Cisco SECURE 1.0: Deploying Tunnel-Based IPSec VPNs and GET VPNs

Overview/Description
Building a highly available virtual private network (VPN) network involves protecting it against expected failures, and enabling the VPN network to heal itself in a reasonable amount of time. Organizations have different uptime requirements for their networks. Frequently, when migrating from a traditional circuit-based WAN network, which had high availability mechanisms in place (backup dial interfaces, backup routers), the need to provide the same or better functionality in a VPN is paramount. Fully meshed virtual private networks (VPNs) present a scalability and manageability challenge and have traditionally been avoided by many sites. The Cisco Group Encrypted Transport (GET) VPN technology provides solutions to these challenges and allows organizations to easily deploy complex, redundant fully meshed networks. This course enables you to choose recommended high availability architectures, and to configure a highly available tunnel-based IP Security (IPSec) VPN and shows you how to configure and troubleshoot a Cisco IOS Software GET VPN.

Target Audience
Network professionals responsible for securing and managing their network infrastructures who have CCNA certification, CCNA Security certification (IINS) and a working knowledge of Microsoft Windows operating systems.

Expected Duration (hours)
2.5

Lesson Objectives

Cisco SECURE 1.0: Deploying Tunnel-Based IPSec VPNs and GET VPNs

describes how to plan the deployment of Cisco IOS site-to-site IPSec VPN high-availability features

describe how to use routing protocols for VPN failover

determine the optimal method of mitigating failures in a VTI-based VPN

determine the optimal method of mitigating failures in a DMVPN

describe the operation of a Cisco IOS GET VPN

describe how to plan the deployment of Cisco IOS GET VPN

configure a Cisco IOS GET VPN key server

configure a GET VPN key server

verify a Cisco IOS GET VPN key server

identify implementation guidelines for a Cisco IOS GET VPN key server

configure a Cisco IOS GET VPN group member

recognize how to troubleshoot a Cisco IOS GET VPN group member

configure a GET VPN group member

identify key features of GET VPN Key Server Clustering

sequence the steps to configure high availability mechanisms in a GET VPN

troubleshoot a GET VPN key server redundancy