WEBVTT

1
00:02.610 --> 00:04.050
So now let's jump in

2
00:04.050 --> 00:06.651
and create our two necessary gateways.

3
00:06.651 --> 00:09.196
First, we're gonna need a consumer gateway

4
00:09.196 --> 00:13.636
to define the customer side or our premise side.

5
00:13.636 --> 00:17.070
And then, we need to create a virtual private gateway

6
00:17.070 --> 00:22.070
or a VPG to create a connection into our VPC.

7
00:22.560 --> 00:24.283
So let's go ahead and jump into the console.

8
00:24.283 --> 00:26.941
We'll start off on the VPC dashboard,

9
00:26.941 --> 00:28.883
just as a common frame of reference,

10
00:28.883 --> 00:31.173
and then we'll create our gateways.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

10
00:28.883 --> 00:31.173
and then we'll create our gateways.

11
00:32.328 --> 00:34.967
So notice here on the VPC dashboard,

12
00:34.967 --> 00:37.405
we see that under our resources,

13
00:37.405 --> 00:41.309
we now have one under each of the items

14
00:41.309 --> 00:43.741
that we created in our previous video.

15
00:43.741 --> 00:47.333
So we created our VPC, we created our subnet,

16
00:47.333 --> 00:51.365
and of course, along with that came the route table,

17
00:51.365 --> 00:55.516
the DHCP option set, the network ACL,

18
00:55.516 --> 00:58.719
and a default security group.

19
00:58.719 --> 01:01.773
So we see all of that was created correctly.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

19
00:58.719 --> 01:01.773
So we see all of that was created correctly.

20
01:01.773 --> 01:03.737
But now to create our gateways,

21
01:03.737 --> 01:07.018
we need to scroll down on our navigation pane

22
01:07.018 --> 01:12.018
to the virtual private network or VPN section,

23
01:12.210 --> 01:15.333
and we'll start by creating our customer gateway.

24
01:15.333 --> 01:18.087
So we'll simply click on customer gateways,

25
01:18.087 --> 01:20.884
we'll create a customer gateway.

26
01:20.884 --> 01:22.337
For the name here,

27
01:22.337 --> 01:26.518
we'll simply specify customer gateway one or CG 1.

28
01:26.518 --> 01:29.678
for the BGP ASN, it doesn't really matter

29
01:29.678 --> 01:31.102
what we put in here right now.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

29
01:29.678 --> 01:31.102
what we put in here right now.

30
01:31.102 --> 01:33.192
We're gonna be starting with static routing,

31
01:33.192 --> 01:36.816
but we'll go ahead and make this 65,001.

32
01:36.816 --> 01:38.700
So we'll just make a change here.

33
01:38.700 --> 01:41.190
Make it 65,001.

34
01:41.190 --> 01:43.102
Now for the IP address,

35
01:43.102 --> 01:48.102
this needs to be the outside interface of your network.

36
01:49.017 --> 01:52.618
So again, if you are behind a NAT or a PAT device,

37
01:52.618 --> 01:55.444
it needs to be the outside address.

38
01:55.444 --> 01:58.296
This is the address of your gateway

39
01:58.296 --> 02:02.130
as seen from Amazon's perspective.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

39
01:58.296 --> 02:02.130
as seen from Amazon's perspective.

40
02:02.130 --> 02:04.335
So, as the rest of the internet sees you.

41
02:04.335 --> 02:08.066
Now, for obvious reasons, I'm going to mask mine here.

42
02:08.066 --> 02:11.975
But again, keep in mind this needs to be your public,

43
02:11.975 --> 02:14.439
outside IP address.

44
02:14.439 --> 02:17.028
If desired, you can put in a name here.

45
02:17.028 --> 02:18.844
I'm just gonna keep it generic

46
02:18.844 --> 02:22.273
and I'll just call it PAT device.

47
02:22.273 --> 02:24.090
Everything here looks good,

48
02:24.090 --> 02:26.036
so now we can scroll down

49
02:26.036 --> 02:28.899
and we simply hit create customer gateway.

50
02:28.899 --> 02:31.657
So if we click on our gateway for more details,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

50
02:28.899 --> 02:31.657
So if we click on our gateway for more details,

51
02:31.657 --> 02:34.448
we can see the customer gateway ID.

52
02:34.448 --> 02:36.843
We of course, see that it's available.

53
02:36.843 --> 02:40.340
We see the current type is IP sec.

54
02:40.340 --> 02:42.467
We see that public IP address

55
02:42.467 --> 02:45.233
that we have available for the outside.

56
02:45.233 --> 02:48.485
And of course, we see that BGP ASN number

57
02:48.485 --> 02:50.640
that we configured as well.

58
02:50.640 --> 02:53.922
We can of course, also see our device description.

59
02:53.922 --> 02:56.081
So that takes care of the customer gateway.

60
02:56.081 --> 03:01.066
The next piece is to create the virtual private gateway.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

60
02:56.081 --> 03:01.066
The next piece is to create the virtual private gateway.

61
03:01.066 --> 03:04.510
Once again, we need to scroll down in the navigation pane.

62
03:04.510 --> 03:07.303
This is right below the customer gateway.

63
03:07.303 --> 03:10.365
This is the virtual private gateway.

64
03:10.365 --> 03:13.293
Once again, we have to hit create.

65
03:14.603 --> 03:17.280
We'll give it a name.

66
03:17.280 --> 03:19.048
We'll just call it VPG one.

67
03:19.048 --> 03:21.228
Again, we're not getting overly creative

68
03:21.228 --> 03:23.272
with our naming convention here.

69
03:23.272 --> 03:25.036
And for the ASN number,

70
03:25.036 --> 03:27.840
we could use a custom number here if we wanted to,

71
03:27.840 --> 03:30.950
or we could just go with Amazon's default.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

71
03:27.840 --> 03:30.950
or we could just go with Amazon's default.

72
03:30.950 --> 03:34.726
Once again, we're actually not gonna be using BGP right now,

73
03:34.726 --> 03:37.618
so this isn't all that important at the moment.

74
03:37.618 --> 03:39.600
We'll just go ahead and say

75
03:39.600 --> 03:42.189
to create the virtual private gateway.

76
03:42.189 --> 03:44.389
Again, we'll select it.

77
03:44.389 --> 03:47.272
In this case, the detailed information down below

78
03:47.272 --> 03:48.981
isn't really that much different

79
03:48.981 --> 03:53.116
than that is shown on the summary line up at the top.

80
03:53.116 --> 03:55.403
But the main thing to notice is, of course,

81
03:55.403 --> 03:57.455
we created the virtual private gateway.

82
03:57.455 --> 04:00.712
We can see that it gave it a virtual gateway ID.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

82
03:57.455 --> 04:00.712
We can see that it gave it a virtual gateway ID.

83
04:00.712 --> 04:05.422
However, notice the state is currently detached.

84
04:05.422 --> 04:08.828
We need to attach this to our VPC

85
04:08.828 --> 04:11.294
in order for this to function.

86
04:11.294 --> 04:14.451
So as long as everything looks correct here,

87
04:14.451 --> 04:17.105
the next thing we wanna do is click on actions

88
04:17.105 --> 04:20.327
and say, attach to VPC.

89
04:20.327 --> 04:22.333
In this dialogue, very simply,

90
04:22.333 --> 04:23.986
we're gonna click on the dropdown.

91
04:23.986 --> 04:27.338
We, of course, only have one VPC in our environment,

92
04:27.338 --> 04:29.340
so there's only the one choice.

93
04:29.340 --> 04:33.884
We'll choose our VPC and say, attach to VPC.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

93
04:29.340 --> 04:33.884
We'll choose our VPC and say, attach to VPC.

94
04:33.884 --> 04:35.342
It'll say, attaching.

95
04:35.342 --> 04:38.902
After a few moments, we should be able to hit refresh

96
04:38.902 --> 04:41.700
and it will say attached.

97
04:41.700 --> 04:44.518
So this virtual private gateway is ready to go.

98
04:44.518 --> 04:47.222
So that takes care of creating both of the gateways

99
04:47.222 --> 04:49.275
that we're going to need for our connection.

100
04:49.275 --> 04:53.730
Up next, well, it's time to actually create the VPN

101
04:53.730 --> 04:56.583
site-to-site connection here on AWS.