Brocade - Course Description

Course Description

Securing the Network - Embedded L2/L3 Security
(ETH 603)
Price: $1320 USD

Course Catalog - Find class dates and locations

Register for class - Login to Brocade Learning System

Prerequisites | Course Content | Course Objectives | Course Outline | Who Should Attend

Prerequisites
To fully benefit from this course you should have attended the Basic Switch/Router Configuration and Management (TRNG 0103). It is also recommended that you have previous exposure to general network management issues in a Foundry Networks environment. A working knowledge of Foundry Networks’ CLI is a must.

We strongly recommend students to bring their own PC to act as the console and client during labs. Recommended Personal hardware:

Laptop Personal Computer with Windows 2000 with Service Pack 3 or Windows XP with service Pack 1
Ethernet NIC card
CD Drive
Serial Interface (DB-9 Connector)
Netscape 6.1 or better or Internet Explorer 5.5 or better

Course Content
The TRNG-0603 IronShield Security course is an in-depth study of the features that Foundry has deployed in its full range of Layer 2-3 switches, routers, and intelligent traffic management devices to implement secure networks. It covers the operations, configuration, troubleshooting and network analysis using Foundry’s products. Upon completion of this course, you will be able to use the Foundry Networks’ devices as policy enforcement points.

Course Objectives
After completing this course, the student will be able to:

Identify Layer 2 and Layer 3 security issues and how they are addressed on the Foundry Networks devices.
Describe Foundry Networks security strategies and initiatives.
Implement the typical Foundry Networks Layer 2 and Layer 3 security features thus demonstrating the hardening of the Foundry devices.
Use imbedded Foundry tools to monitor and identify basic security breeches.
Configure Foundry devices to use third party tools (TACACS+/RADIUS) to implement security.

Course Outline

Ironshield Introduction

Describe network security
Describe security planning
List levels of security defined by Foundry
Describe common attacks
Describe IronShield.
Determine what Foundry devices to protect
Describe a network intrusions
Describe how to recognize network intrusion
Warning Banners
Determine why Warning Banners are used
Set up Warning Banners
Identify proper warning banner text
Passwords
Describe and select Strong Passwords
Implement passwords
Determine where passwords are appropriate
List the different login password formats for Foundry devices
Describe TACAS+/RADIUS function
Configure TACACS+/RADIUS on Foundry Networks devices
Set logins to TACACS+/RADIUS confirmation
Setup Authorization with TACACS+/RADIUS
Configure VLANs for management, exclude VLANs from management
Secure Shell (SSH)
Describe Secure Shell (SSH)
Determine why use SSH
Implement SSH
Configure SSH on Foundry devices
Define and use keys
Transfer Files from a Foundry device using Secure Copy
SNMP V1, V2, V3
Describe the different SNMP versions
Configure SNMP version 1 and 2
Configure SNMP version 3
Describe advantages and disadvantages of the different versions of SNMP
Block SNMP access to the Internet
Block SNMP access from the intranet
Specify SNMP views
Unnecessary Protocols
Determine Potentially Unnecessary Components
Deny access to protocols that might not be used in a network
DoS
Define what is a DoS attack
Determine how to recognize a DoS attack
Setup for TCP Syn Attack prevention
Describe a Smurf attack
Set up for Smurf Attack preventions
Describe TCP SYN Attack preventions
Setup limits to Broadcast Packets
Setup protection against DoS attacks
Describe Spoofing
Defending against Spoofing with ACLs
Create and apply Inbound and Outbound Anti-Spoofing ACLs.
Time and Logging
Define the value of having synchronized time.
Set SNTP (Simple Network Time Protocol) (RFC 1119, 1305) on Foundry Devices
Describe methods that Foundry uses for logging
Setup logging featuresSetup the Foundry Device to send to an External Syslog Server
802.1x Port Security
Describe 802.1x
List 802.1x uses
Configure and deploy 802.1x
Worms
Describe what a worm is
Describe how a worm can work
Discuss possible worm defenses
Special Issues
Discuss possible system performance issues when implementing security
Discuss pros and cons of implementing security
List the Administration duties
Who Should Attend
The Target Audience for this course is as follows:
- Customers or Resellers who are experienced with Foundry Networks Products
- Network Security personnel responsible for the implementation of network security policies and procedures.
- Network Administrators responsible for implementing and managing small to large enterprise and ISP networks.
- Network technicians with installation, configuration, and troubleshooting experience with Foundry Products
- Network support staff that will act as network device installers and first-line support for a local to global sized business environment.

Course Description

Service & Support