<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE FL_Course SYSTEM "https://www.flane.de/dtd/fl_course095.dtd"><?xml-stylesheet type="text/xsl" href="https://portal.flane.ch/css/xml-course.xsl"?><course productid="2880" language="de" source="https://portal.flane.ch/swisscom/xml-course/juniper-ajvi" lastchanged="2025-09-10T08:50:33+02:00" parent="https://portal.flane.ch/swisscom/xml-courses"><title>Advanced Juniper Networks IPSec VPN Implementations</title><productcode>AJVI</productcode><vendorcode>JP</vendorcode><vendorname>Juniper Networks</vendorname><fullproductcode>JP-AJVI</fullproductcode><version>6.c</version><objective>&lt;p&gt;After successfully completing this course, you should be able to:
&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Configure LAN-to-LAN IP Security (IPsec) VPNs in various configurations.&lt;/li&gt;&lt;li&gt;Configure VPN redundancy.&lt;/li&gt;&lt;li&gt;Configure dynamic routing using IPsec VPNs.&lt;/li&gt;&lt;li&gt;Configure remote access IPsec connectivity including group Internet Key Exchange (IKE) and shared IKE.&lt;/li&gt;&lt;li&gt;Configure generic routing encapsulation (GRE) tunnels.&lt;/li&gt;&lt;/ul&gt;</objective><essentials>&lt;p&gt;Prerequisites for this course include the following:&lt;/p&gt;
&lt;p&gt;Completion of the Configuring Juniper Networks Firewall/IPSec VPN Products (CJFV) course or equivalent experience with ScreenOS software. 
General networking knowledge, including Ethernet, TCP/IP, and routing concepts.&lt;/p&gt;</essentials><audience>&lt;p&gt;This course is intended for network engineers, network support personnel, and reseller support.&lt;/p&gt;</audience><contents>&lt;p&gt;This two-day, advanced-level course focuses on the wide range of options available when configuring VPNs using Juniper Networks firewall/VPN products. Students attending the course will learn these various deployments through detailed lectures and hands-on lab exercises. This course has been updated to Revision 6.c.&lt;/p&gt;</contents><outline>&lt;h6&gt;&lt;strong&gt;Day 1 &lt;/strong&gt;&lt;/h6&gt;&lt;h6&gt;&lt;strong&gt;Chapter 1: Course Introduction&lt;/strong&gt;&lt;/h6&gt;&lt;h6&gt;&lt;strong&gt;Chapter 2: ScreenOS VPN Basics Review&lt;/strong&gt;&lt;/h6&gt;&lt;ul&gt;&lt;li&gt;VPN Review&lt;/li&gt;&lt;li&gt;Verifying Operations&lt;/li&gt;&lt;li&gt;VPN Monitor&lt;/li&gt;&lt;li&gt;Lab 1: VPN Review&lt;/li&gt;&lt;/ul&gt;&lt;h6&gt;&lt;strong&gt;Chapter 3: VPN Variations&lt;/strong&gt;&lt;/h6&gt;&lt;ul&gt;&lt;li&gt;Dynamic Peers&lt;/li&gt;&lt;li&gt;Transparent Mode&lt;/li&gt;&lt;li&gt;Overlapping Addresses&lt;/li&gt;&lt;li&gt;Lab 2: VPN Variations&lt;/li&gt;&lt;/ul&gt;
&lt;h6&gt;&lt;strong&gt;Chapter 4: Hub-and-Spoke VPNs&lt;/strong&gt;&lt;/h6&gt;&lt;ul&gt;&lt;li&gt;Concepts&lt;/li&gt;&lt;li&gt;Policy-Based Hub-and-Spoke&lt;/li&gt;&lt;li&gt;Route-Based, with No Policy, and NHTB&lt;/li&gt;&lt;li&gt;Route-Based with Policy&lt;/li&gt;&lt;li&gt;Centralized Control&lt;/li&gt;&lt;li&gt;AutoConnect-Virtual Private Networks&lt;/li&gt;&lt;li&gt;Lab 3: Hub-and-Spoke VPNs&lt;/li&gt;&lt;/ul&gt;
&lt;h6&gt;&lt;strong&gt;Chapter 5: Routing over VPNs&lt;/strong&gt;&lt;/h6&gt;&lt;ul&gt;&lt;li&gt;Routing Overview&lt;/li&gt;&lt;li&gt;Configuring RIP&lt;/li&gt;&lt;li&gt;Configuring OSPF&lt;/li&gt;&lt;li&gt;Case Studies&lt;/li&gt;&lt;li&gt;Lab 4: Dynamic Routing&lt;/li&gt;&lt;/ul&gt;
&lt;h6&gt;&lt;strong&gt;Day 2&lt;/strong&gt;&lt;/h6&gt;&lt;h6&gt;&lt;strong&gt;Chapter 6: Using Certificates &lt;/strong&gt;&lt;/h6&gt;&lt;ul&gt;&lt;li&gt;Concepts and Terminology&lt;/li&gt;&lt;li&gt;Configuring Certificates and Certificate Support&lt;/li&gt;&lt;li&gt;Configuring VPNs with Certificates&lt;/li&gt;&lt;li&gt;Lab 5: Using Certificates&lt;/li&gt;&lt;/ul&gt;&lt;h6&gt;&lt;strong&gt;Chapter 7: Redundant VPN Gateways (Optional)&lt;/strong&gt; &lt;/h6&gt;&lt;ul&gt;&lt;li&gt;Redundant VPN Gateways&lt;/li&gt;&lt;li&gt;Other Options&lt;/li&gt;&lt;li&gt;Demo: Redundant VPN Gateways&lt;/li&gt;&lt;/ul&gt;
&lt;h6&gt;&lt;strong&gt;Chapter 8: Generic Routing Encapsulation (Optional)&lt;/strong&gt; &lt;/h6&gt;&lt;ul&gt;&lt;li&gt;Configuring GRE&lt;/li&gt;&lt;/ul&gt;&lt;h6&gt;&lt;strong&gt;Chapter 9: Dial-Up IPSec VPNs&lt;/strong&gt;&lt;/h6&gt;&lt;ul&gt;&lt;li&gt;Basic Dial-up Configuration&lt;/li&gt;&lt;li&gt;Group IKE ID&lt;/li&gt;&lt;li&gt;XAUTH and Shared IKE ID&lt;/li&gt;&lt;/ul&gt;&lt;h6&gt;&lt;strong&gt;Appendix A: NetScreen-Remote&lt;/strong&gt;&lt;/h6&gt;&lt;ul&gt;&lt;li&gt;NetScreen-Remote Overview&lt;/li&gt;&lt;li&gt;Basic Dial-Up A-9&lt;/li&gt;&lt;li&gt;XAUTH/Shared IKE ID&lt;/li&gt;&lt;li&gt;Demo: Dial-Up VPNs&lt;/li&gt;&lt;li&gt;Lab 6: Dial-Up VPNs&lt;/li&gt;&lt;/ul&gt;</outline><comments>&lt;p&gt;Diese Kurse behandeln Firewalls wie SSG, Netscreen die ScreenOS nutzen. F&amp;uuml;r JunOS Firewalls wie die SRX-Series, gehen Sie bitte auf die Kurse unter dem Punkt JunOS Firewall.&lt;/p&gt;</comments><objective_plain>After successfully completing this course, you should be able to:



- Configure LAN-to-LAN IP Security (IPsec) VPNs in various configurations.
- Configure VPN redundancy.
- Configure dynamic routing using IPsec VPNs.
- Configure remote access IPsec connectivity including group Internet Key Exchange (IKE) and shared IKE.
- Configure generic routing encapsulation (GRE) tunnels.</objective_plain><essentials_plain>Prerequisites for this course include the following:

Completion of the Configuring Juniper Networks Firewall/IPSec VPN Products (CJFV) course or equivalent experience with ScreenOS software. 
General networking knowledge, including Ethernet, TCP/IP, and routing concepts.</essentials_plain><audience_plain>This course is intended for network engineers, network support personnel, and reseller support.</audience_plain><contents_plain>This two-day, advanced-level course focuses on the wide range of options available when configuring VPNs using Juniper Networks firewall/VPN products. Students attending the course will learn these various deployments through detailed lectures and hands-on lab exercises. This course has been updated to Revision 6.c.</contents_plain><outline_plain>Day 1 

Chapter 1: Course Introduction

Chapter 2: ScreenOS VPN Basics Review

- VPN Review
- Verifying Operations
- VPN Monitor
- Lab 1: VPN Review
Chapter 3: VPN Variations

- Dynamic Peers
- Transparent Mode
- Overlapping Addresses
- Lab 2: VPN Variations

Chapter 4: Hub-and-Spoke VPNs

- Concepts
- Policy-Based Hub-and-Spoke
- Route-Based, with No Policy, and NHTB
- Route-Based with Policy
- Centralized Control
- AutoConnect-Virtual Private Networks
- Lab 3: Hub-and-Spoke VPNs

Chapter 5: Routing over VPNs

- Routing Overview
- Configuring RIP
- Configuring OSPF
- Case Studies
- Lab 4: Dynamic Routing

Day 2

Chapter 6: Using Certificates 

- Concepts and Terminology
- Configuring Certificates and Certificate Support
- Configuring VPNs with Certificates
- Lab 5: Using Certificates
Chapter 7: Redundant VPN Gateways (Optional) 

- Redundant VPN Gateways
- Other Options
- Demo: Redundant VPN Gateways

Chapter 8: Generic Routing Encapsulation (Optional) 

- Configuring GRE
Chapter 9: Dial-Up IPSec VPNs

- Basic Dial-up Configuration
- Group IKE ID
- XAUTH and Shared IKE ID
Appendix A: NetScreen-Remote

- NetScreen-Remote Overview
- Basic Dial-Up A-9
- XAUTH/Shared IKE ID
- Demo: Dial-Up VPNs
- Lab 6: Dial-Up VPNs</outline_plain><comments_plain>Diese Kurse behandeln Firewalls wie SSG, Netscreen die ScreenOS nutzen. Für JunOS Firewalls wie die SRX-Series, gehen Sie bitte auf die Kurse unter dem Punkt JunOS Firewall.</comments_plain><duration unit="d" days="2">2 Tage</duration><pricelist><price country="FR" currency="EUR">1400.00</price><price country="PL" currency="EUR">1500.00</price><price country="JP" currency="JPY">200000.00</price><price country="IE" currency="EUR">1400.00</price><price country="NL" currency="EUR">1200.00</price><price country="PA" currency="USD">2000.00</price><price country="VE" currency="USD">2000.00</price><price country="P3" currency="USD">2000.00</price><price country="CR" currency="USD">2200.00</price><price country="DE" currency="USD">1600.00</price><price country="CH" currency="USD">1600.00</price><price country="IL" currency="USD">1600.00</price><price country="SK" currency="USD">1600.00</price></pricelist><miles/></course>