IT certification lab simulation » cisco training

dynamips lab:Cisco IOS SSL VPN on dynamips test note

admin — Thu, 02 Apr 2009 07:55:54 +0000

This test note describes how to configure Cisco SSL VPN on Cisco IOS routers. The whole lab is build on Dynamips 7200 simulator.

SSL VPNs use a methodology to transport private data across the public Internet. Instead of relying upon the end user to have a configured client on an agency-managed computer, SSL VPNs use SSL /HTTPS which is the secure transport mechanism built-in to all standard Web browsers. Using an SSL VPN, the connection between the user and the internal resource occurs via an HTTPS connection at the application-layer.

I have completed all the Cisco SSL labs on Dynamips 7200 simulator, the topology is as follow:

The Dynagen configuration is as follow:

autostart = false
[localhost]
port = 7200
udp = 10000
workingdir = ..\Temp\

[[router R1]]
image = ..\IOS\c7200-advsecurityk9-mz.124-9.T1.bin
model = 7200
console = 3001
npe = npe-400
ram = 128
confreg = 0×2142
exec_area = 64
slot0 = PA-C7200-IO-FE
slot1 = PA-FE-TX
f0/0 = SW1 1
f1/0 = SW1 2
[[ethsw SW1]]
1 = dot1q 1
2 = dot1q 1
3 = access 1 NIO_gen_eth:\Device\NPF_{E4377B71-C2A8-40A9-9FB6-639EE19D2F75}

1. Preparing for Cisco Web VPN.
c7206(config)# int fa0/0

c7206(config-if)# ip add 198.1.1.1 255.255.255.0

c7206(config-if)# no shutdown

c7206(config-if)# exit

c7206(config)# int fa1/0

c7206(config-if)# ip add 10.10.1.1 255.255.255.0

c7206(config-if)# no shutdown

c7206(config-if)# exit

c7206(config)# aaa new-model

c7206(config)# aaa authentication login default local

!define the default aaa authentication list, allow the administrator to login this router, this configuration is foreign to the Web VPN.
!

c7206(config)# aaa authentication login aaa-webvpn local

c7206(config)# username steve6307 password cisco

!define the WebVPN authentication list.
!

c7206(config)# webvpn gateway mygateway

c7206(config-webvpn-gateway)# ip address 198.1.1.1 port 443

c7206(config-webvpn-gateway)# inservice

!define the WebVPN gateway address and port, usually the port is 443.
!

c7206(config)# webvpn context mywebvpn-context1

c7206(config-webvpn-context)# gateway mygateway domain group1

c7206(config-webvpn-co
ntext)# aaa authentication list aaa-webvpn

c7206(config-webvpn-context)# inservice

!define a WebVPN context. You must select a gateway and a aaa authentication list for each context. The domain name is very important to the configuration, because the end user will select the context by this domain name in the future.
2. Basic feature test(Web browsing).
I used Firefox to test the WebVPN feature. I entered “https://198.1.1.1/group1″ in the address bar, and then I saw the WebVPN home page.

Note: the url format is https://webvpn_gateway_addr/context_domain_name

I entered my username and password in the dialog box, and then click “Login”.

Now I have successfully logon the webvpn!

I entered the Internal Server IP address in the URL page, and then I accessed the internal server web page successfully.

3. WebVPN extended services.
Now, let’s talk about how to configure the webvpn extended services:

1. File-access feature.

2. Custom the url-list.

3. Port-forward feature.

3.1. File-access feature
The file-access feature can provide browsing and file access of files on the windows file server (NetBIOS name service server).

To use the file access-feature, the user must have “file-access file-entry file-browsing” privilege.

c7206(config)# webvpn context mywebvpn-context1

c7206(config-webvpn-nbnslist)# nbns-server 10.10.1.2

c7206(config-webvpn-nbnslist)# exit

!You must define the NetBIOS name server for IOS WebVPN. In fact, this is optional if you use the ip address to access the file server in the future.
!

c7206(config-webvpn-context)# policy group context1-policy

c7206(config-webvpn-group)# functions file-access

c7206(config-webvpn-group)# functions file-browse

c7206(config-webvpn-group)# functions file-entry

c7206(config-webvpn-group)# exit

!define the group policy for this context, assign the “file-access file-entry file-browsing” privilege.
!

c7206(config-webvpn-context)# default-group-policy context1-policy

!assign the group policy as default policy.
Feature test:
Login WebVPN again, I saw the page as follow:

I entered “\\10.10.1.2″ as the network path, and then the browser prompted me to enter my username and password to access the resources of my file server:

3.2. Custom the url-list
c7206(config-webvpn-context)# url-list myurl

c7206(config-webvpn-url)#url-text “Home Page” url-value http://10.10.1.2

c7206(config-webvpn-url)#url-text “Site2″url-value http://10.10.1.3

c7206(config-webvpn-context)#policy group context1-policy

c7206(config-webvpn-group)#url-list myurl

Feature test:
Login WebVPN again, I saw the page as follow:

3.3. Port-forward
Port-forward feature provides access for remote end users to client and server applications that communicate over known, fixed TCP ports. Each internal server and port number that the user can have access to has to be configured on the gateway. The entries specify the local port number and the destination server name and port number to use for TCP port forwarding.

c7206(config-webvpn-context)# port-forward myport

c7206(config-webvpn-port-fwd)# local-port 2323 remote-server 10.10.1.2 remote-port 23 description test

c7206(config-webvpn-port-fwd)# exit

c7206(config-webvpn-context)# policy group context1-policy

c7206(config-webvpn-group)# port-forward myport

!when I login the WebVPN, the browser load the JAVA App, and then I can telnet the internal server via telnet localhost 2323 port.

Feature test:
Login WebVPN again, I saw the page as follow:

Click “Application Access”, and then the browser can load the java app.

Flickr : cisco exam, cisco simulator, cisco training, dynagen, dynamips, vpn

Cisco IOS site2site ipsec vpn on dynamips

admin — Thu, 02 Apr 2009 07:44:15 +0000

The Dynagen configuration is as follow:

autostart = false
[localhost]
port = 7200
udp = 10000
workingdir = ..\Temp\

[[router R3]]
image = ..\IOS\c3620-i-mz.122-37.bin
model = 3620
console = 3003
ram = 32
confreg = 0×2142
exec_area = 16
mmap = false
slot0 = NM-1FE-TX
slot1 = NM-4T
f0/0 = SW1 3
[[ethsw SW1]]
1 = dot1q 1
2 = dot1q 1
3 = dot1q 1
4 = access 1 NIO_gen_eth:\Device\NPF_{E4377B71-C2A8-40A9-9FB6-639EE19D2F75}

1. The configuration of R1

London(config)#interface Loopback0London(config-if)#ip address 10.1.1.1 255.255.255.0

London(config)#interface Serial1/1

London(config-if)#ip address 173.16.1.1 255.255.255.252

London(config-if)#no shutdown

London(config)#ip route 0.0.0.0 0.0.0.0 173.16.1.2

London(config)#crypto isakmp enable

London(config)#crypto isakmp policy 10

London(config-isakmp)#hash md5

London(config-isakmp)#authentication pre-share

London(config-isakmp)#encryption 3des

London(config-isakmp)#group 2

London(config)#crypto isakmp key cisco1234 address 173.16.1.5

London(config)#crypto ipsec transform-set ccsp esp-des esp-md5-hmac

London (cfg-crypto-trans)#mode tunnel

London(config)#crypto map cisco 10 ipsec-isakmp

London(config-crypto-map)#set peer 173.16.1.5

London(config-crypto-map)#set transform-set ccsp

London(config-crypto-map)#match address 101

London(config)#access-list 101 permit ip 10.1.1.0 0.0.0.255 10.2.2.0 0.0.0.255

London(config)#interface Serial1/1

London(config-if)#crypto map cisco

2. The configuration of R2

Denver(config)#interface Loopback0Denver(config-if)#ip address 10.2.2.1 255.255.255.0

Denver(config)#interface Serial1/0

Denver(config-if)#ip address 173.16.1.5 255.255.255.252

Denver(config-if)#no shutdown

Denver(config)#ip route 0.0.0.0 0.0.0.0 173.16.1.6

Denver(config)#crypto isakmp enable

Denver(config)#crypto isakmp policy 10

Denver(config-isakmp)#hash md5

Denver(config-isakmp)#authentication pre-share

Denver(config-isakmp)#encryption 3des

Denver(config-isakmp)#group 2

Denver(config)#crypto isakmp key cisco1234 address 173.16.1.1

Denver(config)#crypto ipsec transform-set ccsp esp-des esp-md5-hmac

Denver(cfg-crypto-trans)#mode tunnel

Denver(config)#crypto map cisco 10 ipsec-isakmp

Denver(config-crypto-map)#set peer 173.16.1.1

Denver(config-crypto-map)#set transform-set ccsp

Denver(config-crypto-map)#match address 101

Denver(config)#access-list 101 permit ip 10.2.2.0 0.0.0.255 10.1.1.0 0.0.0.255

Denver(config)#interface Serial1/0

Denver(config-if)#crypto map cisco

Flickr : , cisco exam, cisco simulator, cisco training, dynagen, dynamips

dynamips lab:Cisco IOS l2tp voluntary tunnel mode on dynamips

admin — Thu, 02 Apr 2009 07:41:03 +0000

I have completed this lab on Dynamips 7200 simulator, the topology is as follow:

The Dynagen configuration is as follow:

autostart = false
[localhost]
port = 7200
udp = 10000
workingdir = ..\Temp\

[[router R2]]
image = ..\IOS\c7200-advsecurityk9-mz.124-9.T1.bin
model = 7200
console = 3002
npe = npe-400
ram = 128
confreg = 0×2142
exec_area = 64
mmap = false
slot0 = PA-C7200-IO-FE
slot1 = PA-4T
f0/0 = SW1 2
s1/0 = R3 s1/1
[[router R3]]
image = ..\IOS\c3620-i-mz.122-37.bin
model = 3620
console = 3003
ram = 32
confreg = 0×2142
exec_area = 16
mmap = false
slot0 = NM-1FE-TX
slot1 = NM-4T
f0/0 = SW1 3
[[ethsw SW1]]
2 = dot1q 1
3 = dot1q 1
4 = access 1 NIO_gen_eth:\Device\NPF_{E4377B71-C2A8-40A9-9FB6-639EE19D2F75}

1. ENT LNS L2TP Configuration (R2).

ENT_LNS(config)#interface FastEthernet0/0ENT_LNS(config-if)#ip address 10.10.1.1 255.255.255.0

ENT_LNS(config-if)#no shutdown

ENT_LNS(config)#interface Serial1/0

ENT_LNS(config-if)#ip address 173.16.1.5 255.255.255.252

ENT_LNS(config-if)#no shutdown

ENT_LNS(config)#ip route 0.0.0.0 0.0.0.0 173.16.1.6

ENT_LNS(config)#username cisco@cisco.com password 0 cisco

ENT_LNS(config)#vpdn enable

ENT_LNS(config)#vpdn-group myl2tp

ENT_LNS(config-vpdn)#accept-dialin

ENT_LNS(config-vpdn-acc-in)#protocol l2tp

ENT_LNS(config-vpdn-acc-in)#virtual-template 1

ENT_LNS(config-vpdn-acc-in)#exit

ENT_LNS(config-vpdn)#no l2tp tunnel authentication

ENT_LNS(config)#interface Virtual-Template1

ENT_LNS(config-if)#ip unnumbered FastEthernet0/0

ENT_LNS(config-if)#encapsulation ppp

ENT_LNS(config-if)#peer default ip address pool l2tp-user

ENT_LNS(config-if)#ppp authentication chap

ENT_LNS(config)#ip local pool l2tp-user 10.10.1.50 10.10.1.59

2. Windows Client Configuration.
First of all, modify the windows register as follow and restart the windows:

REGEDIT4 [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Rasman\Parameters]

“ProhibitIpSec”=dword:00000001

Then use the windows dialer configuration guide to complete the configuration.

Flickr : cisco, cisco exam, cisco simulator, cisco training, dynagen, dynamips

dynamips lab:Cisco IOS Easy VPN Server & Remote on Dynamips

admin — Thu, 02 Apr 2009 07:34:09 +0000

This test note describes how to configure Cisco Remote access IPSec VPN on Cisco IOS routers.

I have completed this lab on Dynamips 7200 simulator, the topology is as follow:

The Dynagen configuration is as follow:

autostart = false
[localhost]
port = 7200
udp = 10000
workingdir = ..\Temp\

[[router R1]]
image = ..\IOS\ c7200-advsecurityk9-mz.124-9.T1.bin
model = 7200
console = 3001
npe = npe-400
ram = 128
confreg = 0×2142
exec_area = 64
mmap = false
slot0 = PA-C7200-IO-FE
slot1 = PA-4T
f0/0 = SW1 1
s1/1 = R3 s1/0
[[router R2]]
image = ..\IOS\c3640-ik9o3s-mz.124-10.bin
model = 3640
console = 3002
ram = 128
confreg = 0×2142
exec_area = 64
mmap = false
slot0 = NM-1FE-TX
slot1 = NM-4T
f0/0 = SW1 2
s1/0 = R3 s1/1
[[router R3]]
image = ..\IOS\c3620-i-mz.122-37.bin
model = 3620
console = 3003
ram = 32
confreg = 0×2142
exec_area = 16
mmap = false
slot0 = NM-1FE-TX
slot1 = NM-4T
f0/0 = SW1 3
[[ethsw SW1]]
1 = dot1q 1
2 = dot1q 1
3 = dot1q 1
4 = access 1 NIO_gen_eth:\Device\NPF_{E4377B71-C2A8-40A9-9FB6-639EE19D2F75}

1. Easy VPN Server Configuration (R2).
server(config)# username steve password cisco!define the username and password for XAUTH, we can also use CISCO ACS to store the user information.
server(config)#aaa new-modelserver(config)#aaa authentication login default local

!define the default aaa authentication list, allow the administrator to login this router, this configuration is foreign to the ezvpn.

server(config)#aaa authentication login ezvpn-authentication local!define xauth authentication list.
server(config)#aaa authorization network ezvpn-authorization local!define the authorization list.server(config)#ip local pool ezvpn-pool 192.168.1.1 192.168.1.254server(config)#crypto isakmp policy 10server(config-isakmp)#authentication pre-shareserver(config-isakmp)#encryption 3des

server(config-isakmp)#hash sha

server(config-isakmp)#group 2

server(config-isakmp)#exit

server(config)#access-list 101 permit ip 10.10.1.0 0.0.0.255 any!define the split tunnel list, pay attention, the destination address is always “any”, and the source address is the network address of inside network.server(config)#crypto isakmp client configuration group myezvpnserver(config-isakmp-group)#key cisco1234server(config-isakmp-group)#dns 10.8.1.10

server(config-isakmp-group)#domain njut.edu.cn

server(config-isakmp-group)#pool ezvpn-pool

server(config-isakmp-group)#acl 101

!the acl is split tunnel acl.
server(config-isakmp-group)#save-password!allow the client save xauth password locally.
server(config-isakmp-group)#exitserver(config)#crypto ipsec transform-set ccsp esp-3des esp-sha-hmac server(cfg-crypto-trans)#mode tunnelserver(cfg-crypto-trans)#exit

server(config)#crypto dynamic-map ezvpn-dynamic-map 10 server(config-crypto-map)#set transform-set ccspserver(config-crypto-map)#reverse-route

server(config)#crypto map cisco client authentication list ezvpn-authentication!choose the xauth authentication list.server(config)#crypto map cisco isakmp authorization list ezvpn-authorization!choose the authorization list.
server(config)#crypto map cisco client configuration address respond!respond the client address request.server(config)#crypto map cisco 10 ipsec-isakmp dynamic ezvpn-dynamic-mapserver(config)#int s1/0server(config-if)#ip address 173.16.1.5 255.255.255.252server(config-if)#crypto map cisco

server(config)#int fa0/0server(config-if)#ip address 10.10.1.1 255.255.255.0server(config)#ip route 0.0.0.0 0.0.0.0 173.16.1.62. Easy VPN Remote Configuration (R1).
remote(config)#crypto ipsec client ezvpn newlabremote(config-crypto-ezvpn)#connect auto

remote(config-crypto-ezvpn)#group myezvpn key cisco1234

remote(config-crypto-ezvpn)#mode client

remote(config-crypto-ezvpn)#peer 173.16.1.5

remote(config-crypto-ezvpn)#username steve password cisco

!if you didn’t open save-password option on the ezvpn server, you should issue “crypto ipsec client ezvpn xauth” command to complete xauth.
!

remote(config)#interface FastEthernet0/0

remote(config-if)#ip address 10.30.1.1 255.255.255.0

remote(config-if)#crypto ipsec client ezvpn newlab inside!

remote(config)#interface Serial1/1

remote(config-if)#ip address 173.16.1.1 255.255.255.252

remote(config-if)#crypto ipsec client ezvpn newlab outside

3. Use the Cisco VPN Client Software to connect to Easy VPN Server.
The easy vpn server can also be connected by the Cisco VPN Client Software, you can download the software from cco site.

Flickr : cisco, cisco exam, cisco simulator, cisco training, dynagen, dynamips, vpn

dynamips lab:Cisco high availability IPSec VPN on dynamips(loopback address)

admin — Thu, 02 Apr 2009 07:30:43 +0000

In the lab, both access link IP addresses are configured on R1 as IKE identities of R2. When R1 initiates IKE negotiation, the first peer IP address is used by IKE and becomes R2′s IKE identity for this peer. If this IKE SA times out during the negotiation, the second IP address becomes the IKE identity of the R2.

1. R1 Configuration.

R1#sh run
version 12.4
!
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
crypto isakmp key cisco1234 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set ccsp esp-3des esp-sha-hmac
!
crypto map cisco 10 ipsec-isakmp
set peer 13.1.1.1
set peer 12.1.1.1
set transform-set ccsp
match address 101
!
interface Loopback0
ip address 10.1.1.1 255.255.255.0
!
interface Serial1/0
ip address 11.1.1.1 255.255.255.0
crypto map cisco
!
router ospf 1
network 11.1.1.0 0.0.0.255 area 0
!
ip route 10.2.2.0 255.255.255.0 11.1.1.2
!
access-list 101 permit ip 10.1.1.0 0.0.0.255 10.2.2.0 0.0.0.255

2. R2 Configuration.

R2#sh run
version 12.4
!
crypto isakmp policy 10
encr 3des
authentication pre-share
group 2
crypto isakmp key cisco1234 address 0.0.0.0 0.0.0.0
!
crypto ipsec transform-set ccsp esp-3des esp-sha-hmac
!
crypto map cisco 10 ipsec-isakmp
set peer 11.1.1.1
set transform-set ccsp
match address 101
!
interface Loopback1
ip address 10.2.2.1 255.255.255.0
!
interface Serial1/0
ip address 12.1.1.1 255.255.255.0
crypto map cisco
!
interface Serial1/1
ip address 13.1.1.1 255.255.255.0
crypto map cisco
!
router ospf 1
network 12.1.1.0 0.0.0.255 area 0
network 13.1.1.0 0.0.0.255 area 0
!
ip route 10.1.1.0 255.255.255.0 11.1.1.1
!
access-list 101 permit ip 10.2.2.0 0.0.0.255 10.1.1.0 0.0.0.255

Flickr : , cisco exam, cisco simulator, cisco training, dynagen, dynamips, ipsec vpn

dynamips lab:Cisco ADSL PPPOE on dynamips

admin — Thu, 02 Apr 2009 07:20:33 +0000

In fact, R1 and R2 is connected by their atm interface directly.

1. CPE Configuration (R2)

no ip routing
!
interface FastEthernet0/0
no ip address
bridge-group 1
!
interface ATM1/0
no ip address
bridge-group 1
pvc 2/200
encapsulation aal5snap
!
!
bridge 1 protocol ieee

2. R1 Configuration
Notes: The atm card on dynamips does not support pppoe, we use R4 to deal with pppoe packet. So ,R1 do only bridging.

no ip routing
!
interface FastEthernet0/0
no ip address
bridge-group 1
!
interface ATM1/0
no ip address
bridge-group 1
pvc 1/100
encapsulation aal5snap
!
!
bridge 1 protocol ieee

3. Aggregation Router Configuration (R4)

vpdn enable
!
vpdn-group 1
accept-dialin
protocol pppoe
virtual-template 1
!
username cisco password 0 cisco
!
interface Loopback0
ip address 10.0.0.1 255.255.255.0
!
interface FastEthernet0/0
no ip address
pppoe enable
!
interface Virtual-Template1
ip unnumbered Loopback0
peer default ip address pool cisco
ppp authentication chap
!
ip local pool cisco 10.0.0.10 10.0.0.20

4. PPPOE client Configuration (R3)

vpdn enable
!
vpdn-group cisco
request-dialin
protocol pppoe
!
interface Ethernet0
no ip address
pppoe enable
pppoe-client dial-pool-number 1
!
interface Dialer0
ip address negotiated
ip nat outside
encapsulation ppp
dialer pool 1
dialer-group 1
ppp chap hostname cisco
ppp chap password 0 cisco
!
ip route 0.0.0.0 0.0.0.0 Dialer0

Flickr : adsl, ccie, cisco exam, cisco simulator, cisco training, dynagen, dynamips, pppoe

dynamips lab:Cisco ADSL PPPOA on dynamipsI have completed this lab on Dynamips 7200

admin — Thu, 02 Apr 2009 07:16:16 +0000

simulator, the topology is as follow:

In fact, R1 and R2 is connected by their atm interface directly.1. CPE Configuration (R2)

interface FastEthernet0/0
ip address 172.30.1.8 255.255.255.0
ip nat inside
duplex half
!
interface ATM1/0
no ip address
pvc 2/200
encapsulation aal5snap
protocol ppp dialer
dialer pool-member 1
!
interface Dialer0
ip address negotiated
encapsulation ppp
dialer pool 1
dialer-group 1
ppp chap hostname cisco
ppp chap password 0 cisco
ip nat outside
!
ip route 0.0.0.0 0.0.0.0 dialer0
!
access-list 10 permit ip 172.30.1.0 0.0.0.255
ip nat inside source list 10 interface dialer 0 overload

2. Aggregation Router Configuration (R1)

username cisco password 0 cisco
!
interface Loopback0
ip address 10.0.0.1 255.255.255.0
!
interface ATM1/0
no ip address
pvc 1/100
encapsulation aal5snap
protocol ppp Virtual-Template1
!
!
interface Virtual-Template1
ip unnumbered Loopback0
peer default ip address pool cisco
ppp authentication chap
!
ip local pool cisco 10.0.0.2 10.0.0.6

Flickr : , ccie, cisco, cisco exam, cisco simulator, cisco training, dynagen, dynamips

dynamips lab:ccnp lab for dynamips

admin — Thu, 02 Apr 2009 07:13:19 +0000

.net file：
autostart = False
[localhost]
port = 7200
udp = 10000

[[router P1R1]]
image = E:\Dynamips\images\IOS\3600\unzip-c3620-i-mz.122-37.bin
model = 3620
console = 3001
ram = 32
confreg = 0×2102
exec_area = 32
mmap = False
slot1 = PA-4T
s1/1 = P1R2 s1/1
s1/0 = FRSW 1
Fa0/0 = P1R3 Fa0/0

[[router P1R2]]
image = E:\Dynamips\images\IOS\3600\unzip-c3620-i-mz.122-37.bin
model = 3620
console = 3002
ram = 32
confreg = 0×2102
exec_area = 32
mmap = False
slot1 = PA-4T
s1/0 = FRSW 2
Fa0/0 = P1R4 Fa0/0

[[router P1R3]]
image = E:\Dynamips\images\IOS\3600\unzip-c3620-i-mz.122-37.bin
model = 3620
console = 3003
ram = 32
confreg = 0×2102
exec_area = 32
mmap = False
slot1 = PA-4T
s1/0 = P1R4 s1/0

[[router P1R4]]
image = E:\Dynamips\images\IOS\3600\unzip-c3620-i-mz.122-37.bin
model = 3620
console = 3004
ram = 32
confreg = 0×2102
exec_area = 32
mmap = False
slot1 = PA-4T

[[router BBR1]]
image = E:\Dynamips\images\IOS\3600\unzip-c3620-i-mz.122-37.bin
model = 3620
console = 3005
ram = 32
confreg = 0×2102
exec_area = 32
mmap = False
slot1 = PA-4T
s1/0 = FRSW 3
Fa0/0 = BBR2 Fa0/0

[[router P2R1]]
image = E:\Dynamips\images\IOS\3600\unzip-c3620-i-mz.122-37.bin
model = 3620
console = 3006
ram = 32
confreg = 0×2102
exec_area = 32
mmap = False
slot1 = PA-4T
s1/0 = FRSW 4
s1/1 = P2R2 s1/1
Fa0/0 = P2R3 Fa0/0
[[router P2R2]]
image = E:\Dynamips\images\IOS\3600\unzip-c3620-i-mz.122-37.bin
model = 3620
console = 3007
ram = 32
confreg = 0×2102
exec_area = 32
mmap = False
slot1 = PA-4T
s1/0 = FRSW 5
Fa0/0 = P2R4 Fa0/0

[[router P2R3]]
image = E:\Dynamips\images\IOS\3600\unzip-c3620-i-mz.122-37.bin
model = 3620
console = 3008
ram = 32
confreg = 0×2102
exec_area = 32
mmap = False
slot1 = PA-4T
s1/0 = P2R4 s1/0

[[router P2R4]]
image = E:\Dynamips\images\IOS\3600\unzip-c3620-i-mz.122-37.bin
model = 3620
console = 3009
ram = 32
confreg = 0×2102
exec_area = 32
mmap = False
slot1 = PA-4T

[[router BBR2]]
image = E:\Dynamips\images\IOS\3600\unzip-c3620-i-mz.122-37.bin
model = 3620
console = 3010
ram = 32
confreg = 0×2102
exec_area = 32
mmap = False
slot1 = PA-4T
s1/0 = FRSW 6

[[FRSW FRSW]]
1:103 = 3:301
2:203 = 3:302
4:406 = 6:604
5:405 = 6:605

Flickr : ccnp, cisco certification, cisco exam, cisco simulator, cisco training, dynagen, dynamips

ccie##IPexpert_Security4_WB_SAMPLE

admin — Thu, 02 Apr 2009 07:06:55 +0000

Thank you for your interest in IPexpert’s Ultimate Preparation Workbook for the Cisco CCIE Security
Laboratory Exam, Version 4.0. If you would like the solutions to the two labs contained in this sample or
to purchase the other 13 Protocol / Technology Focused Labs and 6 eight-hour Mock Labs contained
within the full Workbook please contact the IPexpert sales department.

Download link part01:http://www.rayfile.com/files/9cd98845-1f54-11de-b665-0019d11a795f/

Download link part02:http://www.rayfile.com/files/abea2468-1f54-11de-9859-0019d11a795f/

Flickr : ccie, cisco, cisco exam, cisco simulator, cisco training, dynamips

Cisco training guide

admin — Mon, 01 Dec 2008 08:04:00 +0000

This page is processing

The widely respected IT certification programs available through Cisco Career Certifications bring valuable, measurable rewards to network professionals, their managers, and the organizations that employ them.

Four Levels of IT Certification

We offer four levels of general IT certification: Entry, Associate, Professional, and Expert (CCIE representing the highest level of achievement).

Seven Different Paths

Various tracks-such as Routing and Switching, Network Security, and Service Provider-are available, so that you can match your certification path to your job role or industry.

Resources

To prepare and learn more about IT certifications and technology tracks, visit the home of Cisco Career Certifications, the Cisco simulator site!

General Certifications
Certification Paths	Entry-Level	Associate	Professional	Expert
Routing & Switching	CCENT	CCNA	CCNP	CCIE Routing & Switching
Design	CCENT	CCNA&CCDA	CCDP	CCDE
Network Security	CCENT	CCNA Security	CCSP	CCIE Security
Service Provider	CCENT	CCNA	CCIP	CCIE Service Provider
Storage Networking	CCENT	CCNA	CCNP	CCIE Storage Networking
Voice	CCENT	CCNA Voice	CCVP	CCIE Voice
Wireless	CCENT	CCNA Wireless	Coming Soon!	CCIE Wireless

Specialist Certifications
Advanced Routing and Switching	Cisco Routing and Switching Field Specialist Cisco Routing and Switching Sales Specialist Cisco Routing and Switching Solutions Specialist
Data Center Certifications	Data Center Application Services “contentboldlink”>Cisco Data Center Application Services Support Specialist “contentboldlink”>Cisco Data Center Application Services Design Specialist Data Center Switching Network Infrastructure Cisco Data Center Networking Infrastructure Design Specialist Cisco Data Center Networking Infrastructure Support Specialist Cisco Data Center Networking Sales Specialist Data Center Storage Networking Cisco Data Center Storage Networking Design Specialist Cisco Data Center Storage Networking Support Specialist Cisco Data Center Storage Networking Sales Specialist
Foundation for Channel Partners	Cisco Express Foundation Design Specialist Cisco Express Foundation Field Specialist Cisco Express Foundation Sales Specialist
IP Communications Certifications	Cisco Advanced IP Communications Sales Specialist Cisco IP Communications Express Specialist Cisco IP Communications Express Sales Specialist Cisco IP Contact Center Express Specialist Cisco IP Telephony Design Specialist Cisco Rich Media Communications Specialist Cisco Unity Design Specialist Cisco Unity Support Specialist Cisco Unified Presence Specialist
VPN and Security Certifications	Cisco ASA Specialist Cisco IPS Specialist Cisco Network Admission Control Specialist Cisco Security Sales Specialist Cisco Security Solutions and Design Specialist
Wireless LAN Certifications	Cisco Advanced Wireless LAN Design Specialist Cisco Advanced Wireless LAN Field Specialist Cisco Advanced Wireless LAN Sales Specialist

Flickr : , ef="http://www.flickr.com/photos/tags/cisco%20certification" class="ztag" rel="tag">cisco certification, cisco exam, cisco training

IT certification lab simulation » cisco training

dynamips lab:Cisco IOS SSL VPN on dynamips test note

Related Posts

Cisco IOS site2site ipsec vpn on dynamips

Related Posts

dynamips lab:Cisco IOS l2tp voluntary tunnel mode on dynamips

Related Posts

dynamips lab:Cisco IOS Easy VPN Server & Remote on Dynamips

Related Posts

dynamips lab:Cisco high availability IPSec VPN on dynamips(loopback address)

Related Posts

dynamips lab:Cisco ADSL PPPOE on dynamips

Related Posts

dynamips lab:Cisco ADSL PPPOA on dynamipsI have completed this lab on Dynamips 7200

Related Posts

dynamips lab:ccnp lab for dynamips

Related Posts

ccie##IPexpert_Security4_WB_SAMPLE

Related Posts

Cisco training guide

Four Levels of IT Certification

Seven Different Paths

Resources

Associate

Professional

Expert

Routing & Switching

Design

Network Security

Service Provider

Storage Networking

Voice

Wireless

Advanced Routing and Switching

Data Center Certifications

Foundation for Channel Partners

IP Communications Certifications

VPN and Security Certifications

Wireless LAN Certifications

Related Posts