| The first section provides a brief overview of the essential components of the Internet Protocol and IP networking. At the end of this section, you will understand the fundamental principles of defense in depth and breadth security as applied to IP traffic planes. Techniques to secure the IP data plane, IP control plane, IP management plane, and IP services plane are covered in detail in the second section.
The final section provides case studies from both the enterprise network and the service provider network perspectives. In this way, the individual IP traffic plane security techniques reviewed in the second section of the book are brought together to help you create an integrated, comprehensive defense in depth and breadth security architecture.
- Understand the operation of IP networks and routers;
- Learn about the many threat models facing IP networks, Layer 2 Ethernet switching environments, and IPsec & MPLS VPN services;
- Learn how to segment & protect each IP traffic plane by applying defense in depth and breadth principles;
- Use security techniques such as ACLs, rate limiting, IP Options filtering, uRPF, QoS, RTBH, QPPB, and many others to protect the data plane of IP & switched Ethernet networks;
- Secure the IP control plane with rACL, CoPP, GTSM, MD5, BGP and ICMP techniques and Layer 2 switched Ethernet-specific techniques;
- Protect the IP management plane with password management, SNMP, SSH, NTP, AAA, as well as other VPN management, out-of-band management, and remote access management techniques;
- Secure the IP services plane using recoloring, IP fragmentation control, MPLS label control, and other traffic classification & process control techniques. | |
