Networking Training Overview

This course exists to provide mastery of the VPN Configuration on Cisco ASAx, ASA, and PIX platforms. The class is targeted around the IPsec Site-Site VPNs and their configuration and troubleshooting.

If you configure and troubleshoot IPsec VPNs on Cisco Firewalls, this is the class for you. Students will walk away knowing every command in the VPN template and its effects. Students will also have a very firm foundation for troubleshooting and validating the health of VPNs they configure.

Networking Training Audience

Engineers who operate, deploy, and troubleshoot VPNs on any Cisco firewall platform

Networking Training Course duration

1 day

Networking Training Course outline

• What is a VPN
  • Definition
  • Site-Site vs Client-Site
  • Cryptography Services
  • Policy Suites
  • Diffie-Hellman
  • Lifetime
  • IKE - Phase1 and Phase2
• Configuring a VPN
  • Commands
  • Encryption Domain
    • Object-Groups
    • Mirroring
  • Phase 1
    • Policy Suite
    • Policy Suite Ordering
  • Phase 2
    • Crypto Map
    • Sequence Numbers
    • Transform Sets
    • Multiple VPNs on one Crypto Map
    • Perfect Forward Secrecy (PFS)
  • Tunnel-Groups
    • Peer Identity
    • Pre-Shared-Key
    • Custom Group-Policy
  • Enabling the VPN Tunnel
    • Enabling ISAKMP
    • Enabling IPsec
    • Applying Crypto Maps
• VPN Show Commands
  • show isakmp sa
    • Verifying Phase 1
    • Troubleshooting Phase 1
  • show ipsec sa
    • Verifying Phase 2
    • Troubleshooting Phase 2
  • show vpn-sessiondb
    • Verifying general VPN Health
  • Debugging
    • debug crypto isakmp