Internet Security Workshop
Instructors : Kunjal Trivedi (Cisco), Vicky Shrestha (World Link), Damien Holloway (Juniper)

Class Size: 28

Who should attend: Network Operations and security staff at ISPs and Network Service Providers. People who are trying to learn ropes of establishing a functioning security system in their network core and edges. Any one else with interest in Security topics.

Pre-requisites:This is an advanced course. Good familiarity with UNIX command line and system administration jobs. Knowledge of Layer 3 protocols, and command line of popular routers. Basic knowledge of security concepts is an added advantage.

What you will learn:
The ISP / NSP Security Workshop focuses on following components to provide comprehensive understanding and hands-on experience allowing you to gain valuable experience in network security best common practices, tools and techniques.

- Network infrastructure security
- Security services

For network infrastructure security, best common practice for protecting infrastructure including IP addressing, baseline building, securing IGP and BGP routing protocols and router filtering techniques are covered in detail. Controlling access to the routers, collecting network telemetry information and control plane protection techniques are discussed.

A six step methodology for detecting and mitigating DDoS attacks on the infrastructure provides hands-on understanding on how to deal with such attacks. Anti-spoofing measures to combat IP spoofing attacks and Remotely Triggered Blackhole (RTBH) filtering to protect against infrastructure attacks hands-on practice provides easy to deploy tools on the SP networks.

The security services address designing, deploying and managing L3 Virtual Private Networks. A balanced discussion covering security of 3VPN provides good basis of evaluating the level of security for the business needs. Finally, a discussion of how managed security services such as IP VPN prepares SP networks for provisioning other security services

VoIP + IP MULTICAST
Instructors : Jonny Martin (FX Networks), Greg Shepherd (Cisco) and John Zwiebel (Cisco)

Class Size: 28

Who should attend: This is a technical workshop, made up of lectures and hands-on lab work. Open to technical staff who are now or soon will be deploying IPMulticast services on a IP based Internet Service Provider (ISP) network, Enterprise network, Campus network or Internet exchange Point (IXP), for one-to-many and/or many-to-many data/media/NGN distribution services and applications.

Pre-requisites:User level UNIX and basic system administration skills; basic understanding of VoIP; understanding of TCP/IP and some network design in a service provider environment.

What you will learn:

• An introduction to telephony past and present, and how this has evolved into Voice over IP.
• VoIP fundamentals; techniques, codecs, protocols, plus network and quality considerations.
• How to install and configure Asterisk, one of the most popular and fully feature open source PBXs available.
• Advanced techniques with Asterisk including database integration, interactive voice response (IVR) applications, billing systems, queuing / helpdesk sytems, and integration with external applications.
• Configuration of the open source SIP Express Router, and a look at other open source VoIP servers.
• How to design and build a VoIP platform suitable for an ISP environment, including management considerations
• Configuration and provisioning requirements for a variety of hardware, including Asterisk/Digium PSTN cards, Cisco voice gateways, and SIP handsets.
• Where and how to use ENUM, voice peering, and voice interconnection techniques.
• A look at where VoIP technologies are heading, and current trends in VoIP deployments.

Technologies covered: Basic circuit switched telephony, VoIP protocols, Asterisk the open source PBX, Sip Express Router, PSTN gateways, ENUM, SIP based voice peering, ISP VoIP platform design.

Multicast Workshop:
Who should attend: This is a technical workshop, made up of lectures and hands-on lab work. Open to technical staff who are now or soon will be deploying IPMulticast services on a IP based Internet Service Provider (ISP) network, Enterprise network, Campus network or Internet exchange Point (IXP), for one-to-many and/or many-to-many data/media/NGN distribution services and applications.

Pre-requisites: Cisco IOS Fundamentals; IGP and BGP router configuration basics.

What you will learn:

• Techniques for design, set-up, and operation of an IPMulticast enabled network.
• PIM-SM/SSM/BiDir configuration, application, and design considerations for IPTV/NGN/3-play, financial service provider, and exchange networks.
• Interdomain multicast configuration using PIM, MBGP, and MSDP.
  

DNS
Instructors : Bill Manning (EP.net),  Johan Ihren (Autonomica) & Ed Lewis (Neustar)

Class Size : 28

Who should attend: This course is suited for systems staff, network administrators, DNS administrators, and other staff with responsibility for design and operations of network services (almost all of which depend on DNS). Anyone else who wants a better understanding of how DNS actually works is welcome too. ccTLD administrators are most welcome.

Pre-Requisites: Basic user level Unix, knowledge of TCP/IP addressing and reasonable idea about how the Internet naming scheme works.

What you will Learn:
A complete and compact introduction to DNS. All of "classic DNS" is covered. Most of standard DNS issues are both theoretically discussed and, through lab exercises, worked with in practice.

Excerpt of topics covered: historic overview, database structure, record types, zones and domains, DNS message structure, recursion, authoritative servers, resolvers, caching, delegation, glue records, the ice floe model vs. the tree hierarchy model, reverse delegation, master vs slave, primary master and hidden master, zone transfers, notify, access control, logging, implementations, design alternatives and aspects.

As time permits, more complex scenarios (including firewalls, "split-DNS", forwarding, etc), TSIG (Transaction Signatures),rndc (remote control of BIND9 nameservers), EDNS(0) (Extended DNS), DNSSEC (securing DNS data through the addition of digital signatures), views, etc. The lab exercises are performed in a BIND9 environment.

The later part of the course covers emerging topics such as secure dynamic update of DNS data. Furthermore DHCP for address space management is covered, including all the details of interection between DHCP and DNS in environments utilizing dynamic update. This course also treat the DNS aspects of IPv6 and DNS issues with migration to a mixed IPv4/IPv6 Internet. Finally international domain names are discussed in some detail.

All topics are fully covered with both lectures and hands-on exercises