Description
This course is the first in the ScreenOS curriculum. It is a three-day, instructor-led course that focuses on configuration of the Juniper Networks firewall/VPN products in a variety of situations, including basic administrative access, routing, firewall policies and policy options, attack prevention features, address translation, and VPN implementations.
The course combines both lecture and labs, with significant time allocated for hands-on experience. Students completing this course should be confident in their ability to configure Juniper Networks firewall/VPN products in a wide range of installations.
Target group
This course is intended for network engineers, support personnel, reseller support, and others responsible for implementing Juniper Networks firewall products
Prerequisites
This course assumes that students have basic networking knowledge and experience in the following areas:The Internet, Networking concepts and Terms including TCP/IP, bridging, switching, and routing
Other
This course is available as scheduled training and the presentation is given in Swedish. The course is mixing theory and practical exercises. We can also give this course as on-site training. If you are interested in customized education, don’t hesitate to contact us for further information.
Agenda
Introduction
ScreenOS Concepts, Terminology, and Platforms
- Security Device Requirements
- ScreenOS Security Architecture
- Juniper Networks Platforms
Initial Connectivity
- System Components
- Establishing Connectivity
- Verifying Connectivity
- Lab 1: Initial Configuration
Device Management
- Management
- Recovery
- Lab 2: Device Administration
Layer 3 Operations
- Need for Routing
- Configuring Layer 3
- Verifying Layer 3
- Loopback Interface
- Interface-Based NAT
- Lab 3: Layer 3 Operations
Basic Policy Configuration
- Functionality
- Policy Configuration
- Common Problems
- Global Policy
- Verifying Policies
- Lab 4: Basic Policy Configuration
Policy Options
- Overview
- Logging
- Counting
- Scheduling
- User Authentication
- Lab 5: Policy Options
Address Translation
- Scenarios
- NAT-src
- NAT-dst
- VIP Addresses
- MIP Addresses
- Lab 6: Address Translation
Transparent Mode (Optional)
- Description
- Configuration
- Verifying Operations
- Lab 7: Transparent Mode
VPN Concepts
- Concepts and Terminology
- IP Security
Policy-Based VPNs
- Configuration
- Verifying Operations
- Lab 8: Policy-Based VPNs
Route-Based VPNs
- Concepts and Terminology
- Configuring VPNs
- Verifying Operations
- Lab 9: Route-Based VPNs
Appendix A: Additional Features
- Hardware
Print-friendly version
