SVPN-300-730 Labs

14labs planned

17scenarios

3multi-scenario

11single-scenario

How a lab is put together

Scenario 1 establishes the foundation. Every later scenario depends on Scenario 1 and, wherever possible, on nothing else — hub-and-spoke rather than a chain. A failure in Scenario 3 does not strand Scenario 4, you can start at any scenario from one known state, and each lab needs one start-config rather than one per scenario.

Each module opens with a setup lab that brings its appliances up from the start-config — numbered like every other lab, first in its module. Labs are numbered per module, the way lessons are: M4 · Lab 2 is the second lab of Module 4. Every lab sits right after the last lesson it exercises, so you do a lesson or a few, then the lab.

Labs are grouped by module and exam objective; a grouping is refined lesson by lesson as each lab guide publishes, and the numbering never changes once a lab is live.

M1 · Lab 1 IKEv2 Tunnel Establishment: Packet Walk svpn-site-to-site Objective 4.1 · Identify
1. S1 IKEv2 Tunnel Establishment: Packet Walk protocol
M1 · Lab 2 Site-to-Site IPsec: IOS sVTI & FTD to the Branch Router svpn-site-to-site Objective 4.3 · Identify
1. S1 Configure IOS Site-to-Site IPsec with sVTI configuration
2. S2 Configure Site-to-Site VPN: FTD to Branch Router configuration
M1 · Lab 3 Implement DMVPN: mGRE, NHRP & IPsec Protection Across the Phases svpn-site-to-site Objective 1.2 · Implement
1. S1 Implement DMVPN: mGRE, NHRP & IPsec Protection Across the Phases configuration
M1 · Lab 4 Implement Site-to-Site FlexVPN with Local AAA Authorization svpn-site-to-site Objective 1.3 · Implement
1. S1 Implement Site-to-Site FlexVPN with Local AAA Authorization configuration
M2 · Lab 1 Configure Remote Access VPN: FTD & Cisco Secure Client svpn-remote-access Objective 4.4 · Identify
1. S1 Configure Remote Access VPN: FTD & Cisco Secure Client configuration
M2 · Lab 2 Implement AnyConnect IKEv2 Remote Access on ASA and IOS XE svpn-remote-access Objective 2.1 · Implement
1. S1 Implement AnyConnect IKEv2 Remote Access on ASA and IOS XE configuration
M2 · Lab 3 Implement AnyConnect SSL VPN on ASA: Group Policies, Profiles & DTLS svpn-remote-access Objective 2.2 · Implement
1. S1 Implement AnyConnect SSL VPN on ASA: Group Policies, Profiles & DTLS configuration
M2 · Lab 4 Implement Clientless SSL VPN on ASA svpn-remote-access Objective 2.3 · Implement
1. S1 Implement Clientless SSL VPN on ASA configuration
M2 · Lab 5 Implement FlexVPN Remote Access on IOS XE Routers svpn-remote-access Objective 2.4 · Implement
1. S1 Implement FlexVPN Remote Access on IOS XE Routers configuration
M3 · Lab 1 Troubleshoot IPsec Tunnels: FTD Debugs, IOS XE & ASA SAs, Selectors & NAT Exemption svpn-troubleshooting Objective 3.1 · Troubleshoot
1. S1 Troubleshoot VPN Tunnel Establishment on FTD: Debugs That Matter troubleshooting
2. S2 Troubleshoot IPsec on IOS XE and ASA: SAs, Selectors, NAT Exemption & Certificates troubleshooting
M3 · Lab 2 Troubleshoot DMVPN Tunnel Establishment svpn-troubleshooting Objective 3.2 · Troubleshoot
1. S1 Troubleshoot DMVPN Tunnel Establishment troubleshooting
M3 · Lab 3 Troubleshoot Site-to-Site FlexVPN svpn-troubleshooting Objective 3.3 · Troubleshoot
1. S1 Troubleshoot Site-to-Site FlexVPN troubleshooting
M3 · Lab 4 Troubleshoot Remote Access VPN: TLS/DTLS Sessions & AnyConnect IKEv2/SSL on ASA & IOS XE svpn-troubleshooting Objective 3.4 · Troubleshoot
1. S1 Verify & Troubleshoot RA VPN: TLS/DTLS Session Establishment & Debugs troubleshooting
2. S2 Troubleshoot AnyConnect IKEv2 and SSL on ASA and IOS XE with ASDM and the CLI troubleshooting
M3 · Lab 5 Troubleshoot Clientless SSL VPN on ASA svpn-troubleshooting Objective 3.5 · Troubleshoot
1. S1 Troubleshoot Clientless SSL VPN on ASA troubleshooting