CCIE: Security Training

CCIE: Security Training

Cisco has responded to the challenge in the internetworking technology with the Cisco Certified Internetwork Expert (CCIE) Program. This is a high-level certification program designed to identify and serve the best of the internetworking experts and to improve your hands-on skills. The CCIE certification is currently the most significant certification in the industry.

CCIE Security Bootcamp consists of a set of practice exercises covering all protocols tested in the CCIE lab exam. They are aimed at engineers preparing for the CCIE lab exam who already understand the theory of the protocols being tested and wish to practice implementing them in CCIE Lab style scenarios.

The bootcamp will prepare you for the lab exam. Areas covered are on security protocols, operating systems, application protocols, security technologies, and Cisco security applications.

Who Needs to Attend
This course is aimed at candidates who are preparing for the CCIE Security Lab Exam and who have successfully completed the written exam.

CCIE Security Bootcamp consists of a set of practice exercises covering all protocols tested in the CCIE lab exam. They are aimed at engineers preparing for the CCIE lab exam who already understand the theory of the protocols being tested and wish to practice implementing them in CCIE Lab style scenarios.

Course Outline

*

Bridging and Switching
Basic frame relay configuration
Catalyst VLAN configuration
Catalyst VTP configuration
Port-VLAN assignments
Catalyst management and security
802.1x
Traffic control and congestion management
Catalyst features and advanced catalyst configuration
*

IGP Routing
OSPF, EIGRP and RIP configurations
OSPF, EIGRP and RIP security
PIX routing
VPN3000 routing
Route filtering, redistribution, summarization and other advanced IGP features
*

PIX Firewall
Basic PIX configuration
Management
Address translation (NAT, global, static)
ACL, conduit
Routing
Object groups
VLANs
AAA
VPN
DHCP
PPPoE
Filtering
Fixup protocols
Other advanced PIX features
*

BGP
Basic IBGP, EBGP and BGP backbone configurations
BGP security
Summarization, filtering and advanced BGP features
*

IP/IOS Features
IP services
QoS
NAT/PAT
NTP
DHCP
SNMP
IOS features and user interfaces
File management, system management and advanced IP/IOS features
*

AAA
Tacacs+
Radius
Switch and router management
PIX management
VPN3000 management
Proxy authentication
Service authentication FTP, telnet, HTTP, other
Advanced AAA features
*

VPN
IPSec LAN-to-LAN (IOS/ PIX/ VPN3000)
DMVPN
Pre-shared
CA (PKI)
Remote access VPN (IOS/ PIX/ VPN3000)
VPN3000 concentrator
Unity client
WebVPN
EzVPN Hardware client (IOS/ PIX)
Xauth, split-tunnel, RRI, NAT-T
High availability
IPSec redundancy
QoS for VPN
GRE, mGRE
L2TP
PPTP
Advanced VPN features
*

IOS Firewall
CBAC
Audit
Auth Proxy
PAM
Access control
Performance tuning
Advanced IOS firewall features
*

Advanced Security
DoS/DDoS attacks
Network/ Host attacks
Packet marking techniques
Mitigation techniques
Security RFCs
Service provider security
Black holes, sink holes
Access lists (standard, extended, named)
Lock-and-Key access-list
Reflexive access-list
TCP intercept
uRPF
CAR
NBAR
Netflow
802.1x
PBR
Flooding
Spoofing
Policing
Fragmentation
Sniffer traces
Device security and management (telnet, SSH, pwd, priv lvls)
Other advanced features
*

Intrusion Detection System
IDS sensor appliance 42XX
Sensor configuration
Signature tuning
Shunning
TCP resets
Sensor features
IDM
IEV
IOS IDS
PIX IDS
SPAN, RSPAN
Advanced IDS features