CCIE Enterprise - VPN Lab - Initial + Full Configs

VPNs create secure connections over untrusted networks by encapsulating data packets within new headers, forming a tunnel. Protocols like IPsec offer authentication, integrity, and confidentiality via encryption (e.g., AES, 3DES) and key exchange (e.g., IKEv1/v2). IPsec tunnel mode encapsulates the entire original packet, while transport mode encapsulates only the payload. SSL/TLS VPNs encrypt application-layer traffic, often using HTTPS. VPNs can integrate with authentication services (RADIUS, TACACS+) and incorporate advanced features like Perfect Forward Secrecy (PFS). NAT traversal and firewall compatibility are crucial for successful deployment.

You will be practicing these tasks:

• GRE tunnels
• IPSec/IKEv1
• IPSec/IKEv2
• Site-To-Site VPN using Crypto MAP
• Site-toto-Site IPSec VPN using S-VTI
• DMVPN Phase 1, 2 and 3 with EIGRP
• DMVPN Phase 1, 2 and 3 with OSPF
• GETVPN
• FlexVPN

The default username and password for images used in this course is as follows, however you will hear new passwords during the course if the instructor changes the credentials: 

** For Cisco XRv you are asked for a username and password in the loading process. You can add any username and password other than admin, root, sysadmin and other reserved usernames. Go with something like Alex/cisco e.g.

Then when completely loaded, you can use cisco/cisco or admin/admin.

***For XRv9K Full image you are asked for a username and password in the loading process. You then login using the username and password that you set.