Book Image

CCNA Security 210-260 Certification Guide

By : Glen D. Singh, Michael Vinod, Vijay Anandh
Book Image

CCNA Security 210-260 Certification Guide

By: Glen D. Singh, Michael Vinod, Vijay Anandh

Overview of this book

With CCNA Security certification, a network professional can demonstrate the skills required to develop security infrastructure, recognize threats and vulnerabilities to networks, and mitigate security threats. The CCNA Security 210-260 Certification Guide will help you grasp the fundamentals of network security and prepare you for the Cisco CCNA Security Certification exam. You’ll begin by getting a grip on the fundamentals of network security and exploring the different tools available. Then, you’ll see how to securely manage your network devices by implementing the AAA framework and configuring different management plane protocols. Next, you’ll learn about security on the data link layer by implementing various security toolkits. You’ll be introduced to various firewall technologies and will understand how to configure a zone-based firewall on a Cisco IOS device. You’ll configure a site-to-site VPN on a Cisco device and get familiar with different types of VPNs and configurations. Finally, you’ll delve into the concepts of IPS and endpoint security to secure your organization’s network infrastructure. By the end of this book, you’ll be ready to take the CCNA Security Exam (210-260).
Table of Contents (19 chapters)

To get the most out of this book

To get started, you'll need the following:

  • Cisco IOS Router 3725 or another IOS router with the Zone-Based Policy Firewall and IPS capabilities
  • Cisco IOS Switch 2960
  • Cisco ASA 5505 or higher
  • Cisco Configuration Professional (CCP) will provide a GUI during the configuration process on the IOS router
  • Java Runtime Environment
  • Any modern web browser, preferably Internet Explorer

If you're unable to get the physical hardware equipment, you can use a network simulator such as GNS3 (https://www.gns3.com/) and use the IOS images. Cisco Packet Tracer (https://www.netacad.com/) can also be used; however, the appliances in Cisco Packet Tracer does not support all the features and commands needed for CCNA security training.

Conventions

There are a number of text conventions used throughout this book.

CodeInText: Indicates code words in text, database table names, folder names, filenames, file extensions, pathnames, dummy URLs, user input, and Twitter handles. Here is an example: "On the victim's end, for every SYN packet received, it must reply with a SYN/ACK packet."

A block of code is set as follows:

vlan 200
private-vlan primary
private-vlan association 201
!
vlan 201
private-vlan isolated

When we wish to draw your attention to a particular part of a code block, the relevant lines or items are set in bold:

vlan 200
private-vlan primary
private-vlan association 201
!
vlan 201
private-vlan isolated

Any command-line input or output is written as follows:

Router1(config)#aaa accounting exec default start-stop group tacacs+
Router1(config)#aaa accounting commands 15 default start-stop group tacacs+
Router1(config)#aaa accounting network default start-stop group tacacs+

Bold: Indicates a new term, an important word, or words that you see onscreen. For example, words in menus or dialog boxes appear in the text like this. Here is an example: "Once again, navigate to Configuration | Device Setup | Routing | Static Routes on the ASDM. Click on Add."

Warnings or important notes appear like this.
Tips and tricks appear like this.