This two-day course discusses the configuration of the Unified Access Control solution offered by Juniper Networks. Students will work with the solution elements–the Infranet Controller, the Infranet Enforcer, and the Infranet Agent–to configure secured access to network resources. Key topics include Unified Access Control deployment, basic implementation, and element configuration. Students will have the opportunity to apply their knowledge in several hands-on labs.

Target audience

Network engineers, support personnel, reseller support, and anyone responsible for implementing the Unified Access Control products.

Prerequisites

Prerequisites

Completion of Configuring Juniper Networks Firewall/IPSec VPN Products (CJFV) or equivalent experience with ScreenOS firewalls is required. The course also assumes that students have moderate background in internetworking basics, security concepts, network administration, application support, and basic remote access concepts.

Course contents

Day 1:
Introduction

The UAC Solution

• Describe the need for UAC
• Describe the components of the UAC solution
• Explain how UAC components interact to provide policy enforcement
• Discuss sample UAC deployments

Initial Configuration

• Configure basic interconnectivity among UAC components

Access Control Using the Infranet Enforcer

• Describe the access management framework
• Configure Infranet Controller access management elements
• Configure the Infranet Enforcer

* Day 2:

Access Control Using 802.1X

• Describe and configure the Infranet Controller to use RADIUS for 802.1X enforcement
• Describe switch configuration requirements
• Describe using an Infranet Enforcer as an 802.1X RADIUS client

Management and Troubleshooting

• Use the integrated logging functions to verify user connectivity and policy assignment
• Use policy tracing to troubleshoot user policy assignment
• Manage configuration files

Authentication Options

• Explain available user authentication options
• Configure authentication options using:
  • AD/NT
  • RADIUS
  • LDAP
  • Single sign-on
• Configure guest access and anonymous authentication

Endpoint Defense

• Discuss endpoint defense options
• Configure Host Checker
• Configure remediation options
• Configure Odyssey Access Client options
• Configure agentless connectivity