CCNA Security Labs

Section 1 – Securing Layer 2

Lab 1-1Configuring Native VLAN on a Trunk Links
Lab 1-2Disabling Dynamic Trunking Protocol (DTP)
Lab 1-3Preventing Layer 2 Loops with BPDU Guard
Lab 1-4Protecting the Root Bridge using STP Root Guard
Lab 1-5Protecting the CAM Table using Port Security
Lab 1-6Preventing DHCP Rogue Servers by using DHCP Snooping
Lab 1-7Preventing Spoofed ARP via Dynamic ARP Inspection
Lab 1-8Preventing IP Spoofs using IP Source Guard

Section 2 – Securing the Control Plane

Lab 2-1Configuring Local User Authentication via AAA
Lab 2-2Configuring SSH and HTTPS Management Access
Lab 2-3Configuring Console, Local and Remote System Logging (SYSLOG)
Lab 2-4Configuring Secure NTP (Network Time Protocol)
Lab 2-5Configuring Secure SNMPv2c
Lab 2-6Configuring Secure SNMPv3
Lab 2-7Protecting the Cisco IOS File(s)
Lab 2-8Configuring Control Plane Policing (CPP)
Lab 2-9Configuring Role-Based User Access Control

Section 3 – Securing the Forwarding Plane

Lab 3-1Securing RIP advertisements using MD5 Authentication
Lab 3-2Securing EIGRP Neighbors using MD5 Authentication
Lab 3-3Securing OSPF Neighbors using MD5 Authentication
Lab 3-4Configuring Reflexive Access Control Lists
Lab 3-5Configuring Cisco IOS ACL Object-Groups
Lab 3-6Configuring Time Based Access Control Lists
Lab 3-7Configuring Bogon Access Control Lists

Section 4 – Cisco IOS Firewall Technologies

Lab 4-1Configuring Dynamic NAT (Many to One)
Lab 4-2Configuring Static NAT (One to One)
Lab 4-3Configuring Static PAT (IP Port to IP Port)
Lab 4-4Configuring Cisco IOS Firewall
Lab 4-5Configuring Cisco IOS Firewall Exceptions
Lab 4-6Configuring Basic Cisco IOS Zone Based Firewall
Lab 4-7Configuring Cisco IOS Zone Based Firewall Exceptions

Section 5 – Cisco IOS VPN Technologies

Lab 5-1Understanding VPN Technologies
Lab 5-2Configuring ISAKMP Policies
Lab 5-3Configuring Site to Site IPSEC VPN
Lab 5-4Configuring an IPSEC GRE Tunnel

Section 6 – Cisco IOS IPS/IDS

Lab 6-1Configuring Basic Cisco IOS IPS/IDS
Lab 6-2Installing new IPS/IDS Signature Libraries
Lab 6-3Managing Cisco IPS/IDS Signatures
Lab 6-4Configuring Cisco IOS Signature Based IPS/IDS
Lab 6-5Configuring Cisco IOS Policy Based IPS/IDS

Section 7 – Cisco Adaptive Security Appliances

Lab 7-1Overview of the Cisco ASA (Adaptive Security Appliances)
Lab 7-2Configuring ASA Enable and Username Authentication
Lab 7-3Configuring Login and MOTD Banners
Lab 7-4Configuring Interface Addressing, Names and Security Levels
Lab 7-5Configuring Static Routes on the ASA
Lab 7-6Configuring DHCP Services on the Cisco ASA
Lab 7-7Configuring Dynamic Routing on the Cisco ASA
Lab 7-8Configuring SSH and Telnet Remote Management Access
Lab 7-9Configuring ASDM Remote Management Access
Lab 7-10Configuring Radius and TACACS+ AAA
Lab 7-11Configuring Objects and Object Groups and Access Lists
Lab 7-12Configuring Dynamic NAT (Many to One)
Lab 7-13Configuring Static NAT (One to One)
Lab 7-14Configuring Static PAT (SRC/DST Port(s)
Lab 7-15Configuring NAT Pooling
Lab 7-16Configuring Double NAT, Previously Known as NAT Exemption
Lab 7-17Configuring Redundant ISP’s on the Cisco ASA
Lab 7-18Configuring a L2L (LAN to LAN) IPSEC VPN Tunnel
Lab 7-19Configuring a L2L using Static NAT.
Lab 7-20Configuring Remote Access SSL VPN Services & AnyConnect Clients
Lab 7-21Configuring Clientless SSL VPN Services
Lab 7-22Configuring NTP for Time Accuracy
Lab 7-23Configuring SNMP for Remote Monitoring and Management
Lab 7-24Configuring a Cisco ASA Packet Capture
Lab 7-25Configuring Stateful Failover on the Cisco ASA
Lab 7-26Understanding the Flow of Traffic using Packet Tracer

Section 8 – Cisco Access Control Server 5.x

Lab 8-1Installing Cisco ACS 5.x on VMWare Workstation
Lab 8-2Configuring User Accounts on Cisco ACS 5.x
Lab 8-3Configuring ACS Device Profiles
Lab 8-4Configuring Radius and TACACS+ Servers on Cisco IOS
Lab 8-5Configuring Named AAA Server Group List
Lab 8-6Configuring Cisco IOS AAA Authentication List
Lab 8-7Configuring Cisco ACS Server 5.x Group Based Authentication Policies
Lab 8-8Configuring Cisco IOS AAA Authorization List
Lab 8-9Configuring Cisco ACS Server 5.x Group Based Authorization Policies
Lab 8-10Configuring Cisco IOS AAA Accounting List
Lab 8-11Configuring Cisco ACS Server 5.x Accounting Policies
Lab 8-12Viewing Cisco ACS Server 5.x Accounting Logs

 

CCNA RnS Labs

Section 1 – Getting Started with your Cisco Lab

Lab 1-1Identifying Router Components and Accessories
Lab 1-2Connecting to a Cisco Router or Switch via Console
Lab 1-3Identifying Router & Switch IOS Software
Lab 1-4Configuring a Cisco Access Server
Lab 1-5Installing Graphical Network Simulator v3
Lab 1-6Basic Graphic Network Simulator v3 Configuration
Lab 1-7Configuring The FreeCCNAWorkbook GNS3 Topology
Lab 1-8Configuring a GNS3 Ethernet NIO Cloud

Section 2 – Basic Cisco Router and Switch Management

Lab 2-1Cisco 2500 Series Router Password Reset
Lab 2-2Cisco 2600 Series Router Password Reset
Lab 2-3Fixed Configuration Catalyst Switch Password Reset
Lab 2-4Cisco Device Initial Configuration Dialog
Lab 2-5Navigating the Cisco Command Line Interface
Lab 2-6Configuring an IP address on an Interface
Lab 2-7Interface Specific Configurations
Lab 2-8Configuring a Loopback Interface
Lab 2-9Upgrading the Cisco Internetwork Operating System
Lab 2-10Recovering a Corrupt Cisco IOS Image on a 2500 Series Router
Lab 2-11Recovering a Corrupt Cisco IOS Image on a 2600 Series Router
Lab 2-12Recovering a Corrupt Cisco IOS Image on a Catalyst Switch
Lab 2-13Configuring the Login, EXEC and MOTD Banners
Lab 2-14Reset Cisco IOS Configuration Specific Defaults

Section 3 – Configuring Basic Cisco Device Security

Lab 3-1Configuring Basic Password Authentication
Lab 3-2Configuring Local User Database Authentication
Lab 3-3Configuring AAA Authentication Lists
Lab 3-4Configuring AAA Authentication via TACACS+ Server
Lab 3-5Configuring Secure Shell Virtual Terminal Access (SSH)
Lab 3-6Configuring Numbered Access Control Lists
Lab 3-7Configuring Named Access Control Lists
Lab 3-8Configuring the VTY Line(s) Access Control List
Lab 3-9Configuring the Password Encryption Service
Lab 3-10Configuring an exec timeout and Login Failure Rate
Lab 3-11Configuring Cisco IOS Web Server Authentication
Lab 3-12Configure logging to a Remote SYSLog Server

Section 4 – Configuring Cisco Catalyst Series Switches

Lab 4-1Configuring Cisco Discovery Protocol (CDP)
Lab 4-2Creating Virtual Local Area Networks (VLAN’s)
Lab 4-3Configuring a Management VLAN Interface
Lab 4-4Configuring Trunk Ports using ISL or 802.1q
Lab 4-5Configuring An EtherChannel Link
Lab 4-6Configuring EtherChannel Utilizing PAgP
Lab 4-7Configuring EtherChannel Utilizing LACP
Lab 4-8Configuring a Port Channel Interface
Lab 4-9Configuring a Static ARP Entry
Lab 4-10Configuring VLAN Trunking Protocol (VTP)
Lab 4-11Configuring VTP Transparent Mode and VTP Pruning
Lab 4-12Configuring Inter-VLAN Routing (Router-on-a-Stick)
Lab 4-13Configuring Per-VLAN Spanning Tree Protocol
Lab 4-14Configuring Rapid Per-VLAN Spanning Tree Protocol
Lab 4-15Configuring Multiple Spanning Tree Protocol (MSTP)
Lab 4-16Configuring Switchport Spanning Tree Portfast
Lab 4-17Configuring Switchport Spanning Tree BPDU Guard
Lab 4-18Configuring STP Interface Specific Attributes
Lab 4-19Configuring Dynamic Switchport Security
Lab 4-20Configuring Sticky Switchport Security
Lab 4-21Configuring a Switched Port Analyzer Session

Section 5 – Configuring Wide Area Network Links

Lab 5-1Configuring Point-to-Point T1 Links using PPP or HDLC
Lab 5-2Configuring Point-to-Point Frame Relay Links
Lab 5-3Configuring Point-to-Point Frame Relay Sub-Interfaces
Lab 5-4Configuring a Point-to-Multipoint Frame Relay WAN
Lab 5-5Configuring and Understanding Frame Relay Inverse ARP

Section 6 – Configuring Static Routing

Lab 6-1Configuring Static Routing
Lab 6-2Configuring a Floating Static Route
Lab 6-3Configuring a Static Default Route

Section 7 – Configuring Routing Information Protocol (RIP)

Lab 7-1Configuring Routing Information Protocol (RIP)
Lab 7-2Configuring RIP Versions 1 and 2
Lab 7-3Configuring RIP Timers
Lab 7-4Configuring RIP Triggered Updates
Lab 7-5Configuring RIP Interface Options
Lab 7-6Configuring RIP Static Neighbors
Lab 7-7Configuring RIP Default Information Originate
Lab 7-8Configuring RIP Route Summarization
Lab 7-9Configuring RIP Route Metric Offset-Lists

Section 8 – Configuring Enhanced Interior Gateway Routing Protocol (EIGRP)

Lab 8-1Configuring Basic EIGRP
Lab 8-2Configuring EIGRP Static Neighbors
Lab 8-3Configuring EIGRP Split Horizon
Lab 8-4Configuring EIGRP Stub Area Networks
Lab 8-5Configuring EIGRP Timers
Lab 8-6Configuring EIGRP Maximum Paths
Lab 8-7Configuring EIGRP Passive Interface
Lab 8-8Configuring EIGRP Route Summarization
Lab 8-9Configuring EIGRP Default Route Propagation

Section 9 – Configuring Open Shortest Path First (OSPF)

Lab 9-1Configuring Basic OSPF
Lab 9-2Configuring OSPF Priority
Lab 9-3Configuring OSPF Network Types
Lab 9-4Configuring OSPF Static Neighbors
Lab 9-5Configuring Multi-Area OSPF
Lab 9-6Configuring The OSPF Router-ID
Lab 9-7Configuring OSPF Timers
Lab 9-8Configuring Per Interface OSPF
Lab 9-9Configuring OSPF Stub Areas
Lab 9-10Configuring OSPF Interface Cost
Lab 9-11Configuring OSPF Auto Cost Reference Bandwidth
Lab 9-12Configuring OSPF Passive Interface
Lab 9-13Configuring OSPF Maximum Paths
Lab 9-14Configuring OSPF Route Summarization
Lab 9-15Configuring OSPF Default Route Propagation

Section 10 – Configuring Route Redistribution

Lab 10-1Configuring Static Route Redistribution
Lab 10-2Configuring Mutual OSPF and RIP Redistribution
Lab 10-3Configuring Mutual OSPF and EIGRP Redistribution
Lab 10-4Configuring Mutual EIGRP and RIP Redistribution

Section 11 – Configuring IP Services

Lab 11-1Configuring Network Address Translation (NAT) One-to-One
Lab 11-2Configuring a Network Address Translation (NAT) Pool
Lab 11-3Configuring Port Address Translation (PAT) Many-to-One
Lab 11-4Configuring the Cisco IOS DHCP Server
Lab 11-5Configuring an IOS DHCP Server IP Exclusion Range
Lab 11-6Configuring an IP DHCP Helper Address
Lab 11-7Configuring the Cisco IOS NTP Client
Lab 11-8Configuring the Cisco IOS NTP Server
Lab 11-9Configuring Cisco IOS DNS Name Servers

Section 12 – Configuring IP Version 6 (IPv6)

Lab 12-1The Basics of Internet Protocol Version 6 (IPv6)
Lab 12-2Configuring IPv6 Interface Addressing
Lab 12-3Configuring IPv6 Static Routing
Lab 12-4Configuring Basic IPv6 RIPng
Lab 12-5Configuring Basic IPv6 OSPFv3
Lab 12-6Configuring IPv6 Access List

Web filtering and Web Security / Scansafe/ WebSense / barracuda / Fortigate / LightSpeed Systems/ pfSense/Smoothwall

Types of Internet Filters:

Internet filtering software uses algorithms, or patterns, that check website addresses and pages for images or words that depict graphic violence, have sexual content, contain racial slurs or epithets (or other related hate content), and other content deemed inappropriate by parents (political web sites, gambling and alcohol-related sites). There are three distinct types of Internet filters.

Black List Filters

Black list filters are the most popular types of Internet blocking software. A website is added to a black list (“bad” list) that keeps track of content with objectionable words and images. When a user tries to access the website address on their browser, the software compares the address to the addresses on the list. If there is a match, the users are denied access to the requested website.

White List Filters

White list filters allow access only to “good” sites on the list while denying access to websites not on the list. White list filters are the most restrictive blockers.

Keyword or Content Filters

Keyword or content lists scan websites for the presence of specific words, phrases, or images that appear on the restricted list. Access to a website is denied if the keyword or content matches any words on the list. Because of the specificity of the filter, these programs often deny access to websites that have acceptable content.

Content Rating Systems

Webmasters provide a classification of a website based on its content. Website classifications are voluntary and are based on the web developer’s description of their online content.

Work Place Web Filtering PDF Document

Web Filtering Technologies PDF Document

Smoothwall Manuals

Smoothwall UTM-3000 PDF Document

Smoothwall UTM(Unified Threat Management) Guide PDF