SIMOS 1.0: Deploying Secure Site-to-Site Connectivity Solutions (Part 2)

This course is included in our On-demand training solution.

Overview

Dynamic multipoint VPNs are a feature of Cisco IOS devices that enable scalable and manageable VPN deployments. This course covers the configuration of dynamic multipoint VPNs on Cisco hardware. This course is one of a series in the Skillsoft learning path that prepares the learner for Cisco certification exam 300-209 SIMOS. This exam counts toward CCNP Security certification.

Target Audience

Network security engineers and learners preparing for Cisco CCNP Security certification

Prerequisites

None

Expected Duration

90 min.

Course Objectives

Course Introduction

Overview of Cisco IOS VTIs

  • describe the use of virtual tunnel interfaces to replace crypto maps and simplify VPN configuration
  • Configuring Basic IKE Peering (Part 1)

  • set up an IKE security association between two peers
  • Configuring Basic IKE Peering (Part 2)

  • set authentication method and lifetime for basic IKE peering
  • Verify IKE Peering

  • verify an IKE peering association between two devices
  • Configure Static VTI Point-to-Point Tunnels

  • configure a static route into a VTI point-to-point tunnel
  • Verify Static VTI Point-to-Point Tunnels

  • verify a static route into a VTI point-to-point tunnel
  • Configure Dynamic VTI Point-to-Point Tunnels (Part 1)

  • describe dynamic virtual tunnel interfaces for creating scalable hub and spoke enterprise VPN topologies
  • Configure Dynamic VTI Point-to-Point Tunnels (Part 2)

  • configure the hub router for dynamic VTI point-to-point tunnels
  • Configure Dynamic VTI Point-to-Point Tunnels (Part 3)

  • complete configuration of dynamic VTI point-to-point tunnels
  • Verify Dynamic VTI Point-to-Point Tunnels

  • verify operation of dynamic VTI point-to-point tunnels
  • DMVPN Solution Components

  • describe the components of dynamic multipoint VPNs
  • GRE

  • describe the use of generic route encapsulation as a tunneling protocol in dynamic multipoint VPNs
  • NHRP

  • describe the use of next hop resolution protocol in dynamic multipoint VPNs
  • DMVPN Operations

  • describe dynamic multipoint VPNs routing operation
  • Configure DMVPN on Hub

  • configure dynamic multipoint VPNs on a hub device
  • Configure DMVPN on Spoke

  • configure dynamic multipoint VPNs on a client or spoke device
  • Configure Routing in DMVPN

  • configure dynamic multipoint VPN routing
  • Verify DMVPN

  • verify the operation of a dynamic multipoint VPN system
  • Exercise: Configuring a Dynamic Multipoint VPN

    COURSE COST



     

    NEED HELP OR NOT SURE?