juniper firewall india hyderabad, juniper india hyderabad, juniper jncia india hyderabad, juniper lab india, juniper router india hyderabad, juniper services india hyderabad, juniper ssl vpn India hyderabad

Training

›

Overview

›

Service Provider Routing

›

Enterprise Routing

›

Enterprise Security Products

Firewall/Ipsec VPN

›	CJFV
›	AJVI
›	IFVH
›	SMF
›	APJF
›	CJSA
›	AJSA

›

›

›

Training

Enterprise Security Products

Firewall/Ipsec VPN

AJVI

AJVI- Advanced Juniper Networks IPSec VPN Implementations

Course No	:	EDU-JUN-AJVI
Length	:	Two days

Course Overview

This two-day course is a survey of various IPSec VPN configurations as well as alternatives (i.e. GRE), and includes instruction on deploying dynamic routing over VPNs. Upon completing this course, a student should be able to return to work and successfully install, configure, and verify that a ScreenOS-based device is functioning in a VPN configuration. Through demonstrations and hands-on labs, students gain experience in configuring, testing, and troubleshooting the VPN designs discussed in class.

Target audience

Network engineers, support personnel, and reseller support.

Prerequisites

Completion of CJFV or equivalent product experience. Completion of SMF or equivalent product experience if using Security Manager. General networking knowledge, including Ethernet, TCP/IP, and routing concepts.

Course Contents

Day One

Introduction

»	ScreenOS VPN Review
	»	Review policy-based VPN configuration
	»	Review route-based VPN configuration
	»	Review Security Manager VPN Manager
	»	Review verification commands
	»	Review troubleshooting tools
	»	Describe and configure VPN Monitor

»	VPN Variations
	»	Configure LAN-to-LAN VPN with a dynamic peer using ID
	»	Configure LAN-to-LAN VPN with a dynamic peer using FQDN
	»	Configure VPN with ScreenOS device in transparent mode
	»	Configure VPN with ScreenOS device in transparent mode

»	Hub and Spoke VPNs
	»	Describe the concept of a Hub and Spoke VPN
	»	Describe different Hub and Spoke scenarios
	»	Configure Hub and Spoke VPNs using the following scenarios
	»	Policy-based
	»	Interfaces in same zone as protected resources (using NHTB)
	»	Interfaces in different zones than protected resources
	»	Centralized spoke-to-spoke control
	»	Verify Configuration

»	Routing over VPNs
	»	Explain dynamic routing operations over VPN links
	»	Configure RIP over VPN links
	»	Configure OSPF over VPN links

Day Two

»	Using Certificates
	»	Define and explain the following concepts
	»	Public Key Cryptography
	»	Digital Signatures
	»	Digital Certificates
	»	Public Key Cryptography Standard (PKCS)
	»	Certification Authority (CA)
	»	Certificate Revocation List (CRL)
	»	Online Certificate Status Protocol (OCSP)
	»	Acquire and load certificates and CRLs
	»	Configure LAN-to-LAN IPSec VPN using certificates for authentication

»	Redundant VPN Gateways
	»	Describe the functionality of the ScreenOS redundant VPN gateway feature
	»	Configure redundant VPN gateways
	»	Discuss other redundancy

»	GRE
	»	Explain GRE technology and terminology
	»	Discuss GRE applications
	»	Configure GRE
	»	Verify operations

»	Dial-Up VPNs
	»	Discuss dial-up VPN options
	»	Basic
	»	Multiple tunnels/split tunneling
	»	Group IKE ID
	»	Shared IKE ID and XAUTH
	»	Compare/contrast dial-up IPSec VPNs with SSL VPNs
	»	Configure ScreenOS device for dial-up VPN connection

»	NetScreen-Remote
	»	Introduce NetScreen-Remote VPN client product
	»	Configure client for dial-up VPN connectivity

^Top