Cisco Secure Virtual Private Networks (CSVPN) — A 4-Day Course

 Open Public Course Closed In-House Course

Synopsis

CSVPN is a four-day lab intensive training course which teaches the knowledge and skills needed to describe, configure, verify, and manage the Cisco VPN 3000 Concentrator, Cisco VPN Software Client, and Cisco VPN 3002 Hardware Client feature set.

Course Objectives

After completing this course the student should be able to:

• Describe the features, functions, and benefits of Cisco VPN products
• Explain the IPSec and IKE component technologies that are implemented in Cisco Secure VPN products
• Install and configure the Cisco IPSec VPN Software client
• Configure Cisco VPN 3000 for remote access using pre-shared keys
• Configure Cisco VPN 3000 for remote access using digital certificates
• Configure Cisco VPN 3000 firewall feature
• Configure Cisco VPN Windows Client auto-initiate feature

Intended Audience

• Cisco customers who implement and maintain Cisco Virtual Private Networks (VPNs)
• Cisco Channel Partners who sell, implement and maintain Cisco VPNs
• Cisco Systems engineers who support the sales of Cisco VPN product solutions

Prerequisites

Students who attend this advanced course must have experience in configuring Cisco IOS software and have met the following prerequisites:

• Cisco CCNA certification
• Basic knowledge of the Windows operating system
• Familiarity with the networking and security terms and concepts (the concepts are learned in prerequisite training or by reading industry publications)

Certification

Th CSVPN course is recommended as preparation for exam:

• 642-511 CSVPN

This course is part of the Cisco Certified Security Professional (CCSP)

Publicly scheduled dates, locations, and prices

Outline Course Contents

Introduction

Network Security and the Cisco Virtual Private Network (VPN)

• Need for Network Security
• Network Attack Taxonomy
• Management Protocols and Functions

Overview of VPN and IPSec Technologies

• Cisco VPN Products
• IPSec Overview
• IPSec Protocol Framework

Cisco Virtual Private Network 3000 Concentrator Series Hardware Overview

• Benefits and features
• Client Support

Configure Cisco VPN 3000 for Remote Access Using Pre-Shared Keys

• Initial Configuration
• Browser Configuration
• Cisco VPN software client for windows

Configure Cisco VPN 3000 for Remote Access Using Digital Certificates

• Certificate Generation
• Validating Certificates
• Configuring for CA Support

Configure Cisco VPN Firewall Feature for IPSec Software Client

• Software Clients AYT Feaure
• Software Clients Stateful Firewall Feature
• Software Client Firewall Statistics

Configure the VPN Client Auto-initiation

• Auto-initiation Feature

Monitor and Administer Cisco Virtual Private Network 3000 Remote Access Networks

• Monitoring
• Administration
• Bandwidth Management

Configure Cisco Virtual Private Network 3002 for Remote Access Using Pre-Shared Keys

Configuring Cisco 3002 Hardware Client for user and unit authentication

• Configuring the Hardware Client Interactive Unit and User Authentication
• Monitoring the Hardware Client User Statistics

Configuring Cisco 3002 Hardware Client for backup server, load balancing and reverse route injection

• Configuring the Cisco VPN Client Backup Server Feature
• Configuring the Cisco VPN Client Load-Balancing Feature

Configuring Cisco 3002 Hardware Client for software auto-update

• Overview and Configuration
• Monitoring

Configuring Cisco 3002 Hardware Client for IPSec over TCP and UDP

• Port Address Translation
• Configuring IPSec over UDP
• Configuring NAT Traversal
• Configuring IPSec over TCP

Cisco VPN 3000 LAN-to-LAN with Pre-Shared Keys

• IPSec LAN-to-LAN
• Quick Configuration Wizard
• LAN-to-LAN Configuration

Configure the VPN 3000 Series for LAN-to-LAN with NAT

• LAN-to-LAN NAT Overview
• Configuring the LAN-to-LAN NAT Feature

Configure Cisco Virtual Private Network 3000 LAN-to-LAN Using Digital Certificates

• SCEP Support Overview
• Root certificate Installation
• Identity Certificate Installation