Read without ads and support Scribd by becoming a Scribd Premium Reader.
See Premium Plans
 
Page | 1
NETSCREEN JNCIS-FWV STUDY GUIDE
AUTHOR: GARNET NEWTON-WADENETWORK ENGINEER
 
 
Page | 2
CONTENTS
Introduction ........................................................................................................................................................................ 7
 
Juniper Firewall Product details ................................................................................................................................ 8
 
SSG 5 ............................................................................................................................................................................. 8
 
SSG 20 .......................................................................................................................................................................... 9
 
SSG 140........................................................................................................................................................................ 9
 
SSG 320M .................................................................................................................................................................... 9
 
SSG 520M ................................................................................................................................................................. 10
 
SSG 550M ................................................................................................................................................................. 10
 
NetScreen-5200/5400 ....................................................................................................................................... 10
 
Exam Information ..................................................................................................................................................... 12
 
Current Exam Objectives ....................................................................................................................................... 13
 
Firewall/VPN Systems ................................................................................................................................................. 15
 
Virtual Private Network .............................................................................................................................................. 16
 
Phase 1 Proposal ....................................................................................................................................................... 17
 
Tunnel
..................................................................................................................................................................... 17
 
Phase 2 Proposal ....................................................................................................................................................... 17
 
IPSec standard elements ........................................................................................................................................ 18
 
Internet Key Exchange (IKE)
........................................................................................................................... 18
 
IPSec Packet Flow ..................................................................................................................................................... 18
 
From the initiator: ............................................................................................................................................... 18
 
From the recipient: .............................................................................................................................................. 19
 
From the initiator: ............................................................................................................................................... 20
 
From the recipient: .............................................................................................................................................. 20
 
Modes............................................................................................................................................................................. 20
 
Perfect Forward Secrecy ................................................................................................................................... 21
 
Security Associations .............................................................................................................................................. 21
 
Protocols....................................................................................................................................................................... 21
 
Encapsulation Modes .............................................................................................................................................. 22
 
Policy/route-based VPN configuration ........................................................................................................... 22
 
Configuring a Site-to-Site Policy-based VPN ............................................................................................ 22
 
Route-Based VPNs .................................................................................................................................................... 23
 
Configuring a Route-based Site-to-Site VPN ............................................................................................. 23
 
Proxy-IDs ...................................................................................................................................................................... 24
 
Hub/spoke configurations .................................................................................................................................... 25
 
Back-to-Back VPNs .............................................................................................................................................. 25
 
Configuring Back-to-Back VPNs ..................................................................................................................... 26
 
 
Page | 3Configuring a Hub and Spoke VPN ................................................................................................................ 27
 
NHTB requirements/configurations ................................................................................................................ 29
 
NEXT-HOP TUNNEL BINDING TABLE .................................................................................................... 29
 
Creating Entries in the NHTB Table .................................................................................................. 29
 
Configuring Multiple VPNs through a Single Tunnel Interface using static NHTB ................... 30
 
Configuring Multiple VPNs through a Single Tunnel Interface using BGP ................................... 32
 
Auto-Connect VPNs .................................................................................................................................................. 33
 
PKI ................................................................................................................................................................................... 33
 
Digital Certificates .................................................................................................................................................... 33
 
Certificate Authorities ................................................................................................................................ 34
 
Certificate Revocation ........................................................................................................................................ 34
 
Configuring Digital Certificates on a NetScreen ........................................................................................... 34
 
Loading the Digital Certificate ........................................................................................................................ 35
 
Configuring CRL Settings .................................................................................................................................. 35
 
Configuring OCSP ................................................................................................................................................. 35
 
Dynamic Peer VPN’s
................................................................................................................................................ 36
 
Configuring a Site-to-Site VPN with a Dynamic Peer ............................................................................ 36
 
Transport mode IPsec VPN ................................................................................................................................... 37
 
Gateway - 1 Configuration .................................................................................................................................... 37
 
GW-2 Configuration ................................................................................................................................................. 38
 
Overlapping VPN Networks.................................................................................................................................. 39
 
Configuring a VPN for Overlapping Networks .............................................................................................. 40
 
Generic Routing Encapsulation on Tunnel Interfaces ............................................................................... 41
 
VPN QUESTONS......................................................................................................................................................... 43
 
VPN ANSWERS ......................................................................................................................................................... 141
 
Network Management ................................................................................................................................................. 45
 
Manage/r IPs .............................................................................................................................................................. 45
 
Manage IP ................................................................................................................................................................ 45
 
Manager-IP ............................................................................................................................................................. 46
 
Management Methods ............................................................................................................................................ 46
 
The CLI...................................................................................................................................................................... 47
 
Serial Console ........................................................................................................................................................ 47
 
THE SERIAL TERMINAL SETTINGS .............................................................................................................. 47
 
Configuring SSH Management ........................................................................................................................ 48
 
WebUI ....................................................................................................................................................................... 48
 
User Privileges ...................................................................................................................................................... 48
 
Interpret internal counters and logs ................................................................................................................ 50
 
Search
Search History:
Searching...
Result 00 of 00
00 results for result for
  • p.
    • Notes
    Load more