NDG has worked closely with the Cisco CCNP lab team to develop NETLAB+ compatible labs for ISCW.
ISCW is supported by one or more of the following NETLAB+ pods:
The supported lab list (below) provides a list of CCNP 5.0 ISCW compatible labs and the pod types that can be used for each lab.
To enable the ISCW labs and pod types, check the box for "AE CCNP ISCW V5.0 English" in the class settings. This must be done for each class requiring access to the ISCW labs.
You may also allow the class to make "pod-only" reservations on a Cuatro Switch Pod. To enable pod-only reservations, check the box for "AE CCNP Pod Reservations (no labs)" in the class settings.
These reservations are not tied to specific lab exercises. Therefore, the pod will be configured using the default network configuration. Please note however, not all ISCW labs use the default network configuration and must be completed by selecting the correct lab exercise (see the following discussion).
Always select the correct lab exercise for the lab being performed. Students or teams should schedule the correct lab exercise from the catalog. NETLAB+ will only show those labs for which the required pod type is available. A lab that works on different pod types may appear more than once if your system is so equipped. Instructors should select the correct lab from the Exercise tab during instructor-led lab reservations. This can be done as many times as needed during the reservation.
Importance of Choosing the Correct Lab Exercise
Several of the labs may differ from the standard pod topologies. This is
handled by NETLAB+ Dynamic VLAN Mapping technology. Always select the
correct lab exercise for the actual lab. This insures that NETLAB+
will set up VLANs on the control switch such that lab devices and PCs are
placed in the correct LAN segment for the exercise being performed. Selecting
the correct exercise will also make the completed lab output easier to find in
the archive.
Lab | Description | Pod Required | Comments |
---|---|---|---|
3.1 | Configuring SDM on a Router | CRP or BRPv2 | Please see the list of required software |
3.2 | Configuring a Basic GRE Tunnel | CRP, BRPv2, or BRPv1 | |
3.3 | Configuring Wireshark and SPAN | Please see the list of required software. Step number 3 is not supported | |
3.4 | Configuring Site-to-Site IPsec VPNs with SDM | CRP or BRPv2 | The optional challenge section is not supported. |
3.5 | Configuring Site-to-Site IPsec VPNs with the IOS CLI | CRP, BRPv2, or BRPv1 | The optional challenge section is not supported. |
3.6 | Configuring a Secure GRE Tunnel with SDM | CRP or BRPv2 | Please see the list of required software The optional challenge section is not supported. |
3.7 | Configuring a Secure GRE Tunnel with the IOS CLI | CRP, BRPv2, or BRPv1 | The optional challenge section is not supported. |
3.8 | Configuring IP sec VTIs | CRP, BRPv2, or BRPv1 | |
3.9 | Configuring Easy VPN with SDM | CRP or BRPv2 | Please see the list of required software |
3.10 | Configuring Easy VPN with the IOS CLI | CRP, BRPv2, or BRPv1 | |
4.1 | Configuring Frame Mode MPLS | CRP, BRPv2, or BRPv1 | |
4.2 | Challenge Lab: Implementing MPLS VPNs | This lab is not directly supported, but can be implemented using Pod Designer. | |
5.1 | Using SDM One-Step Lockdown | CRP or BRPv2 | Please see the list of required software |
5.2 | Securing a Router with Cisco AutoSecure | CRP, BRPv2, or BRPv1 | |
5.3 | Disabling Unneeded Services | CRP, BRPv2, or BRPv1 | |
5.4 | Enhancing Router Security | CRP, BRPv2, or BRPv1 | |
5.5 | Configuring Logging | CRP or BRPv2 | Please see the list of required software |
5.6a | Configuring AAA and TACACS+ | CRP or BRPv2 | Please see the list of required software |
5.6b | Configuring AAA and RADIUS | CRP or BRPv2 | Please see the list of required software |
5.6c | Configuring AAA Using Local Authentication | CRP or BRPv2 | Please see the list of required software |
5.7 | Configuring Role-Based CLI Views | CRP, BRPv2, or BRPv1 | |
5.8 | Configuring NTP | CRP, BRPv2, or BRPv1 | |
6.1 | Configuring a Cisco IOS Firewall using SDM | CRP or BRPv1 | Please see the list of required software |
6.2 | Configuring CBAC | CRP, BRPv2, or BRPv1 | |
6.3 | IPS with SDM | CRP or BRPv2 | Please see the list of required software |
6.4 | Configuring IPS with CLI | CRP, BRPv2, or BRPv1 | |
Case Study 1 | CLI IPsec and Frame-Mode MPLS | CRP | |
Case Study 2 | SDM | CRP | Please see the list of required software |
Skills Exam | Assessment 1 | CRP | Enabled separately |
Skills Exam | Assessment 2 | CRP | Enabled separately |
CCNP 5.0 ISCW labs require certain software must be installed on the PCs. The following is a list of the required software. If possible, we suggest installing Windows 2003 server on all PCs in the pods and preloading all of the installer executable files for the software on the list. If it is not possible to have Windows 2003 installed on all the PCs, we suggest installing it on at least one, preferably PC1a for CRP and BRPv2.
Software Name | Purpose | Requirements | Comments / Links |
---|---|---|---|
Secure Device Manager (SDM) | The SDM is installed onto the router's flash memory or in the PCs. |
Supported Microsoft Windows O/S:
|
For using SDM, the web browser requires SUN JRE 1.4 or later and
ActiveX control must be enabled. www.cisco.com |
Cisco Secure ACS | This software will be used as TACACS+ and Radius authentication server. The labs use a 90-days trial version. If all the PCs for one pod have the correct OS, NETLAB+ offers the possibility of doing labs with ACS by using all of them. |
Supported OS:
|
Please note, additional requirements may be needed, such as Service Pack. www.cisco.com |
Kiwi Syslog | This software will be used as the syslog server. |
Supported O/S:
|
www.kiwisyslog.com |
Wireshark | This software will be used as the sniffer and packet analyzer. | Windows/Linux | www.wireshark.org |
NMAP | This software is used to test the lab configuration. | Windows/Linux | www.insecure.org |
Cisco VPN Client | This software is used to build a VPN. | www.cisco.com |