The Implementing Advanced Cisco Unified Wireless Security (IAUWS) is a 5 day ILT course, designed to help students prepare for the CCNP-Wireless certification, a professional level certification specializing in the wireless field. The goal of the IAUWS v1.0 is to provide network professional with information to prepare them to secure the wireless network from security threats via appropriate security policies and best practices, as well as ensure the proper implementation of security standards and proper configuration of security components. The IAUWS reinforces the instruction by providing students with hand-on labs to ensure students thoroughly understand how to secure a wireless network.

Laptops are provided to participate in the hands-on labs. If you desire to use your own laptop, please bring a laptop computer with an available 32-bit CardBus slot and an Ethernet port as well as an internal wireless NIC, 802.11a/b/g. The laptop’s operating systems must be either MS Windows 2000 (SP4) or XP. The laptop should also have a 9-pin serial port or USB to serial adapter. IN ADDITION, you will need administrator rights to the laptop to install drivers for the wireless client used in class.

Duration

5 days, Instructor-led classroom training (Approximately 7 hours each day)

Prerequisites

To fully benefit from this course, it is recommended that you have the following prerequisite skills and knowledge:

• Cisco Certified Networking Associate – CCNA
• Cisco Certified Networking Associate Wireless– CCNA Wireless

Associated Certifications

• CCNP Wireless

Who Should Attend

This course is intended for the following audience:

• Wireless Network Engineer
• Mid-level Wireless Support Engineer
• Wireless Test Engineer
• Wireless Network Designer

Course Objectives

After completing this course, the student will be able to:

• Describe organizational and regulatory Security Policies
• Describe how to segment enterprise and quest WLAN traffic
• Configure administration and security on a WLAN controller
• Configure administration and security on a WLAN controller using TACACS+
• Secure client devices using EAP authentication
• Configure Cisco Secure Services Client
• Design and implement guest services on a WLAN controller.
• Configure the WLAN controller for Cisco NAC
• Configure Local authentication on the WLAN controller
• Configure Management Frame Protection (MFP) on the WLAN controller
• Implement Access Control Lists (ACL) on a WLAN controller
• Describe WLAN controller based Intrusion Detection Signatures (IDS)
• Configure the WLAN controller to integrate with IPS and IDS appliances

Course Outline

1. Organizational and Regulatory Security Policies
1. Describing Regulatory Compliance
2. Segmenting Traffic
3. Configuring Administrative Security
4. Managing WLAN Controller and Cisco WCS Alarms
5. Identifying Security Audit Tools
2. Secure Client Devices
1. Configuring EAP Authentication
2. Describing the Impact of Security on Application and Roaming
3. Configuring Cisco Secure Services Client
4. Troubleshooting Wireless Connectivity
3. Design and Implement Guest Access Services
1. Describing Guest Access Architecture
2. Configuring the WLAN to Support Guest Access
3. Configuring Guest Access Accounts
4. Troubleshooting Guest Access
4. Design and Integrate Wireless Network with NAC
1. Introducing the Cisco NAC Appliance Solution
2. Configuring the Controller for Cisco NAC Out-of-Band Operations
5. Implement Secure Wireless Connectivity Services
1. Configuring Authentication for the WLAN Infrastructure
2. Configuring Management Frame Protection
3. Configuring Certificate Services
4. Implementing Access Control Lists
5. Configuring Identity Based Networking on the Controller
6. Troubleshooting Secure Wireless Connectivity
6. Internal and Integrated External Security Mitigations
1. Mitigating Wireless Vulnerabilities
2. Using Controller-Based IDS
3. Understanding Cisco’s End-to-End Security Solutions
4. Integrating Cisco WCS with Wireless IPS

Hands-on Lab Exercises

• Lab 1-1: Segmenting Traffic Identifying
• Lab 1-2: Configuring Administrative Security
• Lab 2-1: Configuring EAP Authentication on the Clients
• Lab 2-2: Configuring Cisco Secure Services Client
• Lab 2-3: Troubleshooting Wireless Connectivity
• Lab 3-1: Configure the WLAN to Support Guest Access
• Lab 3-2: Configure a Controller to use the NAC Guest Server for Authentication
• Lab 3-3: Troubleshooting Guest Access Issues
• Lab 4-1: Configuring the Controller for Cisco NAC
• Lab 5-1: Configuring Local Authentication on the WLAN Controller
• Lab 5-2: Configuring H-REAP for WAN Failure
• Lab 5-3: Configuring Management Frame Protection
• Lab 5-4: Configuring Certificate Services
• Lab 5-6: Implementing IBN
• Lab 5-5: Implementing Access Control Lists
• Lab 5-7: Troubleshooting H-REAP Security Issues
• Lab 5-8: Troubleshooting Secure Wireless Connectivity
• Lab 6-1: Using Controller-Based IDS

Call for details. 949-477-2000 option 1