I am currently deep diving into the whole TrustSec architecture. It has quickly become apparent to me, that i need to lab alot of this out in detail. That means upgrading my homelab with a 3650 switch as well as a refurbished laptop for acting as the supplicant for Dot1x operations.

So a couple of days ago I was going through the CCIE Security training videos on Cisco Learning Network and I noticed a golden nugget. It was mentioned that Cisco was on track, to release some learning labs for practice use for the CCIE Security lab exam!

Its been almost a year since my last post. Wow, do I feel bad about that! :( Anyways, ive been studying on and off for the last year and I was scheduled to have my first lab attempt this coming thursday.

So I have had some time to put everything together in my small CCIE Security V6 lab. I want to spend a few moments explaining how everything is put together so others can benefit from it. At the core of the whole thing is my new server, which is running great!

The Concept: In legacy site to site (S2S) VPN’s we are used to defining crypto maps and applying them to a physical interface. However, since these does not utilize GRE, you have no way of supporting multicast and routing protocols.