CCIE Security Practice Labs
共享用户信息
|
书籍简介
Seven comprehensive CCIE security labs to hone configuration and troubleshooting skills
Prepare for the CCIE Security lab exam and hone your security configuration and troubleshooting skills with seven complete practice scenarios that cover:
Basic device configuration
Routing configuration
ISDN configuration
Cisco PIX Firewall configuration
VPN configuration, including IPSec, GRE, L2TP, and PPTP
VPN-3000 Concentrator configuration
Intrusion Detection System (IDS) 42xx Appliance configuration
Cisco IOS Firewall configuration
AAA configuration
Advanced security issues
IP services and protocol-independent features
Security violations
The explosive growth of the Internet economy over the past several years and new IP-based enterprise applications has heightened requirements for continuous availability of mission-critical data. Today’s network administrators and managers are under big pressure to satisfy ever-increasing demands from customers, suppliers, and employees for 100 percent network resource availability and access to applications and data. The end result is that the cost of a network security breach has never been higher. Accordingly, the demand for networking professionals with expert-level network security configuration and troubleshooting skills is also great. The Cisco Systems CCIE Security certification is a prestigious program that sets the professional benchmark for internetworking expertise, validating proficiency with advanced technical skills required to design, configure, and maintain a wide range of network security technologies.
CCIE Security Practice Labs provides a series of complete practice labs that mirror the difficult hands-on lab exam. Written by a CCIE Security engineer and Cisco Systems CCIE proctor, this book lays out seven end-to-end scenarios that are both complex and realistic, providing you with the practice needed to prepare for your lab examination and develop critical-thinking skills that are essential for resolving complex, real-world security problems. While many engineers are able to configure single technologies in standalone environments, most will struggle when dealing with integrated technologies in heterogeneous environments.
CCIE Security Practice Labs consists of seven full-blown labs. The book does not waste time covering conceptual knowledge found in other security manuals, but focuses exclusively on these complex scenarios. The structure of each chapter is the same, covering a broad range of security topics. Each chapter starts with an overview, equipment list, and general guidelines and instructions on setting up the lab topology, including cabling instructions, and concludes with verification, hints, and troubleshooting tips, which highlight show and debug commands. The companion CD-ROM contains solutions for all of the labs, including configurations and common show command output from all the devices in the topology.
“Security is one of the fastest-growing areas in the industry. There is an ever-increasing demand for the experts with the knowledge and skills to do it.”
-Gert De Laet, Product Manager, CCIE Security, Cisco Systems
CCIE Security Practice Labs is part of a recommended study program from Cisco Systems that includes simulation and hands-on training from authorized Cisco Learning Partners and self-study products from Cisco Press.
+ 展开目录About the Author
About the Technical Reviewers
Acknowledgments
Foreword
Why Security Certifications?
Why CCIE Security?
Introduction
The Need for Security Certification
Overview of the CCIE Certification
Overview of the CCIE Security Exam
Security Written Qualification Exam
Security Lab Exam
Equipment List
Target Audience
About the Book
Wrap-Up
Final Word
Icons Used in This Book
Command Syntax Conventions
Chapter 1. Practice Lab 1
Equipment List
General Guidelines
Setting Up the Lab
Practice Lab 1 Exercises
Section 1.0: Basic Configuration (10 points)
Section 2.0: Routing Configuration (25 points)
Section 3.0: ISDN Configuration (8 points)
Section 4.0: PIX Configuration (5 points)
Section 5.0: IPSec/GRE Configuration (10 points)
Section 6.0: IOS Firewall + IOS IDS Configuration (10 points)
Section 7.0: AAA (7 points)
Section 8.0: Advanced Security (10 points)
Section 9.0: IP Services and Protocol-Independent Features (10 points)
Section 10.0: Security Violations (5 points)
Verification, Hints, and Troubleshooting Tips
Section 1.0: Basic Configuration
Section 2.0: Routing Configuration
Section 3.0: ISDN Configuration
Section 4.0: PIX Configuration
Section 5.0: IPSec/GRE Configuration
Section 6.0: IOS Firewall Configuration
Section 7.0: AAA
Section 8.0: Advanced Security
Section 9.0: IP Services and Protocol-Independent Features
Section 10.0: Security Violations
Chapter 2. Practice Lab 2
Equipment List
General Guidelines
Setting Up the Lab
Practice Lab 2 Exercises
Section 1.0: Basic Configuration (10 points)
Section 2.0: Routing Configuration (25 points)
Section 3.0: ISDN Configuration (7 points)
Section 4.0: PIX Configuration (5 points)
Section 5.0: IPSec/GRE Configuration (15 points)
Section 6.0: IOS Firewall Configuration (8 points)
Section 7.0: AAA (7 points)
Section 8.0: Advanced Security (8 points)
Section 9.0: IP Services and Protocol-Independent Features (10 points)
Section 10.0: Security Violations (6 points)
Verification, Hints, and Troubleshooting Tips
Section 1.0: Basic Configuration
Section 2.0: Routing Configuration
Section 3.0: ISDN Configuration
Section 4.0: PIX Configuration
Section 5.0: IPSec/GRE Configuration
Section 6.0: IOS Firewall Configuration
Section 7.0: AAA
Section 8.0: Advanced Security
Section 9.0: IP Services and Protocol-Independent Features
Section 10.0: Security Violations
Chapter 3. Practice Lab 3
Equipment List
General Guidelines
Setting Up the Lab
Practice Lab 3 Exercises
Section 1.0: Basic Configuration (8 points)
Section 2.0: Routing Configuration (27 points)
Section 3.0: ISDN Configuration (7 points)
Section 4.0: PIX Configuration (10 points)
Section 5.0: IPSec Configuration (10 points)
Section 6.0: IOS Firewall Configuration (8 points)
Section 7.0: AAA (8 points)
Section 8.0: Advanced Security (6 points)
Section 9.0: IP Services and Protocol-Independent Features (10 points)
Section 10.0: Security Violations (6 points)
Verification, Hints, and Troubleshooting Tips
Section 1.0: Basic Configuration
Section 2.0: Routing Configuration
Section 3.0: ISDN Configuration
Section 4.0: PIX Configuration
Section 5.0: IPSec Configuration
Section 6.0: IOS Firewall Configuration
Section 7.0: AAA
Section 8.0: Advanced Security
Section 9.0: IP Services and Protocol-Independent Features
Section 10.0: Security Violations
Chapter 4. Practice Lab 4
Equipment List
General Guidelines
Setting Up the Lab
Practice Lab 4 Exercises
Section 1.0: Basic Configuration (10 points)
Section 2.0: Routing Configuration (26 points)
Section 3.0: ISDN Configuration (5 points)
Section 4.0: PIX Configuration (8 points)
Section 5.0: IPSec/GRE Configuration (10 points)
Section 6.0: IOS Firewall Configuration (8 points)
Section 7.0: AAA (7 points)
Section 8.0: Advanced Security (10 points)
Section 9.0: IP Services and Protocol-Independent Features (10 points)
Section 10.0: Security Violations (6 points)
Verification, Hints, and Troubleshooting Tips
Section 1.0: Basic Configuration
Section 2.0: Routing Configuration
Section 3.0: ISDN Configuration
Section 4.0: PIX Configuration
Section 5.0: IPSec/GRE Configuration
Section 6.0: IOS Firewall Configuration
Section 7.0: AAA
Section 8.0: Advanced Security
Section 9.0: IP Services and Protocol-Independent Features
Section 10.0: Security Violations
Chapter 5. Practice Lab 5
Equipment List
General Guidelines
Setting Up the Lab
Practice Lab 5 Exercises
Section 1.0: Basic Configuration (13 points)
Section 2.0: Routing Configuration (25 points)
Section 3.0: ISDN Configuration (7 points)
Section 4.0: PIX Configuration (8 points)
Section 5.0: IPSec Configuration (10 points)
Section 6.0: Intrusion Detection System (IDS) (6 points)
Section 7.0: AAA (6 points)
Section 8.0: Advanced Security (7 points)
Section 9.0: IP Services and Protocol-Independent Features (12 points)
Section 10.0: Security Violations (6 points)
Verification, Hints, and Troubleshooting Tips
Section 1.0: Basic Configuration
Section 2.0: Routing Configuration
Section 3.0: ISDN Configuration
Section 4.0: PIX Configuration
Section 5.0: IPSec Configuration
Section 6.0: Intrusion Detection System (IDS)
Section 7.0: AAA
Section 8.0: Advanced Security
Section 9.0: IP Services and Protocol-Independent Features
Section 10.0: Security Violations
Chapter 6. Practice Lab 6
Equipment List
General Guidelines
Setting Up the Lab
Practice Lab 6 Exercises
Section 1.0: Basic Configuration (15 points)
Section 2.0: Routing Configuration (25 points)
Section 3.0: ISDN Configuration (7 points)
Section 4.0: PIX Configuration (6 points)
Section 5.0: IPSec/PPTP Configuration (10 points)
Section 6.0: IOS Firewall Configuration (6 points)
Section 7.0: AAA (4 points)
Section 8.0: Advanced Security (7 points)
Section 9.0: IP Services and Protocol-Independent Features (12 points)
Section 10.0: Security Violations (8 points)
Verification, Hints, and Troubleshooting Tips
Section 1.0: Basic Configuration
Section 2.0: Routing Configuration
Section 3.0: ISDN Configuration
Section 4.0: PIX Configuration
Section 5.0: IPSec/PPTP Configuration
Section 6.0: IOS Firewall Configuration
Section 7.0: AAA
Section 8.0: Advanced Security
Section 9.0: IP Services and Protocol-Independent Features
Section 10.0: Security Violations
Chapter 7. Practice Lab 7
Equipment List
General Guidelines
Setting Up the Lab
Practice Lab 7 Exercises
Section 1.0: Basic Configuration (15 points)
Section 2.0: Routing Configuration (20 points)
Section 3.0: ISDN Configuration (6 points)
Section 4.0: PIX Configuration (7 points)
Section 5.0: IPSec/PPTP Configuration (10 points)
Section 6.0: IOS Firewall Configuration (8 points)
Section 7.0: AAA (8 points)
Section 8.0: Advanced Security (8 points)
Section 9.0: IP Services and Protocol-Independent Features (10 points)
Section 10.0: Security Violations (8 points)
Verification, Hints, and Troubleshooting Tips
Section 1.0: Basic Configuration
Section 2.0: Routing Configuration
Section 3.0: ISDN Configuration
Section 4.0: PIX Configuration
Section 5.0: IPSec/PPTP Configuration
Section 6.0: IOS Firewall Configuration
Section 7.0: AAA
Section 8.0: Advanced Security
Section 9.0: IP Services and Protocol-Independent Features
Section 10.0: Security Violations
Index
Tags: Cisco