SNRS: Securing Networks with Cisco Routers and Switches

Prerequisites:

Delegates are required to meet the following prerequisites:

- CCNA or Equivalent Knowledge
- Basic knowledge of the Windows operating systemBasic knowledge of Cisco IOS networking and security terms and concepts.

Target Audience:

Cisco customers who implement and secure Cisco IOS router networks.
Cisco Channel Partners who sell, implement and secure Cisco IOS router networks.
Cisco Systems engineers who support the sales of Cisco IOS product solutions.

Course Description:

SNRS is a five-day instructor led, lab intensive course. It is aimed at providing network specialists with the knowledge and skills needed to secure Cisco IOS router and Switch networks. Successful graduates will be able to secure the network environment using existing Cisco IOS security features, configure the three primary components of the Cisco IOS Firewall Feature set (context-based access control (CBAC), intrusion detection, and authentication proxy), implement secure tunnels using IPSec technology, and implement basic access switch security.

Objectives:

- Install, configure, operate and troubleshoot Cisco Secure Access Control Server (ACS) for Windows.
- Install, configure, operate and troubleshoot Cisco IOS Firewall, Cisco IOS Authentication Proxy and Cisco IOS Intrusion Protection System on a Cisco Router.
- Install, configure, operate and troubleshoot Layer 2 security features.Plan, configure, operate and troubleshoot IPSec VPNs using Cisco routers and pre-shared keys.
- Plan, configure, operate and troubleshoot IPSec VPNs using Cisco routers and certificate authorities.
- Plan, configure ,operate and troubleshoot IPSec VPNs using Cisco Easy VPN.
- Use the wizards and tools embedded in the Security Device Manager to complete a wide range of configuration tasks.

This course includes the following modules:

Cisco Secure Access Control Server for Windows Server

• Cisco Secure Access Control Server for Windows Server
• Configuring RADIUS and TACACS+ with Cisco Secure ACS for Windows Server.

Configuring Cisco IOS Security Features

• Cisco IOS Firewall Context-Based Access Control
• Configuring Cisco IOS Firewall Context-Based Access Control
• Cisco IOS Firewall Authentication Proxy
• Cisco IOS Intrusion Prevention System (IPS)

Configuring Layer 2 Security

• Mitigating Layer 2 Attacks
• Cisco Identity-Based Networking Services
• Configuring 802.1X port-Based Authentication
• Layer 2 Security Best Practices

Building Cisco IOS-based VPNs Using Pre-Shared Keys

• Preparing a Network for IPSec Configuration with Pre-shared Keys
• Configuring Internet Exchange Key (IKE) with Pre-shared keys
• Configuring IP Security Protocol (IPSec) Using Pre-shared KeysTesting and Verifying IPSec Pre-shared Key Configuration

Building Cisco IOS-Based VPNs Using Certficate Authorities

• Preparing a Network for IPSec Configuration Using Certificate Authorities
• Configuring Certificate Authiority (CA) on Cisco Routers
• Configuring IKE and IPSec on Cisco Routers
• Testing and Verifying a IPSec CA Configuration

Cisco IOS Remote Access Using Cisco Easy VPN

• Introduction to Cisco Easy VPN
• Configuring the Easy VPN Server
• Configuring Easy VPN Remote for the Cisco VPN Client 4.x
• Configure Cisco Easy VPN Remote for Access Routers

Cisco Security Device Manager

• Securing Cisco Routers Using Security Device Manage