Cisco SECURE 1.0: Deploying Tunnel-Based IPSec VPNs and GET VPNs


Overview/Description
Target Audience
Expected Duration
Lesson Objectives
Course Number



Overview/Description
Building a highly available virtual private network (VPN) network involves protecting it against expected failures, and enabling the VPN network to heal itself in a reasonable amount of time. Organizations have different uptime requirements for their networks. Frequently, when migrating from a traditional circuit-based WAN network, which had high availability mechanisms in place (backup dial interfaces, backup routers), the need to provide the same or better functionality in a VPN is paramount. Fully meshed virtual private networks (VPNs) present a scalability and manageability challenge and have traditionally been avoided by many sites. The Cisco Group Encrypted Transport (GET) VPN technology provides solutions to these challenges and allows organizations to easily deploy complex, redundant fully meshed networks. This course enables you to choose recommended high availability architectures, and to configure a highly available tunnel-based IP Security (IPSec) VPN and shows you how to configure and troubleshoot a Cisco IOS Software GET VPN.

Target Audience
Network professionals responsible for securing and managing their network infrastructures who have CCNA certification, CCNA Security certification (IINS) and a working knowledge of Microsoft Windows operating systems.

Expected Duration (hours)
2.5

Lesson Objectives

Cisco SECURE 1.0: Deploying Tunnel-Based IPSec VPNs and GET VPNs

  • describes how to plan the deployment of Cisco IOS site-to-site IPSec VPN high-availability features
  • describe how to use routing protocols for VPN failover
  • determine the optimal method of mitigating failures in a VTI-based VPN
  • determine the optimal method of mitigating failures in a DMVPN
  • describe the operation of a Cisco IOS GET VPN
  • describe how to plan the deployment of Cisco IOS GET VPN
  • configure a Cisco IOS GET VPN key server
  • configure a GET VPN key server
  • verify a Cisco IOS GET VPN key server
  • identify implementation guidelines for a Cisco IOS GET VPN key server
  • configure a Cisco IOS GET VPN group member
  • recognize how to troubleshoot a Cisco IOS GET VPN group member
  • configure a GET VPN group member
  • identify key features of GET VPN Key Server Clustering
  • sequence the steps to configure high availability mechanisms in a GET VPN
  • troubleshoot a GET VPN key server redundancy
  • Course Number:
    cc_cure_a14_it_enus