← All 186 courses
CL-302 Cloud & Platform

Cross-Cloud VPN & BGP Engineering Deep-Dive

The connectivity skill interviews probe hardest: build AWS–Azure IPSec tunnels from cryptographic first principles — IKE phases, ESP, cipher choices — then run eBGP over them in active-active with correct MTU handling, and diagnose the classic failure modes from packet evidence.

B5Advanced
5modules
35skill atoms
1role journey
Curriculum

What this course covers.

5 modules, 35 named skill atoms. Expand any module to see them.

1IPSec Internals7 skill atoms
IKE phase 1/2ESPcipher suite selectionIKEv1 vs IKEv2DH groups & PFSSA lifetime & rekeyNAT traversal on UDP 4500
2Tunnel Build Lab7 skill atoms
AWS VGW/TGW ↔ Azure VPN GWAPIPA addressingcustomer gateway & local network gateway objectsPSK and proposal alignmentVPN gateway SKU & active-active modestatic vs BGP routing choicetunnel-up verification
3BGP over IPSec7 skill atoms
eBGP sessionsroute exchangeactive-activeASN selection in private rangesadvertised prefix controlECMP across tunnelskeepalive & hold timer tuning
4MTU & Performance7 skill atoms
fragmentation trapsMSS clampingIPSec overhead mathPMTUD broken by ICMP filteringDF bit behaviourper-tunnel throughput limitsiperf validation
5Failure Clinic7 skill atoms
one-way trafficflappingrekey issuesfixesphase 2 selector mismatchasymmetric tunnel selectionreading IKE logs on both ends
Where it fits

CL-302 in a role journey.

This course appears in 1 of our 45 role journeys. Here is what a learner takes immediately before and after it in each.

Cloud Network Engineer

Professional stage
CL-301CL-302CL-303

Roles this course serves

The capability ladder

This course is authored to band B5.

Every course we run is written to one rung of the CASI ladder, so a plan can be assembled to take a team from where they are to where they need to be.

What do B1–B6 mean?The CASI Capability Ladder — click to expand

Every course targets a band on the CASI Capability Ladder — our six-band proficiency scale, anchored to open standards (O*NET, ESCO, NICE, NIST AI RMF, Bloom's). A band tells you how deep a course goes, and what evidence proves it.

What the learner can doTypical evidence
B1
AwareUnderstands concepts and vocabulary; uses tools with guidance
Knowledge checks
B2
FoundationPerforms standard tasks correctly in familiar contexts
Guided labs, autograded exercises
B3
PractitionerDelivers complete pieces of work independently
Scenario labs, proctored hands-on exams
B4
ProfessionalHandles production-grade complexity, trade-offs and failure modes
Break-fix drills, design defenses
B5
AdvancedEngineers systems end-to-end under constraints; leads others
Rubric-scored capstones, vivas
B6
ExpertSets direction; recognised authority across teams
Portfolio + panel evaluation

A note on B6. Courses in this catalog target B1–B5. B6 is not taught — it is recognised, through a portfolio and a panel, once someone is setting direction for others. Every journey here is built to land a learner at B5.

Next step

Run CL-302 for your team.

This course runs at several lengths depending on how deep you need to go and how much of it your people already have. Tell us who is being trained and we will scope it.

Add it to a training plan Talk to our team Check your team’s level free