SIMOS 1.0: Deploying Secure Site-to-Site Connectivity Solutions (Part 2)

Overview/Description
Dynamic multipoint VPNs are a feature of Cisco IOS devices that enable scalable and manageable VPN deployments. This course covers the configuration of dynamic multipoint VPNs on Cisco hardware. This course is one of a series in the Skillsoft learning path that prepares the learner for Cisco certification exam 300-209 SIMOS. This exam counts toward CCNP Security certification.

Target Audience
Network security engineers and learners preparing for Cisco CCNP Security certification

Prerequisites
None

Expected Duration (hours)
1.5

Lesson Objectives

SIMOS 1.0: Deploying Secure Site-to-Site Connectivity Solutions (Part 2)

• start the course
• describe the use of virtual tunnel interfaces to replace crypto maps and simplify VPN configuration
• set up an IKE security association between two peers
• set authentication method and lifetime for basic IKE peering
• verify an IKE peering association between two devices
• configure a static route into a VTI point-to-point tunnel
• verify a static route into a VTI point-to-point tunnel
• describe dynamic virtual tunnel interfaces for creating scalable hub and spoke enterprise VPN topologies
• configure the hub router for dynamic VTI point-to-point tunnels
• complete configuration of dynamic VTI point-to-point tunnels
• verify operation of dynamic VTI point-to-point tunnels
• describe the components of dynamic multipoint VPNs
• describe the use of generic route encapsulation as a tunneling protocol in dynamic multipoint VPNs
• describe the use of next hop resolution protocol in dynamic multipoint VPNs
• describe dynamic multipoint VPNs routing operation
• configure dynamic multipoint VPNs on a hub device
• configure dynamic multipoint VPNs on a client or spoke device
• configure dynamic multipoint VPN routing
• verify the operation of a dynamic multipoint VPN system
• configure a Dynamic Multipoint VPN on Cisco Adaptive Security Appliance