This session focuses on troubleshooting Cisco Intrusion Prevention System (IPS) software 7.0 on standalone sensors and modules, as well as modules for Cisco Adaptive Security Appliances (ASA) 5500 Series appliances. The session uses command-line and Web-based configuration tools for IPS appliances, like IPS Device Manager (IDM), IPS Manager Express (IME), Adaptive Security Device Manager (ASDM), and Cisco Security Manager. This session is for attendees who configure, maintain, and troubleshoot intrusion protection systems consisting of IPS sensors 6.x and 7.0.

This session covers in detail the concepts of the Dynamic Multipoint VPN (DMVPN) solution. It starts with an overview of basic DMVPN functionality including in-depth descriptions of how Next Hop Resolution Protocol (NHRP) is used in DMVPN hub-and-spoke and dynamic spoke-spoke networks, including DMVPN Phase 2 and Phase 3 functionality and discussion and examples of using DMVPN for Network Virtualization with VRF-lite and 2547oDMVPN. The session also covers how DMVPN interacts with NAT, QoS, MPLS, and dynamic routing. This session is for designers, managers, and troubleshooters of extended corporate DMVPNs and for service providers that are deploying these services for their customers.

This session presents a methodical technique for troubleshooting Dynamic Multipoint VPN (DMVPN) networks. The session starts with a short overview of DMVPN functionality and then concentrates on a four-layer troubleshooting methodology. These four layers are IP infrastructure layer (peer connectivity), IPsec encryption layer (IPsec/ISAKMP), GRE/NHRP layer (NHRP), and the VPN layer (IP routing protocols). Explicit troubleshooting examples with solutions are shown that are based on the most common DMVPN design and implementation issues as seen by Cisco Technical Assistance Center (TAC) engineers. This session is for designers, managers, and troubleshooters of extended corporate DMVPNs and for service providers deploying these services.