Graham Bartlett, Amjad Inamdar

Broschiertes Buch

IKEv2 IPsec Virtual Private Networks: Understanding and Deploying IKEv2, IPsec VPNs, and FlexVPN in Cisco IOS

Beschreibung

IKEv2 IPsec Virtual Private Networks is the first plain English introduction to IKEv2: both a complete primer on this important new security protocol, and a practical guide to deploying it with Cisco's FlexVPN implementation. Cisco experts Graham Bartlett and Amjad Inamdar explain how IKEv2 can be used to perform mutual authentication, and to establish and maintaining security associations (SAs). Their insights into IKEv2's goals, theory, and underlying concepts will be invaluable to all network security professionals, whatever technologies or solutions they choose for implementation. Next, Bartlett and Inamdar thoroughly introduce FlexVPN, Cisco's high-value implementation of the IKEv2 standard. You'll discover FlexVPN's unified paradigm, and learn how its command-line interface can be used to manage IKEv2 in site-to-site, remote access, hub and spoke topology, and partial mesh (spoke to spoke direct) environments. The authors explain how FlexVPN's simple, modular framework relies on the tunnel interface paradigm while remaining compatible with legacy VPN implementations. They offer detailed guidance on configuring IKEv2 VPNs using FlexVPN in both Cisco IOS and IOS-XE environments, and show how FlexVPN unifies previous Cisco overlay solutions, including crypto maps, EasyVPN, DMVPN, and remote access. Their practical design examples and hands-on troubleshooting steps will help you gain real mastery of FlexVPN configuration and operations in any network environment.

Autor

Graham Bartlett, CCIE No. 26709, has designed a number of large scale Virtual Private Networks within the UK and worked with customers throughout the world using IKEv2 and Next Generation Encryption. Graham’s interests include Security and Virtual Private Networks. Within this space he has discovered zero-day vulnerabilities, including the higest severity security advisory in the March 2015 Cisco IOS software and IOS XE software security advisory bundled publication. He has contributed to numerous IETF RFCs, and has intellectual property published as prior art. He is a CiscoLive speaker and has developed Cisco Security exam content (CCIE/CCNP). He is a CCP (Senior) IA Architect, CCP (Practitioner) Security & Information Risk Advisor, CCNP, CISSP, Cisco Security Ninja and holds a BSc(Hons) in Computer Systems and Networks.Amjad Inamdar CISSP 460898, is a Senior Technical Leader with Cisco IOS Security Engineering, India. He has primarily worked on design, development and deployment of Cisco IOS secure connectivity solutions including the industry leading FlexVPN, DMVPN, GETVPN and EzVPN solutions and is currently working on the Cisco next generation SD-WAN solution. He has contributed to IETF drafts, holds a Cisco patent and has prior art publications. He holds many industry certifications including CISSP, CCSK, CCNP Security, CCDP, CCNP R/S, CCNA (SP, Data Center, Wireless, Voice), Cisco Security Ninja and has presented security at conferences, internal forums and to Cisco customers and partners. He holds a degree (B.E) in Electronics and Communication Engineering.

Produktdetails

• Verlag: Cisco Press
• 1. Auflage
• Seitenzahl: 656
• Erscheinungstermin: 12. September 2016
• Englisch
• Abmessung: 235mm x 195mm x 36mm
• Gewicht: 1230g
• ISBN-13: 9781587144608
• ISBN-10: 1587144603
• Artikelnr.: 44158994