the learner will be able to meet these overall objectives:
* Describe the remote connectivity requirements for secured access and explain the alignment of these requirements with Cisco network architectures
* Describe and implement teleworker broadband connectivity
* Implement and verify frame mode MPLS
* Describe and configure a site-to-site IPsec VPN
* Describe and configure Cisco device hardening
* Describe and configure IOS firewall features
Key Topics:
This subtopic provides an overview of how the course is organized. The course contains these components:
* Course Introduction
* Network Connectivity Requirements
* Teleworker Connectivity
* Frame Mode MPLS Implementation
* IPsec VPNs
* Cisco Device Hardening
* Cisco IOS Threat Defense Features
* Lab Guide
Target Audience:
The primary audience for this course is as follows:
* Candidates for Cisco CCNP, CCDP®, and CCIP® certifications
* Candidates for Cisco CCIE® Routing and Switching and CCIE Communications and Services certifications
* Network administrators and technicians who are responsible for implementing and troubleshooting complex routed network environments
* Customers or channel resellers who are experienced with Cisco products or who have a broad knowledge of the internetworking industry
* Network technicians who are experienced with Cisco products and services
* Network administrators who are responsible for implementing and managing medium-to-large business networks
* Senior network support staff who perform a help-desk role in a medium- or enterprise-sized company that has internal network support-escalation staff
* Network support staff who design, implement, and troubleshoot Layer 3 connectivity issues