|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/ccnp-security-svpn-300-730-training-part-12/
课程评论：没有评论
课程名称：CCNP安全SVPN (300-730) 训练 第一部分 课程概述：虚拟私人网络（VPN）是一种利用互联网技术，为远程办公室或个别用户提供安全接入其组织网络的网络。在本课程中，您将学习如何配置和管理虚拟私人网络。课程将从理解VPN的基本概念开始，包括密码学、对称与非对称加密、密码散列、Diffie-Hellman算法、IPsec协议、数据包交换及站点到站点VPN的配置。接下来，我们将深入探讨高级VPN技术，如DMVPN。这是为新的CCNP安全集中考试SPVN-300-730准备的两部分课程的第一部分，覆盖了相关主题。无论您是初学者还是已有一些网络与安全经验，本课程都将对您大有裨益。 考试概述：本考试旨在测试您实施安全远程通信所用的虚拟私人网络（VPN）解决方案的知识，包括安全通信、架构与故障排除。 课程主要内容： - 密码学概念及术语 - 对称与非对称加密概念 - 密码散列（SHA和MD5）概念 - Diffie-Hellman (DH) 组概念 - IPsec协议特性 - IKE及其版本和模式概念 - SSL/TLS及握手过程概念 - 虚拟私人网络VPN - 基于策略和基于路由的VPN理论 - 路由器上的站点到站点VPN与ESP和AH - Cisco路由器上的站点到站点VPN IKEv1 - 站点到站点IPsec VPN验证 - 站点到站点VPN故障排除第1阶段和第2阶段 - 处理重叠子网的站点到站点VPN - 动态IP的站点到站点IPsec VPN - 路由器和ASA上的站点到站点VPN IKEv1 - 站点间的IPsec VPN全网格配置使用IKEv1 - 泛用路由封装（GRE）的概念 - GRE与IPsec实验的配置与验证 - 动态多点VPN（DMVPN）概念 - 三种不同DMVPN部署理论 - DMVPN术语与组件 - DMVPN网络设计的三个不同阶段 - DMVPN阶段1的配置 - DMVPN阶段1命令解释与路由 - DMVPN阶段2与阶段3的配置 - DMVPN上IPsec配置的概念 - 配置与验证DMVPN阶段3及IPsec - DMVPN故障排除与验证 - Cisco路由器上IKEv2的站点到站点VPN配置 - Cisco ASA上IKEv2的站点到站点VPN配置 通过本课程，学员将获得全面的VPN知识和实践技能，为未来的网络安全工作打下坚实基础。
A Virtual Private Network (VPN) is a network that uses the Internet, to provide remote offices or individual users with secure access to their organization's network. In this course you will learn how to configure and manage Virtual Private Networks. We will start from understanding basic concepts of VPNs such as Cryptography, Symmetric & Asymmetric Encryption, Cryptography Hash, Diffie-Hellman, IPsec Protocols, packet exchange and configuring Site to Site VPNs. We will then move on to advanced VPNs such as DMVPN. This is the first part of the 2 Parts for new CCNP SECURITY Concentration Exam SPVN-300-730 covers topics in 2 Parts. Whether you are a beginner or already have some experience in Networking & Security the course will be really beneficial for you. Overview:This exam tests your knowledge of implementing secure remote communications with Virtual Private Network (VPN) solutions, including Secure communications, Architectures and Troubleshooting.Topics to Cover:Concept of Cryptography & Terminologies.Concept of Symmetric & Asymmetric Encryption.Concept of Cryptography Hash (SHA and MD5).Concept of Diffie-Hellman (DH) Group.Concept of IPsec Protocols Features.Concept of IKE, IKE Versions and Modes.Concept of SSL/TLS and Hands-shake.Concept of Virtual Private Network VPN.Policy-Based and Route-Based VPNs Theory.Site-to-Site VPN on Router with ESP & AH.Site to Site VPN On Cisco Router IKEv1.Site-to-Site IPsec VPN Verification.Site-to-Site VPN Troubleshooting Phase 1.Site-to-Site VPN Troubleshooting Phase 2.Site-to-Site VPN with Overlapping Subnet.Site-to-Site IPsec VPN IKEv1 with NAT.Site-to-Site IPsec VPN with Dynamic IP.Site-to-Site VPN On Router & ASA IKEv1.Site-to-Site VPN On Cisco ASA IKEv1.Site-to-Site VPN Main & Aggressive Mode.IPsec VPN Site to Multisite using IKEv1.IPsec VPN Site to Full Mesh using IKEv1.Concept of Generic Routing Encapsulation.Configure and Verify GRE with IPsec Lab.Concept of Dynamic Multipoint VPN DMVPN.Theory of Three Different DMVPN Deployment.Dynamic Multipoint VPN DMVPN Terminologies.Dynamic Multipoint VPN DMVPN Components.DMVPN Network Designs Three Different Phases.Configure Dynamic Multipoint VPN Phase 1.DMVPN Phase 1 command Explanation & Routing.Configure Dynamic Multipoint VPN Phase 2.Configure Dynamic Multipoint VPN Phase 3.Concept of IPsec Configuration on DMVPN.Configure & Verify DMVPN Phase 3 with IPsec.DMVPN Troubleshooting and verification.Site to Site VPN On Cisco Router IKEv2.Site-to-Site VPN On Cisco ASA IKEv2.
