CCIE Security Practice Labs (CCIE Self-Study)

Seven comprehensive CCIE security labs to hone configuration and troubleshooting skills Prepare for the CCIE Security lab exam and hone your security configuration and troubleshooting skills with seven complete practice scenarios that cover: Basic device configuration Routing configuration ISDN configuration Cisco PIX Firewall configuration VPN configuration, including IPSec, GRE, L2TP, and PPTP VPN-3000 Concentrator configuration Intrusion Detection System (IDS) 42xx Appliance configuration Cisco IOS Firewall configuration AAA configuration Advanced security issues IP services and protocol-independent features Security violations The explosive growth of the Internet economy over the past several years and new IP-based enterprise applications has heightened requirements for continuous availability of mission-critical data. Today's network administrators and managers are under big pressure to satisfy ever-increasing demands from customers, suppliers, and employees for 100 percent network resource availability and access to applications and data. The end result is that the cost of a network security breach has never been higher. Accordingly, the demand for networking professionals with expert-level network security configuration and troubleshooting skills is also great. The Cisco Systems CCIE Security certification is a prestigious program that sets the professional benchmark for internetworking expertise, validating proficiency with advanced technical skills required to design, configure, and maintain a wide range of network security technologies. CCIE Security Practice Labs provides a series of complete practice labs that mirror the difficult hands-on lab exam. Written by a CCIE Security engineer and Cisco Systems CCIE proctor, this book lays out seven end-to-end scenarios that are both complex and realistic, providing you with the practice needed to prepare for your lab examination and develop critical-thinking skills that are essential for resolving complex, real-world security problems. While many engineers are able to configure single technologies in standalone environments, most will struggle when dealing with integrated technologies in heterogeneous environments. CCIE Security Practice Labs consists of seven full-blown labs. The book does not waste time covering conceptual knowledge found in other security manuals, but focuses exclusively on these complex scenarios. The structure of each chapter is the same, covering a broad range of security topics. Each chapter starts with an overview, equipment list, and general guidelines and instructions on setting up the lab topology, including cabling instructions, and concludes with verification, hints, and troubleshooting tips, which highlight show and debug commands. The companion CD-ROM contains solutions for all of the labs, including configurations and common show command output from all the devices in the topology. "Security is one of the fastest-growing areas in the industry. There is an ever-increasing demand for the experts with the knowledge and skills to do it." -Gert De Laet, Product Manager, CCIE Security, Cisco Systems CCIE Security Practice Labs is part of a recommended study program from Cisco Systems that includes simulation and hands-on training from authorized Cisco Learning Partners and self-study products from Cisco Press. Companion CD-ROM The CD-ROM contains the solutions to the seven complete lab scenarios in the book including configurations and show command output. This volume is part of the Cisco Press Practical Studies Series, which offers readers a means to apply their theoretical knowledge through hands-on lab scenarios for key networking technologies. This unique approach enables readers to practice and hone their internetworking skills while preparing for Cisco certification exams.

Table of Contents:
Foreword. Introduction. 1. Practice Lab 1. Equipment List. General Guidelines. Setting Up the Lab. Practice Lab 1 Exercises. Section 1.0: Basic Configuration (10 points). Section 2.0: Routing Configuration (25 points). Section 3.0: ISDN Configuration (8 points). Section 4.0: PIX Configuration (5 points). Section 5.0: IPSec/GRE Configuration (10 points). Section 6.0: IOS Firewall + IOS IDS Configuration (10 points). Section 7.0: AAA (7 points). Section 8.0: Advanced Security (10 points). Section 9.0: IP Services and Protocol-Independent Features (10 points). Section 10.0: Security Violations (5 points). Verification, Hints, and Troubleshooting Tips. Section 1.0: Basic Configuration. Section 2.0: Routing Configuration. Section 3.0: ISDN Configuration (8 points). Section 4.0: PIX Configuration. Section 5.0: IPSec/GRE Configuration. Section 6.0: IOS Firewall Configuration. Section 7.0: AAA. Section 8.0: Advanced Security. Section 9.0: IP Services and Protocol-Independent Features. Section 10.0: Security Violations. (NOTE: Chapters 2-7 follow the same structure.)

About the Author :
Fahim Hussain Yusuf Bhaiji, CCIE #9305, has been with Cisco Systems, Inc. for over three years and is currently CCIE proctor in Cisco Systems' Sydney, Australia Lab and has recently been charged with the management of content development for the Security CCIE. Prior to this, he was Technical Lead for the Sydney TAC Security and VPN team. Yusuf's passion for Security and VPN related technologies has played dominant role in his 12 years of industry experience, from as far back as his initial Masters Degree in Computer Science, and since reflected in his numerous certifications. Yusuf prides himself in his knowledge sharing abilities, evident in the fact that he has mentored many successful CCIE candidates, as well as having designed and delivered a number of Security and VPN related courses, around the globe.