Secure Networking - A Company Network Project on Open-Source

What you'll learn
Learn network security, open networking & Linux engineering in one tutorial
Building up a company-grade segmented network entirely on Unix-like OSs
Grasp the full picture of the underlying technologies in network security
Project-based learning of firewall clusters on OpenSUSE Linux as well as pfSense
Learn about NAC (802.1X, EAP, EAPoL) using PacketFence to reject or accpet clients on switches
Networking core fundamentals such as Traffic Tagging using VLANs, Trunking, STP, subnetting, LAG, MLAG, etc.
Learn firewall's core functionalities & be able to work with any firewall, no matter what brand
Initial to advanced configuration of Nvidia Cumulus Linux switches
Learn how head & branch offices securely communicate using IPSec site to site VPN
Learn most common network attacks and penetration testing technics
Learn underlying cluster technologies e.g. Keepalived & VRRP on Linux
Practicing network security by segmentation, compartmentalization, & isolation
Learn how to create different VLANs in a company and control their traffic on each other
Setting up Linux based DHCP server to serve IP addresses in different VLANs
Learn network redundency methods e.g. LACP (802.3ad), balance-rr, balance-xor, etc. on Linux, pfSense and Cumulus switch
Learn how to migrate from iptables to nftables
Project-based learning of advanced pfSense firewall features
Project-based learning of packet capture & analysis using Wireshark, TShark, TermShark & TCPDump
Learn about openSUSE, AlpineLinux, Debian, Ubuntu and FreeBSD
Implement IPSec VPN on openSUSE using strongSwan
Configuring openVPN remote access for home office users
Configuring Wireguard remote access for IoT devices (key based authentication)
Learn how to harden SSH logins using two-factor authentication (2FA)
Learn virtualization using VirtualBox and GNS3
Yersinia attack toolkit
Requirements
No prior programming knowledge required
Basic IT & networking skills
A virtualization compatible computer
Internet connection
Passionate curiosity for learning (is a must)
Description
When it comes to open-source, the sky is the limit!In a nutshell, you will build a company-like network with headquarter and branch office on Unix-like OSs and open-source tools, then try to hack its vulnerabilities.From switches to endpoints, clustered firewalls, servers incl. Network Access Control, shortly NAC server, jumpers, and anything else are all built on a flavor of Linux OS such as openSUSE, AlpineLinux, Debian, Ubuntu, etc., or a Unix-like OS such as FreeBSD.Network security should be embedded into the nature of the corporate's network and that is what we learn in this course.We do not care much about vendors and logos, but practical concepts. For example, we dive into Shell commands, TCP/IP and networking fundamental concepts, and core network security principles using open-source, yet industry-proven products.We aim to teach you how standard networking concepts are "designed" and are also "applied" in work environments. Why a pure Linux-based network? Besides the fact that Linux runs the world, if you learn the secure networking using Linux, Unix, and open-source tools, you will feel pretty confident about their commercial equivalents. For example, if you learn network firewalling using iptables and nftables, you won't have any issues with Cisco FirePower, FortiGate, or Juniper firewalls. As said, we are not into vendors, we are interested in standardized theoretical concepts and practical technics. This method will give you a firm conceptual understanding of underlying technologies and ideas about how finished products like Cisco switches, Fortigate Firewalls, Cisco ISE NAC, HPE Aruba, and so on, actually work behind the scene.In the end, you will run the most common network attacks using Kali Linux against the network you built yourself.Your Learning Key-Terms:VirtualizationGNS3 Lab (with Hyper-V & VirtualBox Integration)TCP/IPOSI ModelNetwork TopologiesIP SubnettingVLANTraffic TaggingTrunkingNIC TeamingLAGG (Link Aggregation)MLAG (Multi-Chassis Link Aggregation)Bond Modes: Active-Backup, 802.3ad (LACP)BridgingSpanning TreeInter-VLAN RoutingRouting & ARP TablesMAC FloodIEEE 802.1X & MAB (MAC Address Bypass)Network Access Control (NAC)PacketFence (Open Source NAC)Extensible Authentication Protocol (EAP) (EAPoL)RADIUS (FreeRADIUS)Linux Open Source NetworkingNvidia Cumulus Linux SwitchopenSUSE LinuxUbuntu LinuxAlpine LinuxLinux Shell Command LineFirewallsNetfilter FrameworkPacket FilteringiptablesnftablesPacket Capture AnalysisWireshark, TShark, Termshark, and TCPDumpLinux ClusteringkeepalivedVRRPConnTrackVirtual Private Network (VPN)OpenVPNstrongSwan IPSec (swanctl)WireGuardpfSense Firewall (FreeBSD)pfSense ClusterNext-Gen FirewallDemilitarized Zone (DMZ)Ethical Hacking Network Attacks and TechnicsSSH BruteForce AttackMITM with Mac Spoofing AttackMITM with DHCP Spoofing AttackDOS Attack (POD, SYNFLOOD, BPDUs, CDP)YersiniaDHCP StarvationDNS SpoofingOffensive Packet SniffingARP spoofing, ARP cache poisoning attackNetwork hackingCyber securityNetwork Hardening Solutions
Who this course is for
Computer Students, learners and enthusiasts
IT administrators
Network engineers
Linux engineers
Cybersecurity specialists
Firewall administrators
Homepage