Networking · Intermediate

CCNA Security online course

Device hardening, AAA, filtering, and site-to-site VPN ideas that still matter on IOS-XE, even though the old IINS exam numbers are retired.

Who it is for

Engineers who already understand CCNA switching and routing.

You should already know

A CCNA-level lab and a pair of routers you are allowed to break.

You will be able to

  • Lock down device access with AAA
  • Filter traffic with ACLs and zones
  • Describe IPsec site-to-site building blocks

Lessons

  1. AAA on network devices Authentication, authorization, accounting — local fallback and RADIUS/TACACS+.
  2. Filtering and zones How classic ACLs and zone-based policy both enforce a boundary.
  3. Site-to-site IPsec IKE, interesting traffic, and the two SAs you will debug at 2 a.m.
  4. What Is Cisco ACS? Centralized AAA for Network Access Control Learn how Cisco ACS centralizes authentication, authorization, and accounting for device administration, VPN, wireless, and network admission control.
  5. Install Cisco ACS in a VMware Virtual Machine Learn how to install Cisco ACS from an ISO image in VMware Workstation, VMware Player, or VMware ESXi, including VM creation, storage, ISO attachment, boot, and verification.
  6. Configure Cisco ACS for AAA Device Administration Learn to configure Cisco ACS for centralized TACACS+ device administration with network device groups, users, shell profiles, authorization policies, and Cisco IOS AAA.
  7. Password Protection on Cisco IOS Devices Learn how to protect Cisco IOS console, VTY, and privileged EXEC access with enable secret, local users, SSH, ACLs, verification, and recovery practices.
  8. AAA Explained: Authentication, Authorization, and Accounting on Cisco Devices Learn how AAA controls administrative access on Cisco devices, including authentication, authorization, accounting, local databases, RADIUS, TACACS+, and Cisco Secure ACS.
  9. Add and Manage a Router in Cisco Configuration Professional (CCP) Learn how to prepare a Cisco router for Cisco Configuration Professional, configure web management and local privilege-15 access, and add the router to a CCP community.
  10. Install and Enable Cisco ASA Security Device Manager (ASDM) Learn to upload an ASDM image to Cisco ASA flash, enable HTTPS management, create a local administrator, and install the ASDM Launcher.
  11. Cisco ASA Security Levels Explained Learn how Cisco ASA security levels from 0 to 100 control default traffic flow between inside, DMZ, and outside interfaces, including stateful return traffic.
  12. Basic IT Security Terms: Assets, Vulnerabilities, Threats, Risk, and the CIA Triad Learn essential IT security terms, including assets, vulnerabilities, threats, attacks, exploits, risk, controls, and the confidentiality, integrity, and availability triad.
  13. CCNA Security Online Course: Securing Cisco Networks Learn foundational Cisco network security: IOS hardening, AAA, ACLs, Layer 2 protection, firewalls, IPS, cryptography, IPsec VPNs, monitoring, and troubleshooting.
  14. Cisco ACS Initial Setup and Network Configuration Learn how to run the Cisco ACS setup command, configure hostname, IPv4, DNS, and the first administrative account, then validate management access.
  15. Cisco ASA Features and Security Services Learn how Cisco ASA provides stateful firewalling, ACLs, NAT, VPN, AAA, routing, DHCP, application inspection, and high availability.
  16. Cisco ASA Initial Setup and Remote Management Configuration Learn how to configure a Cisco ASA from the console, set identity and passwords, configure a management interface, enable SSH and ASDM, verify settings, and save the configuration.
  17. Cisco ASA Overview: Models, Features, and Firewall Roles Learn what Cisco ASA is, how stateful firewalling, NAT, VPN, routing, and inspection work, and how common ASA models compare.
  18. Cisco ASDM GUI Overview for ASA Firewalls Learn what Cisco ASDM is, how to authenticate, read the dashboard, and manage ASA firewall policies, interfaces, routing, NAT, VPNs, and monitoring.
  19. How to Download Cisco Configuration Professional (CCP) Learn how to select, authenticate, accept terms, download, and verify Cisco Configuration Professional from Cisco's software download portal.
  20. Cisco Configuration Professional (CCP) Example: Changing a Router Hostname Learn how to change a Cisco router hostname with Cisco Configuration Professional, deliver the configuration, save it to startup-config, and verify the result with IOS CLI.
  21. Installing Cisco Configuration Professional (CCP) Learn how to install Cisco Configuration Professional on a supported workstation, verify prerequisites, choose an installation folder, and prepare CCP for router management.
  22. Cisco Configuration Professional (CCP) Overview Learn what Cisco Configuration Professional is, how it manages Cisco IOS routers, its configuration and monitoring features, and how it compares with CCP Express and Cisco SDM.
  23. Cisco Network Foundation Protection (NFP) Framework Learn how Cisco Network Foundation Protection secures the management, control, and data planes of routers and switches with practical IOS examples.
  24. Confidentiality, Integrity, and Availability (CIA) Triad Learn the CIA triad: confidentiality, integrity, and availability, including security controls, threats, examples, and troubleshooting techniques for CCNA Security.
  25. Configure Cisco ACS for AAA Device Administration Learn how to configure Cisco ACS for centralized AAA device administration with NDGs, identity groups, internal users, authorization policies, shell profiles, and Cisco IOS TACACS+ integration.
  26. Configure a Cisco Router as an NTP Client Learn how to configure a Cisco IOS router as an NTP client, verify synchronization, understand NTP status fields, and troubleshoot UDP port 123 connectivity.
  27. Configure Cisco Routers to Use ACS for AAA with TACACS+ Learn to configure a Cisco IOS router for ACS-based TACACS+ authentication and EXEC authorization, with local credentials as a controlled fallback.
  28. How to Enable SSH on a Cisco Router Learn how to configure SSH-only remote management on a Cisco IOS router with a hostname, domain name, RSA keys, local user account, and VTY lines.
  29. Hacking Methodology: Attack Lifecycle and Defensive Countermeasures Learn the defensive hacking methodology lifecycle: footprinting, scanning, enumeration, compromise, privilege escalation, persistence, concealment, and security controls.
  30. Install Cisco ACS in a Virtual Machine Learn how to install Cisco ACS from an ISO in VMware Workstation or ESXi, including VM sizing, ISO attachment, boot steps, verification, and troubleshooting.
  31. IT Security Design Guidelines: Least Privilege, Defense in Depth, Separation of Duties, and Auditing Learn how least privilege, defense in depth, separation of duties, and auditing guide secure network infrastructure design and operation.
  32. Configuring and Securing Password Access on Cisco IOS Devices Learn how to secure Cisco IOS console, AUX, VTY, Telnet, SSH, and privileged EXEC access with line passwords, enable secret, local users, AAA, ACLs, and verification commands.
  33. Protecting the Network Control Plane Learn how Cisco IOS control-plane protection works, including CoPP, CPPr, routing authentication, policy design, validation, and troubleshooting.
  34. Protecting the Network Data Plane Learn how Cisco routers and switches protect transit traffic with ACLs, anti-spoofing, DoS mitigation, rate limiting, IDS/IPS, and port security.
  35. Protecting the Management Plane on Cisco IOS Devices Learn to secure Cisco IOS administration with SSH, AAA, ACLs, RBAC, NTP, management VLANs, and safe operational practices.
  36. Risk and Countermeasure Definitions in Network Security Learn how threats, vulnerabilities, risk, and countermeasures relate in network security, including administrative, physical, and technical controls.
  37. Secure Cisco IOS Images and Configuration Files with IOS Resilient Configuration Learn how Cisco IOS Resilient Configuration protects the running IOS image and startup configuration from remote deletion or tampering.
  38. What Is Cisco ACS? Centralized AAA for Network Access Control Learn how Cisco ACS centralizes authentication, authorization, and accounting for device administration, wireless, VPN, and network admission control.