Difference between revisions of "Central & Eastern Cohort: Cybersecurity Resilience Workshop -Track 2: Securing campus networks and IT assets"
(→TimeTable) |
(→TimeTable) |
||
| Line 102: | Line 102: | ||
| **11:30** || **Module 1: Intro to IP Addressing & Routing (JOINT)** (KK) [https://training.kenet.or.ke/images/7/7d/Track_2-Module_1-Introduction_to_IP_Addressing_and_Routing.pdf [2] || **Module 1:** Routing LAB (KK) || **Module 7:** LAB (Installation of AAA software TACACS+) (BO) || **Module 7:**LAB (Connecting remote sites; establish VPN connections and L2 tunnels) (BO) || **Assessment -section 1 MCQs** (CG) | | **11:30** || **Module 1: Intro to IP Addressing & Routing (JOINT)** (KK) [https://training.kenet.or.ke/images/7/7d/Track_2-Module_1-Introduction_to_IP_Addressing_and_Routing.pdf [2] || **Module 1:** Routing LAB (KK) || **Module 7:** LAB (Installation of AAA software TACACS+) (BO) || **Module 7:**LAB (Connecting remote sites; establish VPN connections and L2 tunnels) (BO) || **Assessment -section 1 MCQs** (CG) | ||
|- | |- | ||
| − | | **12:30** || **Module 1: DNS and its roles (JOINT)** (Akoech) [https://training.kenet.or.ke/images/ | + | | **12:30** || **Module 1: DNS and its roles (JOINT)** (Akoech) [https://training.kenet.or.ke/images/b/bd/01_Track_1_A_Module_1_Introduction_to_DNS_%26_its_Role_in_Network_Security-2026.pdf [3]] || (Contd) || (Contd) || (Contd) || Assessment -section 2 - LAB (BO/KK/GL) |
|- | |- | ||
| style="background:#efe;" | **13:00** || colspan="1" style="background:#efe; text-align:center;" | '''Lunch break - Break into respective rooms after lunch''' || colspan="4" style="background:#efe; text-align:center;" | '''Lunch break''' | | style="background:#efe;" | **13:00** || colspan="1" style="background:#efe; text-align:center;" | '''Lunch break - Break into respective rooms after lunch''' || colspan="4" style="background:#efe; text-align:center;" | '''Lunch break''' | ||
Revision as of 09:18, 23 February 2026
KENET is pleased to invite you to the Cybersecurity Resilience Workshop - Track 2. This track focuses on the architectural resilience of campus networks through advanced traffic control and infrastructure hardening. Participants will master the deployment of Access Control Lists (ACLs) and Firewalls while executing a secure IPv6 transition using Dual-Stack strategies.
The training will be held from February 23rd to February 27th, 2026, at the Abai Lodges and Spa in Kirinyaga.
Contents
Objective
By the end of the program, attendees will be able to secure critical IT assets—including switches, servers, and wireless controllers—through robust filtering and configuration auditing. The ultimate goal is to build a high-performance, segmented environment where security policies remain consistent across both legacy and modern protocols, backed by proactive monitoring and logging.
Who Should Attend?
This course is designed for Cybersecurity specialists, Network engineers and network administrators.
Prerequisites
1. Laptop for the sessions with Wi-Fi capability 2. Intermediate to expert knowledge of TCP/IP networks, IP Addressing and firewalls.
Course content
Note: All lab manuals and slides can be found in the [Workshop Resource Folder] at the bottom of this page.
Trainers
| Full Name | Initials (Inst.) | Role | Organization |
|---|---|---|---|
| Nyanjau Kimani | NK | Program Manager | KENET |
| Alfred Kipruto | AKip | Quality Assurance | KENET |
| Zeinab Mzungu | ZM | Logistics & Support | KENET |
| Caroline Gachuhi | CG | Registration & Support | KENET |
| Anne Inapat | AI | Trainer | KENET |
| Barrack Otieno | BO | Trainer | ISOC/ICANN |
| Kevin Chege | KC | Trainer/Lab | ISOC |
| Kelvin Kariuki | KK | Trainer | MMU |
| Geoffrey Luora | GL | Trainer | KENET |
| Samuel Macharia | SK | Trainer | KENET |
Participants
TimeTable
| Time | Day 1 (Joint) | Day 2 | Day 3 | Day 4 | Day 5 |
|---|---|---|---|---|---|
| **07:00** | **Welcome and registrations** | Sessions start at 08:00 | |||
| **08:00** | **Introductions & Objectives (JOINT)** (AKip) | Recap | Recap | Recap | Recap |
| **08:20** | **Housekeeping (JOINT)** (ZM/Akip) | **Module 1:** Concepts on Campus Network Design (KK) | **Module 4:** Dual Stack concepts and planning (BO) | **Module1:** Wireless Networks & Security -802.1X (KK) | **Module 8:** Monitoring & Troubleshooting (KK/BO) |
| **08:35** | (08:35 - 09:00 Joint Session) | (Contd) | (Contd) | (Contd) | (Contd) |
| **09:00** | **ICANN Grant Funded Project Overview (JOINT)** (AKip/NK/BO) [1 ][[1.2] | **Module 1:** DISCUSSION on Respective existing institutional campus network diagrams (KK/GL) | Module 4:LAB (Configuring dual stack on switches and routers) (BO/GL) | **Module 1:**eduroam (SK) | **Module 8:** DEMO (Monitoring Devices & Troubleshooting tools) (KK/BO) |
| **10:00** | Tea break (10:00 – 10:30) | ||||
| **10:30** | **Lab Environment & Topology Walkthrough (Lab Support)** (KC) [1.3] | **Module 1:** Module 1: VLANS LAB (KK) | **Module 7:** Authentication & Authorization (BO) | **Module7: Network Encryption (BO) | **Best Practices on Campus network and security (GL) |
| **11:30** | **Module 1: Intro to IP Addressing & Routing (JOINT)** (KK) [2 | **Module 1:** Routing LAB (KK) | **Module 7:** LAB (Installation of AAA software TACACS+) (BO) | **Module 7:**LAB (Connecting remote sites; establish VPN connections and L2 tunnels) (BO) | **Assessment -section 1 MCQs** (CG) |
| **12:30** | **Module 1: DNS and its roles (JOINT)** (Akoech) [3] | (Contd) | (Contd) | (Contd) | Assessment -section 2 - LAB (BO/KK/GL) |
| **13:00** | Lunch break - Break into respective rooms after lunch | Lunch break | |||
| **14:00** | **Module 1:** Continuation on IP addressing- introducing routing and switching for v4 and v6 (KK) [2] | **Module2:** IPv4 and IPv6 Security Landscape (GL) & **Module3: ** Transitioning to IPv6 Strategy (GL) | **Module7:** Dual Stack Firewalling & Blocking Traffic (BO) & LAB (ACLs on switches and Routers) LAB (Firewall policies on switches, routers) and pFsense LAB (iptables and ipv6 tables on RADIUS or TACACS+ server) (GL/BO) | **Module8:** Network Management & Asset Verification (GL) & **DEMO using lldp/cdp to identify connected devices (GL/BO) | **Module 5:** Compliance and DPA 2019 -security&safeguards (NK) [JOINT] **Vote of Thanks (Guest Speaker) |
| **16:00** | **Recap** | **Recap** | **Recap** | **Recap** | (16:00 - 16:30 Final Wrap) |
| **16:30** | **Tea break and Day End** | **Tea break and Day End** | **Tea break and Day End** | **Tea break and Day End** | **Certificate Award** **Post-Training Survey** |
Workshop Resources
Track 2: Network Security & IPv4, IPv6 Security
JOINT Sessions
Additional Resources from NSRC -a KENET Training Partner