Implementing Advanced Cisco Unified Wireless Security v1.0 [IAUWS]

Course Description

The Implementing Advanced Cisco Unified Wireless Security (IAUWS) is a 5 day ILT course, designed to help students prepare for the CCNP-Wireless certification, a professional level certification specializing in the wireless field.

The goal of the IAUWS v1.0 is to provide network professional with information to prepare them to secure the wireless network from security threats via appropriate security policies and best practices, as well as ensure the proper implementation of security standards and proper configuration of security components. The IAUWS reinforces the instruction by providing students with hand-on labs to ensure students thoroughly understand how to secure a wireless network.

Laptops are provided to participate in the hands-on labs. If you desire to use your own laptop, please bring a laptop computer with an available 32-bit CardBus slot and an Ethernet port as well as an internal wireless NIC, 802.11a/b/g. The laptop’s operating systems must be either MS Windows 2000 (SP4) or XP. The laptop should also have a 9-pin serial port or USB to serial adapter. IN ADDITION, you will need administrator rights to the laptop to install drivers for the wireless client used in class.

Course Objectives

After completing this course, the student should be able to:

• • Translate organizational and regulatory security policies and enforce security compliances
• • Integrate security on client devices
• • Design and implement guest access services on the WLAN controller
• • Design and integrate a wireless network with Cisco NAC Appliance
• • Implement secure wireless connectivity services on the WLAN controller
• • Use the internal security features on the WLAN controller and integrate the WLAN controller with advanced security platforms to isolate and mitigate security threats to the WLAN

Intended Audience

The Implementing Advanced Cisco Unified Wireless Security course is targeted wireless network professionals with 3-5 years experience in the networking field who will be required to define the security requirements for various deployment models, and any individual wishing to attain the CCNP-Wireless level.

Prerequisites

• Obtained a Cisco Certified Networking Associate Wireless - CCNA-Wireless certification
• Implementing Cisco Unified Wireless Networking Essentials (IUWNE) v1.0
• Interconnecting Cisco Networking Devices Part 1 (ICND1)

Course Outline

DAY 1

• Course Introduction
• Describing Regulatory Compliance
• Segmenting Traffic
• Configuring Administrative Security
• Managing WLAN Controller and Cisco WCS Alarms
• Module Summary and Self Check
• Configuring EAP Authentication

DAY 2

• Configuring EAP Authentication (Cont.)
• Describing the Impact of Security on Applications and Roaming
• Configuring Cisco Secure Services Client
• Troubleshooting Wireless Connectivity
• Summary and Self Check
• Describing Guest Access Architecture
• Configuring the WLAN to Support Guest Access
• Configuring Guest Access Accounts

DAY 3

• Troubleshooting Guest Access
• Module Summary and Self Check
• Introducing the Cisco NAC Appliance Solution
• Configuring the Controller for Cisco NAC Out-of-Band Operations
• Module Summary and Self Check
• Configuring Authentication for the WLAN Infrastructure

DAY 4

• Configuring Management Frame Protection
• Configuring Certificate Services
• Implementing Access Control Lists
• Implement Identity Based Networking
• Troubleshooting Secure Wireless Connectivity
• Module Summary and Self Check
• Mitigating Wireless Vulnerabilities

DAY 5

• Mitigating Wireless Vulnerabilities (Cont.)
• Understanding Cisco’s End-to-End Security Solutions
• Integrating Cisco WCS and Wireless IPS

Course Labs

• Lab 1-1: Segmenting Traffic
• Lab 1-2: Configuring Administrative Security
• Lab 2-1: Configuring EAP Authentication on the Clients
• Lab 2-2: Configuring Cisco Secure Services Client
• Lab 2-3: Troubleshooting Wireless Connectivity
• Lab 3-1: Configuring the WLAN to Support Guest Access
• Lab 3-2: Configure a Controller to use the Cisco NGS for Authentication
• Lab 3-3: Troubleshooting Guest Access
• Lab 3-3: Troubleshooting Guest Access (Cont.)
• Lab 4-1: Configuring the Controller for Cisco NAC
• Lab 5-1: Configuring Local Authentication on the WLAN Controller
• Lab 5-2: Configuring H-REAP for WAN Failure
• Lab 5-3: Configuring Management Frame Protection
• Lab 5-4: Configuring Certificate Services
• Lab 5-5: Implementing Access Control Lists
• Lab 5-6: Implement Identity Based Networking
• Lab 5-7: Troubleshooting Secure Wireless Connectivity
• Lab 6-1: Managing Rogue Access Points
• Lab 6-2: Managing IDS Signatures