Course details

Design and Security of Enterprise Networks

CCS Acad. year 2020/2021 Winter semester 5 credits

Current academic year

Designing network topology with security. BPG, MPLS, MPLS VPN and VxVLAN technologies. Multihoming, mobility, renumbering. IPv6 native implementation and transition techniques. Optical networks. Automated network configuration using IPAM, DevOps and NetOps.

Guarantor

Matoušek Petr, doc. Ing., Ph.D., M.A. (DIFS)

Course coordinator

Grégr Matěj, Ing., Ph.D. (DIFS)

Language of instruction

Czech

Completion

Classified Credit

Time span

  • 52 hrs laboratories

Assessment points

  • 20 pts mid-term test (written part)
  • 54 pts numeric exercises
  • 26 pts labs

Department

Department of Information Systems (UIFS)

Instructor

Grégr Matěj, Ing., Ph.D. (DIFS)
Veselý Vladimír, Ing., Ph.D. (DIFS)

Subject specific learning outcomes and competences

Students learn concepts of network design, security and management of enterprise networks. They will understand network technologies like BPG, MPLS, VxVLAN, VPN tunneling, QoS and others.

Learning objectives

The course is focused on advanced networking technologies employed in ISP and telcom networks. It includes interdomain routing, IPv6 transitions technologies, L2 virtual technologies and quality of services. Hands-on lab training will be provided on active network devices and Linux stations.

Why is the course taught

This course prepares students for a role of network administrators in ISP networks.

Prerequisite knowledge and skills

Student are expected to be familiar with configuration of active network devices and advanced configuration of Linux systems. Cisco courses CCNA Routing and Switching or CCNP Route are recommended as prerequisities.

Study literature

  • Lecture notes in English.
  • Omar Santos, John Stuppi. CCNA Security 210-260 Official Cert Guide. Cisco Press, 2015.
  • Anthony Bruno, Steve Jordan. CCDA 200-310 Official Cert Guide, 5th Edition. Cisco Press, 2016.
  • Ina Minei, Julian LucekMPLS-Enabled Applications: Emerging Developments and New Technologies. Wiley; 3 edition (Jan. 18 2011)
  • Ivan Pepelnjak, Jim Guichard, MPLS and VPN Architectures, 2000 by Cisco Press.

Syllabus of laboratory exercises

  1. Introduction to TCP/IP networking.
  2. Stateful firewalls, IDS/IPS systems.
  3. Cisco ASA - Adaptive Security Appliance.
  4. BGP routing.
  5. BGP - filering, communities.
  6. LISP - Locator ID Separation Protocol
  7. IPv6 in enterprise networks. Transition mechanisms, autoconfiguration.
  8. MPLS a and packet switching in ISP networks.
  9. MPLS VPN, ATOM
  10. VxVLAN
  11. QoS.
  12. Optical connections and links.
  13. IPAM, automated management, devops

Progress assessment

  • Home preparation and hands-on labs (max 26 points).
  • Skills exam (max 20 points).
  • Final configuration and theoretical test (max 54 points)


Exam prerequisites:

  • Participation in all hands-on labs.
  • Half of points in each activity required for credits.

Controlled instruction

  • Home preparation and active participation in hands-on labs.
  • Missed classes will not be replaced.

Exam prerequisites

  • Participation in all hands-on labs.
  • Half of points in each activity required for credits.

Course inclusion in study plans

Back to top