Network Security
Call 1-800-868-4858
 

Juniper AJVI - Advanced Juniper Networks IPSec VPN Implementations

Duration: 2 days
Tuition: $2500
Schedule: Juniper AJVI Training Schedule
Course No EDU-JUN-AJVI
 
Certification
This is the recommended Juniper Training for passing the JNCIS-FWV certification.
 
Overview
This two-day Juniper Training course is a survey of various IPSec VPN configurations as well as alternatives (i.e. GRE), and includes instruction on deploying dynamic routing over VPNs. Upon completing this course, a student should be able to return to work and successfully install, configure, and verify that a ScreenOS-based device is functioning in a VPN configuration. Through demonstrations and hands-on labs using Juniper SSG firewall, students gain experience in configuring, testing, and troubleshooting the VPN designs discussed in class.
 
Target Aduience
Network engineers, support personnel, reseller support, and others responsible for implementing NetScreen products utilizing the advanced features covered in this class.
 
 

Course Contents

Day 1

Chapter 1: Course Introduction

Chapter 2: ScreenOS VPN Basics Review

  • VPN Review
  • Verifying Operations
  • VPN Monitor
  • Lab 1: VPN Review

Chapter 3: VPN Variations

  • Dynamic Peers
  • Transparent Mode
  • Overlapping Addresses
  • Lab 2: VPN Variations

Chapter 4: Hub-and-Spoke VPNs

  • Concepts
  • Policy-Based Hub-and-Spoke
  • Route-Based, with No Policy, and NHTB
  • Route-Based with Policy
  • Centralized Control
  • AutoConnect-Virtual Private Networks
  • Lab 3: Hub-and-Spoke VPNs

Chapter 5: Routing over VPNs

  • Routing Overview
  • Configuring RIP
  • Configuring OSPF
  • Case Studies
  • Lab 4: Dynamic Routing

Day 2

Chapter 6: Using Certificates

  • Concepts and Terminology
  • Configuring Certificates and Certificate Support
  • Configuring VPNs with Certificates
  • Lab 5: Using Certificates

Chapter 7: Redundant VPN Gateways (Optional)

  • Redundant VPN Gateways
  • Other Options
  • Demo: Redundant VPN Gateways

Chapter 8: Generic Routing Encapsulation (Optional)

  • Configuring GRE

Chapter 9: Dial-Up IPSec VPNs

  • Basic Dial-up Configuration
  • Group IKE ID
  • XAUTH and Shared IKE ID

Appendix A: NetScreen-Remote

  • NetScreen-Remote Overview
  • Basic Dial-Up A-9
  • XAUTH/Shared IKE ID
  • Demo: Dial-Up VPNs
  • Lab 6: Dial-Up VPNs

 
 
Prerequisites

Completion of CJFV or equivalent product experience. Completion of SMF or equivalent product experience if using Security Manager. General networking knowledge, including Ethernet, TCP/IP, and routing concepts.
Copy Right (c) 2008 Cosmos Security Center Inc.
The leading Juniper, CISSP, Check Point Training Center		 Juniper :: CHKP/Nokia :: CISSP :: CheckPoint Training
Juniper Firewall Training, Juniper SSL Training, Juniper Routing Training, Juniper IDP Training