Practice Lab 2 Solutions

Section 1: Perimeter Security

In Lab 1, you initialized perimeter security services and configured some fundamental features. This section adds more advanced features on the Cisco ASAs, including configuring IPv6, botnet traffic filtering and redundancy and management services. There is also an exercise using the Cisco IOS zone-based firewall (ZFW), which has replaced CBAC as the firewall solution on Cisco IOS routers. ZFW has been updated to allow support for Cisco TrustSec and security group tagging, and this will be incorporated into the exercise in this lab.

Solution and Verification for Exercise 1.1: Configure a Redundant Interface on ASA2

Skills Tested:

Configuring high availability on the Cisco ASA using a ...

Get CCIE Security v4.0 Practice Labs now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.