Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

CCNP SECURITY Concentration Exam SPVN-300-730 covers topics

• Cryptography Concepts
• VPN Foundations,
• IPSEC, Site to Site IPsec VPN
• DMVPN Concepts & IPSec over DMVPN ,
• FlexVPN
• Remote Access VPN on ASA and Routers.

This exam tests your knowledge of implementing secure remote communications with Virtual Private Network (VPN) solutions
COURSE CONTENT
Cisco Certifications

• CCNP Security Certifications
• Cisco Certification Exams
• SVPN 300-730 Overview

Cryptography

• What is Cryptography
• Goals of Cryptography
• What is Hashing and How it works
• Hashing Drawbacks
• Hashing with HMAC
• What is Encryption - Decryption
• Encryption Algorithms - Symmetric vs Asymmetric
• Crypt-analysis - Attacks
• Asymmetric Encryption - Drawbacks
• Public Key Infrastructure - PKI

Virtual Private Networks - VPN

• VPN-Introduction
• VPN Types
• VPN Logical Topologies
• VPN Default Lab Setup- Routers

IPSEC - Introduction

• what is IPSEC
• IPsec Modes - Tunnel vs Transport
• IPsec Security Services

IPSEC Site to Site VPN

• How IPsec VPN works
• 005 Step-1 Interesting Traffic Configuration
• Step-2 IKE Phase-1
• Step-3- IKE - Phase 2
• IKE Phase -2 Configuration- Verification

IKE Phases 1 -2 - Modes - Messages

• IKE Phases -Modes
• IKE Phase 1 - Main Mode
• IKE Phase 1 - Aggressive Mode
• Phase1 - Aggressive vs Main Mode
• IKE Phase 2 - Main Mode
• IPSEC VPN - Limitations

Dynamic Multipoint VPN - DMVPN

• DMVPN - Introduction
• DMVPN-Protocols
• DMVPN - mGre Tunnels
• DMVPN-NHRP Protocol - Messages
• VPN Default Lab Setup- Routers
• DMVPN-Basic Tunnel Configuration Example
• EIGRP Routing over DMVPN

DMVPN Phase 1

• DMVPN- Phases 1-2-3
• DMVPN Phase 1 - Tunnel Configuration
• DMVPN-Phase1 -EIGRP Routing
• DMVPN-Phase1 -OSPF Routing

DMVPN Phase 2

• DMVPN Phase 2-Tunnel Configuration
• DMVPN Phase 2-OSPF Routing
• DMVPN Phase 2-EIGRP Routing

DMVPN Phase 3

• DMVPN Phase 3 -Overview
• DMVPN Phase 3- Tunnel Configuration
• DMVPN Phase 3- EIGRP Routing
• DMVPN Phase 3- OSPF Routing

IPSEC over DMVPN

• IPSEC VPN - Limitations
• IPSec over DMVPN
• LAB - IPSec Over DMVPN

IKEv2 Foundations

• IPSEC KEv2
• IKEv1 vs IKEv2
• IKEv2 - Phase 1-IKE-SA_INIT_AUTH
• IKEv2 - Phase 2 - CHILD SA
• IKEv2 - Platform Support
• IKEv2 - Supported VPNs

IKEv2 - Site to Site VPN

• IKEv2- Site-Site VPN -Lab Setup
• IKEv2 -Site-Site VPN - Proposals
• IKEv2 -Site-Site VPN - Policy
• IKEv2 -Site-Site VPN – Key-Ring
• IKEv2 -Site-Site VPN - Profile
• IKEv2 -Site-Site VPN - IPSec
• IKEv2 -Site-Site VPN - Verification

FlexVPN

• FlexVPN Capabilities
• FlexVPN-IKEv2
• FlexVPN - Platform Support

FlexVPN SIte to Site VPN

• FlexVPN - SIte-SIte VPN - Cryptomaps
• FlexVPN-Site-SiteVPN- using Static VTI - PART 1
• FlexVPN-Site-SiteVPN- using Static VTI - PART 2
• FlexVPN-Site-SiteVPN- using Static VTI - PART 3

FlexVPN - HUB-SPOKE Tunnels

• FlexVPN - HUB - SPOKES tunnels
• FlexVPN - Dynamic VTI Interface - DVTI
• FlexVPN - Hub-Spoke Tunnels - PART 1
• FlexVPN - Hub-Spoke Tunnels - PART 2
• FlexVPN - Hub-Spoke Tunnels - PART 3
• FlexVPN - Hub-Spoke Tunnels - PART 4

IKEv2 Authorization Policy

• FlexVPN Authorization
• FlexVPN Hub-Spoke Routing Issues - Solutions
• IKEv2 Authorization Policy - Configuration - PART 1
• IKEv2 Authorization Policy - Configuration - PART 2

FlexVPN SPOKE-SPOKE Tunnels

• FlexVPN – Spokes to Spokes Tunnels
• Spokes to Spokes Tunnels - Configuration Overview
• Spokes to Spokes Tunnels - Configuration -PART 1
• Spokes to Spokes Tunnels - Configuration -PART 2
• Spokes to Spokes Tunnels - Configuration -PART 3
• Spokes to Spokes Tunnels - Configuration -PART 4
• Spokes to Spokes Tunnels - Configuration -PART 5
• Spokes to Spokes Tunnels - Configuration -PART 6
• NHRP Role in FlexVPN

Remote VPN- SSL VPN

• Remote Access VPN
• What is SSL - TLS
• How SSL-TLS Works
• What is SSL VPN
• SSL VPN Modes

ASDM Setup - Remote VPN Lab Setup

• ASDM- Adaptive Security Device Manager
• ASDM - Configuration
• ASDM-GNS3 Setup - PART 1
• ASDM-GNS3 Setup - PART 2
• Remote VPN - Lab Setup

Clientless VPN - Configuration

• SSL Clientless VPN -Configuration - PART 1
• SSL Clientless VPN -Configuration - PART 2
• SSL Clientless VPN - Configuration - Verify ASDM
• SSL Clientless VPN - ASDM Wizard
• Default Group Policy -Connection profiles
• New Group Policy -Connection profiles
• New User-Assigning Group Policy

Bookmarks-Group URL-ALIAS

• SSL VPN - Bookmarks
• Bookmarks with FQDN-DNS
• Tunnel-Group- ALIAS
• Tunnel-Group - URL Access
• Tunnel-Group - ALIAS - LAB-2

SSL VPN - Smart Tunnels

• Port Forwarding - Limitations
• Smart Tunneling
• Smart Tunnels- Configuration Pre-Requisite
• Smart Tunnels – Configuration

SSL VPN Tunnels - AnyConnect VPN

• SSL VPN – Tunnel Mode
• SSL VPN - Tunnel Mode – Configuration -PART 1
• Tunnel Mode – Configuration -PART 2
• AnyConnect Install-Verify SSL VPN