Modules: | 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | All |

Module 1-15 Labs

Module 1: Overview of Network Security

Labs: |
1.1.5 | Student Lab Orientation
1.2.8 | Vulnerabilities and Exploits
1.3.3 | Designing a Security Plan

Module 2: Basic Router and Switch Security

Labs: |
2.1.6 | Configure General Router Security
2.2.1 | Controlling TCP/IP Services
2.3.2 | Configuring NAT/PAT
2.3.3 | Configure Routing Authentication and Filtering
2.4.2 | Configure Logging
2.4.3 | Setting Time and NTP
2.4.5 | Configure SSH

Module 3: ACLs and CBAC

Labs: |
3.2.4 | Standard, Extended, Named and Context ACLs
3.2.5 | Lock-and-Key ACLs
3.2.7 | Time-Based ACLs
3.8.3 | Configure Cisco IOS Firewall CBAC on a Cisco Router
e-Labs: |
3.4.1 | Lab CBAC: Audit Trail and Alert
3.4.3 | Half-Open Connection Limits
3.5.3 | Port-to-Application Mapping
3.6.2 | Inspection Rules and ACLs Applied to Router Interfaces
3.6.3 | Define Inspection Rules
3.8.3 | Configure CBAC on a Cisco Router

Module 4: Router AAA Security

Labs: |
4.2.3 | Configure AAA on a Cisco Router
4.3.1 | Install and Configure CSACS 3.0 for Windows
4.5.2 | Configuring Authentication Proxy
e-Labs: |
4.5.2a | Configure Authentication Proxy on A Cisco Router
4.5.2b | Test and Verify AAA
4.5.2c | Configure Authentication
4.5.2d | Configure AAA

Module 5: Router Intrusion Detection, Monitoring, and Management

Labs: |
5.2.5 | Configure IOS Firewall IDS
5.3.8 | Configuring Syslog
5.4.5 | Configure SNMP

Module 6: Router Site-to-site VPN

Labs: |
6.4.5 | Configuring Cisco IOS IPSec using Pre-Shared Keys
6.6.6 | Configure IPSec using Digital Certificates
e-Labs: |
6.4.2 | Prepare for IKE and IPSec
6.4.3 | Configure IKE
6.4.5a | IP Sec Transforms Supported in the Cisco IOS Software
6.4.5b | Configure CIsco IOS IPSec for Pre-Shared Keys
6.6.3 | Configure CA Support
6.6.4 | Configure IKE
6.6.5 | Configure IPSec
6.6.6a | Testing & Verifying IPSec
6.6.6b | Configure Cisco IOS CA Support (RSA Signatures)

Module 7: Router Remote Access VPN

Labs: |
7.3.6 | Configure Remote Access Using Cisco Easy VPN

Module 8: PIX Security Appliance

Labs: |
8.3.3 | Configure the PIX Firewall
8.5.3 | Configure the PIX Firewall as a DHCP Server
e-Labs: |
8.3.1 | Using Help
8.3.2 | nameif, interface, ip address, and route Commands
8.3.3 | show Commands
8.5.3 | Configuring the PIX as the DHCP server

Module 9: PIX Translations and Connections

Labs: |
9.5.6 | Configure PAT
9.6.3.1 | Configure Access Through the PIX Security Appliance
9.6.3.2 | Configure Multiple Interfaces
e-Labs: |
9.2.2 | Internet Access Configuration
9.2.6 | nat 0 Configuration
9.4.2 | static and conduit Commands
9.5.2 | PAT Configuration
9.6.2 | Configuring the PIX Security Appliance
9.6.3 | Configuring Four Interfaces

Module 10: PIX Security Appliance ACLs

Labs: |
10.1.2 | Configure ACLs in the PIX Security Appliance
10.4.4 | Configure Object Groups
e-Labs: |
10.3.1 | Filtering Java, ActiveX and URLs
10.3.2 | URL Filtering

Module 11: PIX Security Appliance AAA

Labs: |
11.3.5 | Configure AAA on the PIX Security Appliance Using Cisco Secure ACS for Windows 2000
e-Labs: |
11.2.2 | Authentication Configuration
11.2.7 | Authentication of Non-Telnet, FTP or HTTP Traffic
11.3.3 | Authorization Configuration
11.3.4 | AAA Configuration Lab

Module 12: PIX Advanced Protocols and Intrusion Detection

Labs: |
12.1.7 | Configure and Test Advanced Protocol Handling on the Cisco PIX Security Appliance
12.4.3 | Configure Intrusion Detection
e-Labs: |
12.1.5 | fixup Command
12.3.5 | Flood Defender
12.6.2 | Configuring Message output to the Cisco Syslog Server

Module 13: PIX Failover and System Maintenance

Labs: |
13.3.3 | Configure LAN-Based Failover (OPTIONAL)
13.5.3 | Configure SSH, Command Authorization, and Local User Authentication
13.6.2 | Perform Password Recovery
e-Labs: |
13.2.2 | failover Commands
13.4.1 | telnet Command
13.6.2 | Upgrade PIX Image

Module 14: PIX VPN

Labs: |
14.6.6 | Configure a Secure VPN Gateway Using IPSec Between Two Cisco Secure PIX Security Appliances
14.7.5 | Configure a Secure VPN Using IPSec Between a PIX and a VPN Client
14.8.2 | Configure IPSec between Two PIX Security Appliances with CA support
e-Labs: |
14.3.5 | Task One - Prepare for IPSec Steps 3, 4, & 5
14.4.1 | Enable/Disable IKE
14.4.3 | Configure Pre-Shared Keys
14.4.4 | Configure IKE Parameters
14.4.4b | Configure and Verify IKE Phase 1 Policy
14.5.3 | IPSec Transform Set
14.5.6 | Configure Crypto Map
14.6.4 | Configure PIX Security Appliance IPSec
14.6.6 | Configure PIX Security Appliance IPSec using Pre-Shared Keys
14.7.3 | IKE Mode Configuration-PIX
14.8.2 | Configure Cisco PIX Security Appliance for CA Support (RSA Signatures)

Module 15: PIX Management

Labs: |
15.6.3 | Configuring the PIX Security Appliance with PDM

| Close Window |

| All contents copyright © 2002 Cisco Systems, Inc. All rights reserved.