ISCW (Integrating Secure Converged Wide Area Networks) Training Class

1. Network Requirements

• The IIN and the SONA framework


• Cisco conceptual network models, such as Cisco Enterprise Architecture and
  Cisco hierarchical network model


• Requirements for establishing secure remote connections in a converged network
  

2. Connect Teleworkers

• Topologies for Facilitating Remote Connections
  
  
  • Typical remote connections an enterprise network has to support
  
  
  • Challenges faced in connecting teleworkers to the enterprise network and the
    solutions that exist to address these challenges
  
  
  
  


• Cable Technology
  
  
  • Basic terminology and standards organizations that are relevant to cable
    technology
  
  
  • Components of a cable system that provide data services
  
  
  • Features of cable technology
  
  
  • How digital cable systems use the RF bands for signal transmission
  
  
  • How data services can be delivered over a cable network using an HFC
    architecture
  
  
  • Combination of technologies and components that make a cable system work
  
  
  • Provisioning a cable modem in a TCP/IP-based customer network
  
  
  
  


• DSL Technology
  
  
  • Features of DSL
  
  
  • Variants of DSL
  
  
  • Distance limitations of DSL
  
  
  • Basic facts of ADSL technology
  
  
  • How ADSL coexists with telephony service
  
  
  • CAP and DMT: the competing modulation standards for ADSL signaling
  
  
  • How data is transmitted over ADSL infrastructure with PPPoE
  
  
  • How data is transmitted over ADSL infrastructure with PPPoA
  
  
  
  


• Configuring the CPE as the PPPoE and PPPoA Client
  
  
  • Configure a Cisco router as a PPPoE client
  
  
  • Configure an ATM interface for PPPoE client operations
  
  
  • Configure the PPPoE DSL dialer interface
  
  
  • Configure PAT
  
  
  • Configure a DHCP server to allocate IP address to the users behind the client
    DSL router
  
  
  • Configure a static route
  
  
  • Review the output of various debug and show commands to verify the PPPoE
    operations
  
  
  • Step-by-step procedure to configure a PPPoA on the CPE router
  
  
  • Configure the DSL ATM interface
  
  
  
  


• Verifying Broadband ADSL Configurations
  
  
  • Bottom-up approach to troubleshoot a DSL connection problem
  
  
  • Isolate problems to Layer 1
  
  
  • Confirm an Administratively Down state
  
  
  • Confirm the correct DSL operating mode on the CPE router ATM interface
  
  
  • Isolate problems to Layer 2
  
  
  • Determine if data is being received from the ISP
  
  
  • Determine if PPP is negotiating successfully
  
  
  
  

3. Implement Frame-Mode MPLS

• Introducing MPLS Networks
  
  
  • Elements of the MPLS conceptual model
  
  
  • Router switching mechanisms
  
  
  • MPLS data and control planes
  
  
  • Structure of an MPLS label and its format
  
  
  • Function of different types of LSRs in MPLS networks
  
  
  • Interactions between the control plane and the data plane in an LSR that
    enable the basic functions of label switching and forwarding of labeled packets
    to occur
  
  
  
  


• Assigning MPLS Labels to Packets
  
  
  • Performing label allocation in a frame-mode MPLS network
  
  
  • Distributing labels in a frame-mode MPLS network
  
  
  • How the LFIB table is populated
  
  
  • Packet propagation across an MPLS network
  
  
  • How PHP improves MPLS performance by eliminating routing lookups on egress
    LSRs
  
  
  
  


• Implementing Frame-Mode MPLS
  
  
  • Configuring frame-mode MPLS on a Cisco IOS router
  
  
  • Enable IP CEF on a router as a step in implementing frame-mode MPLS
  
  
  • Enable MPLS on a frame-mode interface as a step in implementing frame-mode
    MPLS
  
  
  • Configure the MTU size in label switching as a step in implementing frame-mode
    MPLS
  
  
  
  


• MPLS VPN Technology
  
  
  • MPLS VPN architecture and how it improves on the traditional methods of
    overlay and peer-to-peer VPN
  
  
  • Components of an MPLS VPN and how they are interconnected to enable enterprise
    network connectivity between sites
  
  
  • How routing information is propagated across the P-network
  
  
  • End-to-end flow of routing updates in an MPLS VPN
  
  
  • MPLS VPN packet forwarding
  
  
  
  

4. IPsec VPNs

• IPsec Components and IPsec VPN Features
  
  
  • IPsec protocol and basic functions; advantages of IPsec VPNs over other types
    of VPNs
  
  
  • IKE protocols
  
  
  • IKE functionality
  
  
  • Two protocols that are used for IPsec
  
  
  • Message authentication and integrity check
  
  
  • Differences and the functionality between symmetric and asymmetric encryption
    algorithms
  
  
  • PKI
  
  
  
  


• Site-to-Site IPsec VPN Operations
  
  
  • Five steps of IPsec operation
  
  
  • Configuration of IPsec
  
  
  • Configuration of the ISAKMP parameters
  
  
  • Configuration to define the IPsec transform set, the crypto ACL, and the
    crypto map
  
  
  • Configuration to apply the crypto map to the interface
  
  
  • Configuration of the interface ACL for IPsec
  
  
  
  


• Configuring IPsec Site-to-Site VPN Using SDM
  
  
  • Navigating the site-to-site VPN wizard interface
  
  
  • Components that will be configured by the SDM site-to-site VPN wizard
  
  
  • Launching the site-to-site VPN wizard
  
  
  • Set the parameters of the site-to-site VPN tunnel
  
  
  • How SDM sets IKE policies
  
  
  • Select a transform set and associate additional transform sets as required
  
  
  • Define the traffic that the VPN protects
  
  
  • Complete the configuration by viewing the settings in the Summary window
  
  
  
  


• Configuring GRE Tunnels over IPsec
  
  
  • GRE
  
  
  • Purpose of a secure GRE tunnel
  
  
  • Components that will be configured by the SDM site-to-site VPN secure GRE
    tunnel wizard
  
  
  • Configure a backup GRE-over-IPsec tunnel that the router can use when the
    primary tunnel fails
  
  
  • Select the authentication method to be used on the VPN
  
  
  • Configure IKE using the SDM wizard
  
  
  • Configure the IPsec transform set using the SDM wizard
  
  
  • Configure dynamic or static routing over the GRE and IPsec tunnel
  
  
  • Complete the configuration by viewing the settings in the Summary window
  
  
  
  


• High Availability Options
  
  
  • How high availability of IPsec VPNs is achieved
  
  
  • Failover option of backup IPsec peers
  
  
  • Use of HSRP for IOS IPsec VPN resiliency
  
  
  • IPsec stateful failover
  
  
  • How a WAN connection can be backed up by using an IPsec VPN
  
  
  
  


• Configuring Cisco Easy VPN and Easy VPN Server Using SDM
  
  
  • General operation of Cisco Easy VPN including its benefits and the role of
    each of its components
  
  
  • Functionality provided by Cisco Easy VPN Server, concept of dynamic crypto
    maps, and f

IT professionals, network administrators, and technicians who need to design,
configure, or sup