Tài liệu CCNA Security Lab Manual - Cisco Networking Academy

CCNA Security Lab Manual - Cisco Networking Academy
The Cisco® Networking Academy® course on CCNA® Security provides a next step for students who want to expand their CCNA-level skill set to prepare for a career in network security. The CCNA Security course also prepares students for the Implementing Cisco IOS® Network Security (IINS) certification exam (640-553), which leads to the CCNA .
Chapter 1: Lab A: Researching Network Attacks and Security Audit Tools 1
Part 1. Researching Network Attacks 2
Part 2. Researching Security Audit Tools 3
Chapter 2: Lab A: Securing the Router for Administrative Access .5
Part 1. Basic Router Configuration .7
Part 2. Control Administrative Access for Routers .8
Part 3. Configure Administrative Roles 17
Part 4. Configure IOS Resilience and Management Reporting .21
Part 5. Configure Automated Security Features 32
Chapter 3: Lab A Securing Administrative Access Using AAA and RADIUS 46
Part 1. Basic Network Device Configuration 48
Part 2. Configure Local Authentication .50
Part 3. Configure Local Authentication Using AAA on R3 .52
Part 4. Configure Centralized Authentication Using AAA and RADIUS 59
Chapter 4: Lab A: Configuring CBAC and Zone-Based Firewalls .72
Part 1. Basic Router Configuration .74
Part 2. Configuring a Context-Based Access Control (CBAC) Firewall 82
Part 3. Configuring a Zone-Based Firewall (ZBF) Using SDM 92
Chapter 5: Lab A: Configuring an Intrusion Prevention System (IPS) Using the CLI and SDM 105
Part 1. Basic Router Configuration .107
Part 2. Configuring IPS Using the Cisco IOS CLI 109
Part 3. Configuring IPS using SDM 123
Chapter 6: Lab A: Securing Layer 2 Switches 140
Part 1. Basic Device Configuration .142
Part 2. SSH Configuration 143
Part 3. Secure Trunks and Access Ports .147
Part 4. Configure SPAN and Monitor Traffic 157
Chapter 7: Lab A: Exploring Encryption Methods .169
Part 1. (Optional) Build the Network and Configure the PCs 170
Part 2. Decipher a Pre-encrypted Message Using the Vigenere Cipher 170
Part 3. Create a Vigenere Cipher Encrypted Message and Decrypt It .172
Part 4. Use Steganography to Embed a Secret Message in a Graphic 174
Chapter 8: Lab A: Configuring a Site-to-Site VPN Using Cisco IOS and SDM .177
Part 1. Basic Router Configuration .179
Part 2. Configure a Site-to-Site VPN with Cisco IOS .181
Part 3. Configure a Site-to-Site IPsec VPN with SDM .191
Chapter 8: Lab B: Configuring a Remote Access VPN Server and Client 206
Part 1. Basic Router Configuration .208
Part 2. Configuring a Remote Access VPN .210
Chapter 8: Lab C (Optional): Configuring a Remote Access VPN Server and Client .232
Part 1. Basic Router Configuration .234
Part 2. Configuring a Remote Access VPN .236
Chapter 9: Lab A: Security Policy Development and Implementation 255
Part 1. Create a Security Policy 258
Part 2. Basic Network Device Configuration (Chapters 2 and 6) 263
Part 3. Secure Network Routers .264
Part 4. Secure Network Switches (Chapter 6) .279
Part 5. Configuring VPN Remote Access .284