Describing and Configuring VPNs

• Comparing Cryptography Components
  • Cryptography, Encryption, and Hashing
    • Cryptography
    • Encryption
    • Hashing
  • Symmetric Algorithms
    • DES & 3DES
    • AES
    • Blowfish & Twofish
    • RC4
  • Asymmetric Algorithms
    • Diffie Hellman
    • RSA
    • DSA
  • Hashing Algorithms
    • Key Sizes
  • VPN Types
    • Site-to-Site VPN
    • Remote Access VPN
  • Pre Shared Keys, Digital Certificates, and PKI
    • Pre-Shared Keys for Authentication
    • Public Key Infrastructure
  • IPsec Encryption
    • IKE
    • IKEv2
  • SSL/TLS
• Comparing Cisco VPN Types
  • Configuring ISAKMP & IKE SA Tunnels
    • IKEv1 Phase 1 Configuration Tasks
    • IKEV2 IKE_SA Configuration Tasks
  • Configuring the IPsec Tunnel
    • Configuring the 2nd Tunnel (IKEv1 or IKEv2)
    • Legacy Configuration (Crypto-Maps)
  • Cisco Tunnel Interface Types
    • Virtual Tunnel Interface (VTI)
    • Dynamic VTI
    • GRE Tunnel
    • MTU Size and MSS Size
    • GRE Multipoint Interface
  • DMVPN
    • DMVPN Components
    • DMVPN Phases
  • FlexVPN
  • Cisco AnyConnect
    • Additional AnyConnect Features
• Configuring DMVPN
  • Configuring DMVPN on the Hub Router
  • Configuring DMVPN on the Spoke Routers
  • Configuring Dynamic Routing
  • Verifying DMVPN
  • IPsec Config Intro and Smart Defaults
    • Configuring IKEv2 on Cisco IOS
  • Securing DMVPN with IPsec
  • Verifying and Troubleshooting IPsec
• Configuring FlexVPN
  • IKEv2 Authorization Policies
  • Creating a Dynamic VTI
    • Dynamic VTIs
  • Enrolling in Globomantics’ PKI
  • Using Digital Certificates for Authentication
  • Configuring a FlexVPN Client
    • FlexVPN Clients
• Configuring Cisco AnyConnect on the ASA
  • Uploading the AnyConnect Client to the ASA
  • Adding the ASA to the PKI Infrastructure
  • Creating IP Pools and NoNAT Rules
  • Integrating the ASA with Active Directory
  • Policy Hierarchy and Configuring Dynamic Access Policies
    • The Ways Settings are Configured
    • Settings Priority
  • Configuring Group Policies
  • Configuring Connection Profiles
• Configuring Cisco AnyConnect on the FTD
  • Integrating Active Directory with the FTD
  • Installing an Identity Cert on the FTD
  • Configuring a Remote Access Connection Profile on a Cisco FTD
  • Configuring a NAT Exemption and ACL Rules for VPN User Traffic