4 Replies Latest reply: Jan 1, 2015 9:42 PM by Kunal Kapil RSS

    CCNP Security Lab question


      Looking to get gear for a CCNP Security lab and would like to be able to use it for CCIE if possible. 3xRouters 1841, 3xSwitches 3750. I also know I need 2xASA 5510 and IPS. will this be good or do I need more gear.


      Thanks ahead of time

        • 1. Re: CCNP Security Lab question
          Paul Stewart  -  CCIE Security

          Thats a great start. I actually had a smaller lab at home. Something like 1x 1841, an ASA5505, and a handful of 1760's. I labbed smaller configurations during the week. On the weekends, I leased rack time from one of the rack rental sites. I never could stomach the cost of a full CCIE lab.

          • 2. Re: CCNP Security Lab question

            Here's the recommended list from Cisco: https://learningnetwork.cisco.com/docs/DOC-15257


            • Cisco 3800 Series Integrated Services Routers (ISR)
            • Cisco 1800 Series Integrated Services Routers (ISR)
            • Cisco 2900 Series Integrated Services Routers (ISR G2)
            • Cisco Catalyst 3560-24TS Series Switches
            • Cisco Catalyst 3750-X Series Switches
            • Cisco ASA 5500 and 5500-X Series Adaptive Security Appliances
            • Cisco IPS Series 4200 Intrusion Prevention System sensors
            • Cisco S-series Web Security Appliance
            • Cisco ISE 3300 Series Identity Services Engine
            • Cisco WLC 2500 Series Wireless LAN Controller
            • Cisco Aironet 1200 Series Wireless Access Point
            • Cisco IP Phone 7900 Series*
            • Cisco Secure Access Control System



            The ASA appliances can be configured using CLI or ASDM/Cisco Prime Tools.

            *Device Authentication only, provisioning of IP phones is NOT required. Software Versions

            • Cisco ISR Series running IOS Software Version 15.1(x)T and 15.2(x)T
            • Cisco Catalyst 3560/3750 Series Switches running Cisco IOS Software Release 12.2SE/15.0(x)SE
            • Cisco ASA 5500 Series Adaptive Security Appliances OS Software Versions 8.2x, 8.4x, 8.6x
            • Cisco IPS Software Release 7.x
            • Cisco VPN Client Software for Windows, Release 5.x
            • Cisco Secure ACS System software version 5.3x
            • Cisco WLC 2500 Series software 7.2x
            • Cisco Aironet 1200 series AP Cisco IOS Software Release 12.4J(x)
            • Cisco WSA S-series software version 7.1x
            • Cisco ISE 3300 series software version 1.1x
            • Cisco NAC Posture Agent v4.X
            • Cisco AnyConnect Client v3.0X


            Rack time rental looks good...

            • 3. Re: CCNP Security Lab question

              Thank you

              • 4. Re: CCNP Security Lab question
                Kunal Kapil

                Hi Paul,


                I am aligned with your answer. Could you please suggest if single 5510 with IPS will be sufficient for "Cisco Secure access solutions" exam.