book

Implementing Cisco IOS Network Security (IINS 640-554) Foundation Learning Guide, Second Edition

by Catherine Paquet

November 2012

Intermediate to advanced

704 pages

20h 24m

English

Cisco Press

Read now

Unlock full access

Goals and MethodsWho Should Read This Book?Strategies for Exam PreparationHow This Book Is Organized
Building Blocks of Information SecurityEvaluating and Managing the RiskSecurity PoliciesSecure Network Lifecycle ManagementSummaryReferencesReview Questions
Borderless NetworksCisco Borderless Network Security ArchitectureBorderless Security ProductsSummaryReferencesReview Questions
Threats Against the Network InfrastructureCisco NFP FrameworkCisco Configuration ProfessionalCisco Configuration Professional Building BlocksSummaryReferencesReview Questions
Configuring Secure Administration AccessImplementing Secure Management and ReportingConfiguring AAA on a Cisco RouterTACACS+ and RADIUS ProtocolsAAA on a Cisco Router Using an External DatabaseDeploying and Configuring Cisco Secure ACSSummaryReferencesReview Questions
Overview of VLANs and TrunkingSpanning Tree OverviewMitigating Layer 2 AttacksSummaryReferencesReview Questions
The Need for IPv6IPv6 Features and EnhancementsIPv6 AddressingIPv6 and Cisco RoutersRevisiting Threats: Considerations for IPv6SummaryReferencesReview Questions
Threats RevisitedIntegrated Threat Control StrategySummaryReferencesReview Questions
ACL FundamentalsACL Wildcard Masking and VLSM ReviewConfiguring ACLs for Threat Control Using Cisco Configuration ProfessionalUsing ACLs in IPv6 EnvironmentsSummaryReferencesReview Questions
Introducing Firewall TechnologiesNAT FundamentalsFirewall DesignsSummaryReferencesReview Questions
Cisco Firewall SolutionsCisco IOS Zone-Based Policy FirewallIntroduction to Cisco Common Classification Policy LanguageCisco ASA FirewallSummaryReferencesReview Questions
IPS FundamentalsCisco IOS IPSSummaryReferencesReview Questions
VPN OverviewExamining Cryptographic ServicesSymmetric and Asymmetric Encryption OverviewCryptographic Hashes and Digital SignaturesDiffie-HellmanAsymmetric Encryption: Digital SignaturesPublic Key InfrastructureSummaryReferencesReview Questions
IPsec FrameworkIPsec ProtocolIKE ProtocolIPv6 VPNsSummaryReferencesReview Questions
Site-to-Site IPsec: Planning and PreparationConfiguring a Site-to-Site IPsec VPN Using CCPVerifying the IPsec Configuration Using CCP and CLIMonitoring Established IPsec VPN ConnectionsSummaryReferencesReview Questions
SSL VPNs in Borderless NetworksSSL and TLS Protocol FrameworkCisco SSL VPN Deployment Options and ConsiderationsSSL VPN on Cisco ASA in Clientless ModeSSL VPN on ASA Using the Cisco AnyConnect VPN ClientSummaryReferencesReview Questions
Chapter 1Chapter 2Chapter 3Chapter 4Chapter 5Chapter 6Chapter 7Chapter 8Chapter 9Chapter 10Chapter 11Chapter 12Chapter 13Chapter 14Chapter 15

Content preview from Implementing Cisco IOS Network Security (IINS 640-554) Foundation Learning Guide, Second Edition

Chapter 14. Site-to-Site IPsec VPNs with Cisco IOS Routers

Building a site-to-site IPsec VPN is an essential part of many plans to meet the security requirements of customers. In this chapter, you will learn how to use the command-line interface (CLI) to configure a site-to-site IPsec VPN to securely connect two or more subnets over the Internet or an intranet.

This chapter teaches you how to configure a site-to-site IPsec VPN with preshared keys, using Cisco Configuration Professional. This ability includes being able to meet these objectives:

• Evaluate the requirements and configuration of site-to-site IPsec VPNs

• Use Cisco Configuration Professional to configure site-to-site IPsec VPNs

• Use CLI commands and Cisco Configuration Professional ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Start your free trial

Implementing Cisco IOS Network Security (IINS): (CCNA Security exam 640-553) (Authorized Self-Study Guide)

Catherine Paquet

Cisco ASA: All-in-One Firewall, IPS, and VPN Adaptive Security Appliance

Jazib Frahim - CCIE No. 5459, Omar Santos

Integrated Security Technologies and Solutions - Volume II: Cisco Security Solutions for Network Access Control, Segmentation, Context Sharing, Secure Connectivity and Virtualization

Chad Mitchell, Jamie Sanbower, Aaron Woland, Vivek Santuka

CCIE Professional Development Series Network Security Technologies and Solutions

Yusuf CCIE No. 9305 Bhaiji

Publisher Resources

ISBN: 9780132983341Purchase book