Book Image

CCNA Security 210-260 Certification Guide

By : Glen D. Singh, Michael Vinod, Vijay Anandh
Book Image

CCNA Security 210-260 Certification Guide

By: Glen D. Singh, Michael Vinod, Vijay Anandh

Overview of this book

With CCNA Security certification, a network professional can demonstrate the skills required to develop security infrastructure, recognize threats and vulnerabilities to networks, and mitigate security threats. The CCNA Security 210-260 Certification Guide will help you grasp the fundamentals of network security and prepare you for the Cisco CCNA Security Certification exam. You’ll begin by getting a grip on the fundamentals of network security and exploring the different tools available. Then, you’ll see how to securely manage your network devices by implementing the AAA framework and configuring different management plane protocols. Next, you’ll learn about security on the data link layer by implementing various security toolkits. You’ll be introduced to various firewall technologies and will understand how to configure a zone-based firewall on a Cisco IOS device. You’ll configure a site-to-site VPN on a Cisco device and get familiar with different types of VPNs and configurations. Finally, you’ll delve into the concepts of IPS and endpoint security to secure your organization’s network infrastructure. By the end of this book, you’ll be ready to take the CCNA Security Exam (210-260).
Table of Contents (19 chapters)

Configuring a site-to-site VPN using a Cisco ASA

In this section, we are going to take a look at configuring a site-to-site VPN tunnel using the Adaptive Security Appliance (ASA). Using the following topology, we will apply some fundamental configurations on both ASAs before configuring the VPN tunnel. We want to ensure the devices have basic connectivity between each other:

On ASA-1, the following configurations were applied:

  • GigabitEthernet1200.1.1.2/30 (Outside).
  • GigabitEthernet0192.168.2.1/24 (Inside).
  • PAT set to use the IP address on the Outside interface.
  • Set a default route to the ISP. In the lab configuration, the default gateway for ASA-1 is 200.1.1.1/30.

On ASA-2, the following configurations were applied:

  • GigabitEthernet1100.1.1.2/30 (Outside)
  • GigabitEthernet0192.168.4.1/24 (Inside)
  • PAT set to use the IP address on the Outside interface...