IPSec
Course No: EDU-JUN-JNIPSEC
Course Overview
This instructor-led course covers the configuration and support of the IPSec features available on the Juniper Networks platforms. This class is a combination of lecture and lab to allow ample time for some good hands-on exposure to the ES PIC configuration and troubleshooting.
Objectives
After successfully completing this course, you should be able to perform the following:
- Configure and troubleshoot IPSec tunnels using the ES PIC;
- Describe the basic functionality of the IPSec protocol and how to configure it on a Juniper Networks router; and
- Describe the basic functionality of the IKE protocol and how to configure it on a Juniper Networks router.
Intended Audience
The primary audiences for this course include the following:
- Personnel who are familiar with Juniper Networks router configuration; and
- Internet engineers.
The secondary audiences for this course include the following:
- Juniper Networks and partner sales representatives;
- Juniper Networks and partner systems engineers; and
- Juniper Networks employees (such as hardware engineers, software engineers, TAC engineers).
Course Level
This is an intermediate-level course designed to provide a basic knowledge of ES PIC functionality.
Prerequisites
The IPSec prerequisites are the following:
- TCP/IP basics;
- Link-state routing protocols, including a familiarity with OSPF; and
- Familiarity with the Juniper Networks command-line interface.
Course Contents
Module 0: Course Introduction
Module 1: IPSec Protocols
- IPSec Overview
- Authentication
- Encryption
- The Security Association
- IPSec Packet Processing
- Lab 1: BGP Protection
Module 2: Configuring Manual SAs
- IPSec on a Juniper Networks Router
- Configuring a Manual IPSec Security Association
- Troubleshooting a Manual IPSec Security Association
- Supported RFCs
- Pop Quiz
- Lab 2: Manual Security Associations
Module 3: Internet Key Exchange
- IKE Overview
- OAKLEY Key Determination
- Internet Security Association and Key Management Protocol
- IKE Operation
- Perfect Forward Secrecy
Module 4: Configuring Dynamic Security Associations
- IKE Functionality on an ES PIC
- Configuring Dynamic IPSec SAs
- Troubleshooting Dynamic IPSec SAs
- Lab 3: Dynamic Security Associations
21) Internet Protocol Version 6
Course No: EDU-JUN-IPV6
Length: One day
Cost: $675 (US) Schedule and Registration
Course Overview
This intensive, instructor-led course focuses on the Juniper Networks M-series and T-series implementation of the next-generation IP suite. In addition, this course provides a substantial review of the operational characteristics of IPv6, including protocol design, packet headers, addressing, ICMPv6, autoconfiguration, RIPng, OSPF, IS-IS, BGP, and IPv6 transition methods.
Objectives
This is an intensive, hands-on, one-day course, with students participating in a variety of configuration and troubleshooting scenarios. Each student team controls its own router and participates in building large, multi-functional networks. Students who complete this course should be proficient in implementing IPv6-based networks in JUNOS software.
Intended Audience
The primary audiences for this course include personnel who are responsible for the provisioning, deployment, and troubleshooting of Juniper Networks M-series and T-series router-based networks running IPv6.
Course Level
This is an advanced-level course.
Prerequisites
Students should have a solid understanding of Internet Protocol Version 4 (IPv4), including protocol mechanics and addressing. Using IPv4, students should be able to configure a RIP network, an IS-IS network, and a multiple autonomous system (AS) BGP network without assistance. Students should have knowledge of the JUNOS Internet software command line and policy syntax to the extent covered in the Configuring Juniper Networks Routers course.
Course Contents
Day 1
Module 0: Course Introduction and Overview
Module 1: IPv6 Introduction
- Why Is IPv6 Needed?
- What Is the History of IPv6?
- How Was IPv6 Developed?
Module 2: Protocol Headers
- IPv6 Protocol Header
- IPv6 Extension Headers
- Recommended Order for Extension Headers
Module 3: IPv6 Addressing
- IPv6 Address Notation and Structure
- Address Types
- Address Application
- Interface Configuration
- Lab 1: Interface Configuration
Module 4: ICMPv6 and Autoconfiguration
- ICMPv6 Overview
- Neighbor Discovery
- Autoconfiguration
- JUNOS Software Configuration
- Lab 2: Router Advertisement
Module 5: Routing Protocols
- Protocol Independent Features
- Lab 3: Static Routes
- RIPng
- Lab 4: RIPng (Optional)
- IS-IS]
- Lab 5: IS-IS
- BGP
- Lab 6: BGP
Module 6: Transition Methods
- Transition Plans
- The Dual-Stack Approach
- Tunneling Methods
- Protocol Translation
|
