WEBVTT 1 00:00.000 --> 00:00.603 align:middle line:84% 2 00:00.603 --> 00:02.270 align:middle line:90% One of the elements that's going to help 3 00:02.270 --> 00:04.300 align:middle line:90% you and I a whole bunch as we troubleshoot 4 00:04.300 --> 00:08.000 align:middle line:90% IPSec VPNs is to realize that not every IPSec 5 00:08.000 --> 00:09.868 align:middle line:84% VPN is created equally. 6 00:09.868 --> 00:10.910 align:middle line:84% They're done differently. 7 00:10.910 --> 00:12.243 align:middle line:84% They're implemented differently. 8 00:12.243 --> 00:13.760 align:middle line:90% And having that awareness is going 9 00:13.760 --> 00:16.010 align:middle line:90% to give us the assistance in correctly troubleshooting 10 00:16.010 --> 00:19.320 align:middle line:90% the type of IPSec VPN that we're dealing with. 11 00:19.320 --> 00:21.800 align:middle line:90% So as a quick overview of this topology, which 12 00:21.800 --> 00:24.560 align:middle line:90% I'd like to use in this set of videos on troubleshooting, 13 00:24.560 --> 00:25.460 align:middle line:84% I've got two sites. 14 00:25.460 --> 00:28.047 align:middle line:90% Site 1 over here on the left, side 2 over here on the right. 15 00:28.047 --> 00:29.630 align:middle line:90% We've got the 10.1.0 network over here 16 00:29.630 --> 00:31.227 align:middle line:90% on the left, 10.2.0 on the right. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 16 00:29.630 --> 00:31.227 align:middle line:90% on the left, 10.2.0 on the right. 17 00:31.227 --> 00:32.810 align:middle line:90% Then I've got this puffy, little cloud 18 00:32.810 --> 00:34.760 align:middle line:90% the middle that represents a public network 19 00:34.760 --> 00:35.940 align:middle line:84% such as the internet. 20 00:35.940 --> 00:37.400 align:middle line:90% Now, for the options regarding how 21 00:37.400 --> 00:41.030 align:middle line:90% we could implement IPSec tunnels between these two sites, 22 00:41.030 --> 00:44.390 align:middle line:90% we have options that involve IKE version 1 with those two 23 00:44.390 --> 00:46.790 align:middle line:84% phases or IKE version 2. 24 00:46.790 --> 00:48.290 align:middle line:90% And although either one of those can 25 00:48.290 --> 00:49.910 align:middle line:90% be used for the site-to-site tunnel, 26 00:49.910 --> 00:51.410 align:middle line:90% the actual shell and debug commands 27 00:51.410 --> 00:53.960 align:middle line:90% are going to vary based on what we choose to use. 28 00:53.960 --> 00:57.200 align:middle line:90% Other options are going to involve, is it site to site, 29 00:57.200 --> 00:59.668 align:middle line:90% or is it remote access, which we've talked 30 00:59.668 --> 01:00.710 align:middle line:84% about in previous videos. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 30 00:59.668 --> 01:00.710 align:middle line:84% about in previous videos. 31 01:00.710 --> 01:02.281 align:middle line:90% But based on which it is, we're going 32 01:02.281 --> 01:04.489 align:middle line:90% to vary our troubleshooting methods just a little bit 33 01:04.489 --> 01:05.781 align:middle line:84% based on what we're looking at. 34 01:05.781 --> 01:08.600 align:middle line:90% For the site-to-site, are we using the old legacy crypto 35 01:08.600 --> 01:13.280 align:middle line:90% maps and crypto ACLs, or are we using virtual tunnel 36 01:13.280 --> 01:16.340 align:middle line:90% interfaces, which would imply tunnel interfaces that 37 01:16.340 --> 01:18.952 align:middle line:90% have an IPSec profile applied to them? 38 01:18.952 --> 01:20.410 align:middle line:90% So for a site-to-site like this, we 39 01:20.410 --> 01:22.467 align:middle line:90% could use a static virtual tunnel interface. 40 01:22.467 --> 01:24.300 align:middle line:90% And once again, the troubleshooting approach 41 01:24.300 --> 01:26.330 align:middle line:90% will be slightly different based on the type 42 01:26.330 --> 01:28.530 align:middle line:90% of site-to-site tunnel that we're creating. 43 01:28.530 --> 01:31.830 align:middle line:90% We also have options like DMVPN, which add more pieces. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 43 01:28.530 --> 01:31.830 align:middle line:90% We also have options like DMVPN, which add more pieces. 44 01:31.830 --> 01:33.852 align:middle line:90% So with DMVPN, we have additional technologies 45 01:33.852 --> 01:35.310 align:middle line:90% and components that are being used, 46 01:35.310 --> 01:37.340 align:middle line:90% such as the Next Hop Resolution Protocol. 47 01:37.340 --> 01:39.330 align:middle line:90% We have to make sure that's working as well. 48 01:39.330 --> 01:40.872 align:middle line:90% And then one other option I just want 49 01:40.872 --> 01:43.490 align:middle line:90% to plug in as well is GET VPN, which is weird 50 01:43.490 --> 01:46.490 align:middle line:90% because for IKE phase 1, we do the IKE phase 51 01:46.490 --> 01:48.770 align:middle line:90% 1 between the group members and the key server. 52 01:48.770 --> 01:51.110 align:middle line:90% But we are not expecting between the group members 53 01:51.110 --> 01:54.620 align:middle line:90% and the key servers, we're not expecting an IKE version 1 54 01:54.620 --> 01:58.423 align:middle line:90% phase 2 or IPSec tunnel, because that's not how that behaves. 55 01:58.423 --> 01:59.840 align:middle line:90% So this is the topology that we're 56 01:59.840 --> 02:02.000 align:middle line:90% going to be using for many of the troubleshooting WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 56 01:59.840 --> 02:02.000 align:middle line:90% going to be using for many of the troubleshooting 57 02:02.000 --> 02:02.717 align:middle line:84% videos coming up. 58 02:02.717 --> 02:03.800 align:middle line:84% And here's the great news. 59 02:03.800 --> 02:05.150 align:middle line:90% In the very next video, what we'll do is 60 02:05.150 --> 02:07.490 align:middle line:90% we'll take a look at a troubleshooting methodology 61 02:07.490 --> 02:09.830 align:middle line:90% as it relates to IPSec VPNs that we 62 02:09.830 --> 02:12.830 align:middle line:90% can then apply based on the type of VPN tunnels 63 02:12.830 --> 02:13.860 align:middle line:84% that we are using. 64 02:13.860 --> 02:16.650 align:middle line:90% So I'll see you in that next video in just a moment. 65 02:16.650 --> 02:19.070 align:middle line:90% Meanwhile, I hope this has been informative for you. 66 02:19.070 --> 02:22.060 align:middle line:90% And I'd like to thank you for viewing.