
Configure a basic Cisco topology by saving changes, starting routers gradually to prevent lag, and setting interfaces, IP addresses, static routes, redistribution, and reachability checks.
Explore extended access lists to control traffic by source, destination, protocol, ports, and time ranges, including dynamic and named options, with practical Cisco IOS examples.
Define and apply class maps with policy maps to block downloads on interfaces, demonstrating nesting of policy maps, per-service policies, and the importance of class order.
Master zone-based firewall configuration in Cisco IOS and validate traffic flows by testing internet and DMZ access, using ICMP reachability tests and HTTP (port 80) connections to verify allowed paths.
This course is all about IOS security and all features that you can find to harden your router and switch and use your router as a firewall so that you don't have to invest your precious dollars on a firewall device!
I have explained all commands in detail so that you can easily get a grab on that feaure. If you cannot find a feature, this means either it is obsolete and a better feature replaces that or I have forgotten to include it. In the latter case, I will be more than happy if you let me know what you want and I will add it to the curriculum.
I have used GNS3 for the simulation. However, you can execute all commands on a real gear without any change.