Security

BGP

​EBGP/IBGP

​IBGP issues

​BGP Attributes/Parameters

​Distribute-list&Prefix-list

​BGP authentication

​Directly and Non-Directly connected neighbor

​BGP Peer-Group

​BGP Design

Time-based Acl

IPv6

-​IPv6 structure

-​Static/Dynamic routing

-​Access-list

-​Different ipv6 packet types

-​Eui-64

-​Global unique address

-​Local unique address

-​Multicast

-​Loopback

-​Link local

MPLS

Fhrp(Hsrp/Vrrp/Glbp)

Ios-Dhcp/Relay-Agent (Dora process)

Ntp

Basic Router&Switch security

Tftp-Server

Ip sla monitor

Dns

Switching

​Hist of switching

​Vlan

​Access/trunk port

​Intervlan-routing

​Spanning-tree protocol

​Portfast

​Uplinfast

​Backbone

​Bpdu guard/filter

​Port-security

​Dot1x-authentication

​Dhcp-snooping & dai

​Etherchannel

​Span/Rspan

​Vlan Acls

​Private vlan

​Vtp

​Ethernet-frame

[1] Cisco ASA

->Installation of ASA

->Interface Configuration

-> Traffic-Flow

Thru Firewall

To Firewall

->Static&Default Routes

->Dynamic Routing Protocols

RIP with Authentication & Redistribution

EIGRP with Authentication & Redistribution

OSPF with Authentication & Redistribution

BGP with Authentication & Redistribution

-> ASA as Dhcp / Relay-Agent

->NTP with Authentication

->Management Protocols

-> Redundent-interface

->Port-Channel

->Route Tracking Using Sla

->Backing up Files

->Translations

Dynamic NAT & Dynamic PAT Static NAT & Static PAT

Backup NAT with PAT Identity NAT

NAT-Exemption

Policy-NAT

->FHRP = HSRP / VRRP / GLBP ->Failover / High-Availablity

->Multi-Context / Security-Context

With Physical-interface , Sub-interface & Shared-interface

->Failover in Combination with Multi-Context

Active / Standby

Active / Active

->Zone-Based Firewall (ZBF)

[2] Cisco FirePower Threat Detection (FTD)

->Installation of FTD / FMC

->Basic Initialization of FTD / FMC thru CLI / GUI

-> Onboarding / Registeration of FTD on FMC ->Interface Configuration

->Static & Dynamic Routing Protocols With Redistribution (Rip / Ospf / Bgp)

->Inter-Zone Communication

->Translations

Auto-NAT

Manual-NAT ->High Availability

->Advance ACP

->VPN

-> NextGen Firewall Features

Geo-Location Block

Url Filteration

Application Visibilty Control (AVC)

IPS

[3] PALO-ALTO Firewall

->Installation of Palo-Alto Firewall

-> Basic Initialization of of Palo-Alto thru GUI

->Interface Configuration - IPv4/IPv6

-> Inter & Intra-Zone Commincation

->Static&Dynamic Routing Protocols - IPv4/IPv6

RIP Configuration

Authentication

Redistribution

Injecting Default Route

OSPF Configuration

Authentication

Redistribution

Injecting Default Route

Multi-Area Communication

Area-Types

Virtual-Link

BGP

EBGP/IBGP Configuration

Authentication

Redistribution

Next-Hop-Self

Route-Reflector

Route-Summarization

Injecting Default Route

->Translation

DNAT / SNAT DPAT / SPAT U-Turn NAT

->High Availability

->VPN

IPv4 / IPv6

Site-To-Site VPN Multi-Vendor VPN

-> NextGen Firewall Features

APP-ID Url Filtering

Content-ID User-ID Wild-Fire

Decryption

[4] VPN

->Point-To-Point GRE ->MGRE - Manual

-> DMVPN

PHASE I / II / III

Single & Dual Hub

->IPSEC

Router To Router

Router To ASA / ASA To ASA

Router To Router Thru ASA

Lan To Lan with NAT-T

Lan To Lan without NAT-T

IPv4 / IPv6

IPv6 To IPv6 Over IPv4

IKev1 / Ikev2

-> IPSec Over PTPGRE Tunnel Mode

Transport Mode

SVTI

-> IPSec Over DMVPN

Tunnel Mode

Transport Mode

->GET VPN

->RSA in Detail

->CA-Server in Detail

Operation

Root-CA / Intermediate-CA

Root Certificate / ID-Certificate

Certificate Chain

Records

HandShake Record

Change Cipher Spec Record

Alert Record

Application Data Record

-> SSL VPN

Remote-Access VPN AnyConnect VPN

Last updated