Cisco Wireless & Mobility

You have fundamental knowledge about IEEE 802.11 Wireless LANs and some practical experience in configuration and deployment. Basic Cisco IOS skills (CCNA or CCNP level) are required. You might have already attended an introductory course about WLANs (such as the Cisco AFWSS) however this is not a must.

This 3-day workshop provides detailed information about state-of-the art WLAN security mechanisms. Important concepts and algorithms are explained to encourage security-sensitised thinking. Additionally “focused” information about security-related WLAN topics are given as well as management issues and service impacts.

Short 802.11 Review and Deepening (w.r.t. Security)

• Frequencies
• Modulation and Protocol
• Antenna principles and overview

WLAN Security

• Introduction: Threat scenarios
• 802.11 WEP based security
• WEP attacks
• TKIP and MIC
• 802.1x/EAP methods (LEAP, EAP-TLS, PEAP, EAP-FAST, etc)
• WPA Key Management
• WPA-2, AES and CCMP
• Additional security hardening methods
• VPN considerations
• Fast Secure Roaming
• Guidelines to secure WLAN

LAB Exercises

• Multiple VLANs with different security level
• Cisco ACS
• WEP, WPA, LEAP, EAP-FAST, PEAP
• Fast Secure Roaming
• Management with WLSE (optional)
• Attacking the WLAN

WLAN Hacker Tools

• How they work
• Tools Overview and Installation
• Capture and analyze WLAN frames
• Examine the WLAN protocol procedures
• LAB: Cracking WEP, LEAP, etc

WLAN Site Survey (optional)

• Security Issues
• Link budget calculation
• Interferences
• Site survey guidelines