WEBVTT 1 00:00.000 --> 00:01.023 align:middle line:84% 2 00:01.023 --> 00:02.690 align:middle line:90% In this video, I'd like to chat with you 3 00:02.690 --> 00:06.020 align:middle line:90% about the concept of FlexVPN, what it means, 4 00:06.020 --> 00:07.620 align:middle line:84% and where we might find it. 5 00:07.620 --> 00:10.010 align:middle line:90% So let's imagine we find ourselves in a situation where 6 00:10.010 --> 00:13.700 align:middle line:90% we need to build remote access VPNs for external users coming 7 00:13.700 --> 00:17.060 align:middle line:90% in, we also need to do site to site tunnels 8 00:17.060 --> 00:19.910 align:middle line:90% and if we have multiple sites and we want to do 9 00:19.910 --> 00:23.090 align:middle line:90% spoke to spoke connections between here and here, 10 00:23.090 --> 00:24.470 align:middle line:84% how do we make all that happen? 11 00:24.470 --> 00:25.970 align:middle line:90% And the answer is likely going to be 12 00:25.970 --> 00:29.620 align:middle line:90% on a Cisco iOS environment this is going to be FlexVPN. 13 00:29.620 --> 00:32.100 align:middle line:90% Now when we see the word FlexVPN think of OK, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 13 00:29.620 --> 00:32.100 align:middle line:90% Now when we see the word FlexVPN think of OK, 14 00:32.100 --> 00:35.300 align:middle line:90% what can I do as far as IPSEC is concerned with FlexVPN? 15 00:35.300 --> 00:37.580 align:middle line:84% The answer is everything. 16 00:37.580 --> 00:39.800 align:middle line:90% Remote access VPN, spoke to spoke, 17 00:39.800 --> 00:41.510 align:middle line:84% site to site you name it. 18 00:41.510 --> 00:43.010 align:middle line:90% And now one of the key elements that 19 00:43.010 --> 00:47.190 align:middle line:90% makes this possible with FlexVPN is that it uses IKEv2. 20 00:47.190 --> 00:49.640 align:middle line:84% Now IKEv2 has more moving parts. 21 00:49.640 --> 00:51.530 align:middle line:90% Because R1 can differentiate based 22 00:51.530 --> 00:54.440 align:middle line:90% on a whole bunch of different clients or devices connecting. 23 00:54.440 --> 00:57.180 align:middle line:90% OK, who are you and then based on who you are, 24 00:57.180 --> 00:59.352 align:middle line:90% what methods do I want to use for the IPSEC? 25 00:59.352 --> 01:01.560 align:middle line:90% Do I want to use this encryption, or that encryption, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 25 00:59.352 --> 01:01.560 align:middle line:90% Do I want to use this encryption, or that encryption, 26 01:01.560 --> 01:04.400 align:middle line:90% or this authentication, or that authentication? 27 01:04.400 --> 01:07.250 align:middle line:90% So FlexVPN is what we're going to use again, it uses IKEv2 28 01:07.250 --> 01:11.100 align:middle line:90% primarily and there are a bunch of defaults that are in place. 29 01:11.100 --> 01:13.940 align:middle line:90% So there are defaults for the proposals that'll be used 30 01:13.940 --> 01:15.690 align:middle line:90% and the policies that are going to use. 31 01:15.690 --> 01:17.660 align:middle line:90% So if you can use some of those defaults 32 01:17.660 --> 01:19.160 align:middle line:90% that can save you configuration time 33 01:19.160 --> 01:21.500 align:middle line:90% or you can even modify some of those defaults. 34 01:21.500 --> 01:24.170 align:middle line:90% The goal was even though there's more moving parts 35 01:24.170 --> 01:26.540 align:middle line:90% in the configuration of FlexVPN they gave us 36 01:26.540 --> 01:29.780 align:middle line:90% the option of using some defaults to make it easier 37 01:29.780 --> 01:30.860 align:middle line:84% to configure. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 37 01:29.780 --> 01:30.860 align:middle line:84% to configure. 38 01:30.860 --> 01:32.660 align:middle line:90% So it's just a heads up regarding FlexVPN. 39 01:32.660 --> 01:35.240 align:middle line:90% Because it does support IKEv2 and IKEv2 alone 40 01:35.240 --> 01:37.910 align:middle line:90% there's more moving parts and because it can be configured 41 01:37.910 --> 01:41.360 align:middle line:90% in so many different ways, that configuration for FlexVPN 42 01:41.360 --> 01:43.790 align:middle line:90% does take more commands at the CLI to get it done. 43 01:43.790 --> 01:46.250 align:middle line:90% However, I've got a separate set of videos 44 01:46.250 --> 01:48.540 align:middle line:90% on a remote access that leverage FlexVPN. 45 01:48.540 --> 01:50.165 align:middle line:90% I've also got a set of videos with site 46 01:50.165 --> 01:53.690 align:middle line:90% to site tunnels using FlexVPN and IKEv2 so you have a chance 47 01:53.690 --> 01:56.120 align:middle line:90% to see it in detail of the configuration 48 01:56.120 --> 01:58.075 align:middle line:90% and the verification in those sets of videos. 49 01:58.075 --> 01:59.450 align:middle line:90% And then the next video, I'd like 50 01:59.450 --> 02:02.300 align:middle line:90% to chat with you about yet another option for implementing WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 50 01:59.450 --> 02:02.300 align:middle line:90% to chat with you about yet another option for implementing 51 02:02.300 --> 02:06.050 align:middle line:90% IPSEC and that's referred to as group encrypted transport 52 02:06.050 --> 02:08.840 align:middle line:90% or as his friends call him get VPN. 53 02:08.840 --> 02:10.889 align:middle line:90% See you in that next video in just a moment. 54 02:10.889 --> 02:13.280 align:middle line:90% Meanwhile, I hope this has been informative for you 55 02:13.280 --> 02:16.630 align:middle line:90% and I'd like to thank you for viewing.