| Implement Inter-VLAN routing. |
 |
Explain and configure Inter-VLAN routing (i.e., SVI and routed ports). |
|
Explain and enable CEF operation. |
|
Verify or troubleshoot InterVLAN routing configurations. |
| Implement gateway redundancy technologies. |
|
Explain the functions and operations of gateway redundancy protocols (i.e., HSRP, VRRP, and GLBP). |
|
Configure HSRP, VRRP, and GLBP. |
|
Verify High Availability configurations. |
| Describe and configure wireless client access. |
|
Describe the components and operations of WLAN topologies (i.e., AP and Bridge). |
|
Describe the features of Client Devices, Network Unification, and Mobility Platforms (i.e., CCX, LWAPP). |
|
Configure a wireless client (i.e., ADU). |
Describe and configure security features in a switched network. |
|
Describe common Layer 2 network attacks (e.g., MAC Flooding, Rogue Devices, VLAN Hopping, DHCP Spoofing, etc.) |
|
Explain and configure Port Security, 802.1x, VACLs, Private VLANs, DHCP Snooping, and DAI. |
|
Verify Catalyst switch (IOS-based) security configurations (i.e., Port Security, 802.1x, VACLs, Private VLANs, DHCP Snooping, and DAI). |
| Configure support for voice. |
|
Describe the characteristics of voice in the campus network. |
|
Describe the functions of Voice VLANs and trust boundaries. |
|
Configure and verify basic IP Phone support (i.e. Voice VLAN, Trust and CoS options, AutoQoS for voice). |
Implementing Secure Converged Wide Area Networks |
Exam Description
The ISCW 642-825 exam will certify that the successful candidate has important knowledge and skills necessary to secure and expand the reach of an enterprise network to teleworkers and remote sites with focus on securing remote access and VPN client configuration. The exam covers topics on Cisco hierarchical network model as it pertains to the WAN, teleworker configuration and access, frame mode MPLS, site-to-site IPSEC VPN, Cisco EZVPN, strategies used to mitigate network attacks, Cisco device hardening and IOS firewall features.
Implement basic teleworker services. |
|
Describe Cable (HFC) technologies. |
|
Describe xDSL technologies. |
|
Configure ADSL (i.e., PPPoE or PPPoA). |
|
Verify basic teleworker configurations. |
Implement Frame-Mode MPLS. |
|
Describe the components and operation of Frame-Mode MPLS (e.g., packet-based MPLS VPNs). |
|
Configure and verify Frame-Mode MPLS. |
Implement a site-to-site IPSec VPN |
|
Describe the components and operations of IPSec VPNs and GRE Tunnels. |
|
Configure a site-to-site IPSec VPN/GRE Tunnel with SDM (i.e., preshared key). |
|
Verify IPSec/GRE Tunnel configurations (i.e., IOS CLI configurations). |
|
Describe, configure, and verify VPN backup interfaces. |
|
Describe and configure Cisco Easy VPN solutions using SDM. |
Describe network security strategies. |
|
Describe and mitigate common network attacks (i.e., Reconnaissance, Access, and Denial of Service). |
|
Describe and mitigate Worm, Virus, and Trojan horse attacks. |
|
Describe and mitigate application-layer attacks (e.g., management protocols). |
| Implement Cisco Device Hardening |
|
Describe, Configure, and verify Auto Secure/One-Step Lockdown implementations (i.e., CLI and SDM). |
|
Describe, configure, and verify AAA for Cisco Routers. |
|
Describe and configure threat and attack mitigation using ACL’s. |
|
Describe and configure IOS secure management features (e.g., SSH, SNMP, SYSLOG, NTP, Role-Based CLI, etc.) |
| Implement Cisco IOS firewall. |
|
Describe the functions and operations of Cisco IOS Firewall (e.g., State ful Firewall, CBAC, etc.). |
|
Configure Cisco IOS Firewall with SDM. |
|
Verify Cisco IOS Firewall configurations (i.e., IOS CLI configurations, SDM Monitor). |
Describe and configure Cisco IOS IPS. |
|
Describe the functions and operations of IDS and IPS systems (e.g., IDS/IPS signatures, IPS Alarms, etc.) |
|
Configure Cisco IOS IPS using SDM. |
Optimizing Converged Cisco Networks |
Exam Description
The Optimizing Converged Cisco Networks (642-845 ONT) is a qualifying exam for the Cisco Certified Network Professional CCNP®. The ONT 642-845 exam will certify that the successful candidate has important knowledge and skills in optimizing and providing effective QOS techniques for converged networks. The exam topics include implementing a VOIP network, implementing QoS on converged networks, specific IP QoS mechanisms for implementing the DiffServ QoS model, AutoQoS, wireless security and basic wireless management.
Exam Topics
The following information provides general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes the guidelines below may change at any time without notice. |
| Describe Cisco VoIP implementations. |
|
Describe the functions and operations of a VoIP network (e.g., packetization, bandwidth considerations, CAC, etc.). |
|
Describe and identify basic voice components in an enterprise network (e.g. Gatekeepers, Gateways, etc.) |
Describe QoS considerations. |
|
Explain the necessity of QoS in converged networks (e.g., bandwidth, delay, loss, etc.). |
|
Describe strategies for QoS implementations (e.g. QoS Policy, QoS Models, etc.). |
| Describe DiffServ QoS implementations. |
|
Describe classification and marking (e.g., CoS, ToS, IP Precedence, DSCP, etc.). |
|
Describe and configure NBAR for classification. |
|
Explain congestion management and avoidance mechanisms (e.g., FIFO, PQ, WRR, WRED, etc.). |
|
Describe traffic policing and traffic shaping (i.e., traffic conditioners). |
|
Describe Control Plane Policing. |
|
Describe WAN link efficiency mechanisms (e.g., Payload/Header Compression, MLP with interleaving, etc.). |
|
Describe and configure QoS Pre-Classify. |
| Implement AutoQoS. |
|
Explain the functions and operations of AutoQoS. |
|
Describe the SDM QoS Wizard. |
|
Configure, verify, and troubleshoot AutoQoS implementations (i.e., MQC). |
| Implement WLAN security and management. |
|
Describe and Configure wireless security on Cisco Clients and APs (e.g., SSID, WEP, LEAP, etc.). |
|
Describe basic wireless management (e.g., WLSE and WCS). Configure and verify basic WCS configuration (i.e., login, add/review controller/AP status, security, and import/review maps). |
|
Describe and configure WLAN QoS. |
| |
Back |
|