Operating Enhanced Services for JUNOS Software

Course No: EDU-JUN-OESJ

Length: Four days

Cost: $2,700 (US)

> Register

Course Overview

The Operating Enhanced Services for JUNOS Software course is an instructor-led, four-day course designed to provide enterprise network engineers with the knowledge and skills necessary to use JUNOS software with enhanced services. It covers advanced security features and configurations of Juniper Networks platforms, focusing specifically on the enhanced services of JUNOS software. The course combines both lecture and labs, with significant time allocated for hands-on experience with JUNOS software enhanced services.

Objectives

After successfully completing this course, you should be able to:

• Describe the requirements of routers and firewalls.
• Describe the architecture of JUNOS software with enhanced services.
• Describe and define zone types and their purpose.
• Configure and monitor zones.
• Explain the meaning of SCREEN options.
• Identify advantages of using JUNOS SCREEN options.
• Configure and monitor zone-based SCREEN options.
• Explain security policy functionality.
• Configure and monitor security policies.
• Describe Network Address Translation (NAT) features.
• Configure and monitor NAT.
• Describe IPSec VPNs.
• Configure and monitor policy-based and route-based IPSec VPNs.
• Describe high availability support and the JUNOS Services Redundancy Protocol (JSRP).
• Describe JSRP operation.
• Configure and monitor JSRP.

Intended Audience

The primary audiences for this course are the following:

• Enterprise network engineers; and
• Reseller support engineers.

Course Level

This is an advanced-level course.

Prerequisites

The following are the prerequisites for this course:

• The Operating Juniper Networks Routers in the Enterprise course or equivalent experience;
• Knowledge, familiarity, and comfort with the JUNOS software CLI;
• Experience managing routers (not necessarily Juniper Networks) in an enterprise environment;
• An understanding of destination-based, hop-by-hop IP routing; and
• Experience with interior gateway protocols (IGPs).

Course Contents

Day 1

Chapter 1: Course Introduction

Chapter 2: The Architecture of JUNOS Software with Enhanced Services

• Device Requirements as a Router
• Device Requirements as a Firewall
• The Architecture of JUNOS Software with Enhanced Services
• Typical Deployments
• Lab 1: Initial Setup of Devices Using JUNOS Software with Enhanced Services

Day 2

Chapter 3: Zone-Based Segmentation and Monitoring

• The Definition of Zones
• Zone Configuration
• Monitoring Security Zones

Chapter 4: SCREEN Options

• Multilayer Network Protection
• Types of Attacks
• Using JUNOS SCREEN Options
• Applying and Monitoring SCREEN Options

Chapter 5: Security Policies

• Functionality and Default Behavior
• Policy Match Conditions
• Policy Actions
• Policy Configuration Example
• Verifying Policy Operation
• Lab 2: Security Policies

Day 3

Chapter 6: Network Address Translation

• Network Address Translation
• Implementing NAT Using the Enhanced Services of JUNOS Software
• Lab 3: NAT and PAT

Chapter 7: Campus Interconnectivity—IPSec VPNs

• VPN Types
• Secure VPN Requirements
• IPSec Details
• Configuration of IPSec VPNs
• IPSec VPN Monitoring
• Lab 4: Campus Interconnectivity Using IPSec VPNs

Day 4

Chapter 8: High Availability

• High Availability Overview
• JSRP Components
• JSRP Operation
• Configuring JSRP
• Monitoring JSRP

Appendix A: Initial Setup and Software Maintenance

• Software Image Management
• Licensing Model

Appendix B: WXC Integrated Services Module 200 for J-series Services Routers

• WXC Integrated Services Module 200 Overview
• Installing the WXC ISM 200
• Initial Configuration of the WXC ISM 200
• Configuring Optimization Features of the WXC ISM 200