WEBVTT

1
00:02.520 --> 00:04.350
So our final step here

2
00:04.350 --> 00:08.700
before we jump into our IOS XE configuration,

3
00:08.700 --> 00:11.430
is we wanna download the configuration

4
00:11.430 --> 00:14.790
for the VPN from AWS.

5
00:14.790 --> 00:18.870
Now, this is not going to be a turnkey solution,

6
00:18.870 --> 00:23.190
at least not currently coming from AWS.

7
00:23.190 --> 00:25.830
We'll see for example, that the only choice is

8
00:25.830 --> 00:29.340
to download an IKE version one configuration.

9
00:29.340 --> 00:33.090
And we've already said we're going to use IKE version two,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

9
00:29.340 --> 00:33.090
And we've already said we're going to use IKE version two,

10
00:33.090 --> 00:37.020
so we're not gonna use the configuration as it is.

11
00:37.020 --> 00:39.330
Instead, what we're going to do is take some

12
00:39.330 --> 00:41.040
of the key elements out of it,

13
00:41.040 --> 00:43.980
put it in its own separate text document

14
00:43.980 --> 00:48.000
that we'll then use in our IOS XE configuration.

15
00:48.000 --> 00:51.510
So let's go ahead and jump in, download the configuration

16
00:51.510 --> 00:53.820
and take out the pieces that we need,

17
00:53.820 --> 00:56.340
save them in a separate file.

18
00:56.340 --> 00:57.720
Now, one quick note,

19
00:57.720 --> 01:01.500
I will be using an advanced text editor for this step.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

19
00:57.720 --> 01:01.500
I will be using an advanced text editor for this step.

20
01:01.500 --> 01:03.870
I would suggest you do the same.

21
01:03.870 --> 01:08.190
I'm going to be using Notepad++ but there are of course,

22
01:08.190 --> 01:11.010
many other advanced text editors out there.

23
01:11.010 --> 01:13.320
Feel free to use the one of your choice,

24
01:13.320 --> 01:16.500
but I would probably at least recommend one that keeps track

25
01:16.500 --> 01:18.960
of line numbers, 'cause it does make things a

26
01:18.960 --> 01:20.400
little easier to find.

27
01:20.400 --> 01:22.533
So let's go ahead and take a look.

28
01:24.720 --> 01:27.690
So here on the VPC dashboard this time,

29
01:27.690 --> 01:29.250
the only thing we're gonna really see here

30
01:29.250 --> 01:32.220
that's changed is we now have of course,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

30
01:29.250 --> 01:32.220
that's changed is we now have of course,

31
01:32.220 --> 01:36.690
two security groups, the default and the one we created.

32
01:36.690 --> 01:38.490
But again, what we're really here for is

33
01:38.490 --> 01:42.180
to export the configuration for the VPN.

34
01:42.180 --> 01:45.603
So for this, let's scroll down to the VPN section,

35
01:47.400 --> 01:50.610
then let's go into site-to-site VPN.

36
01:50.610 --> 01:54.150
And with our VPN selected, go ahead

37
01:54.150 --> 01:56.703
and select download configuration.

38
01:58.620 --> 02:01.230
Now here of course, we have some choices as far as
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

38
01:58.620 --> 02:01.230
Now here of course, we have some choices as far as

39
02:01.230 --> 02:03.900
what the connecting device is going to be.

40
02:03.900 --> 02:07.050
We're of course looking for Cisco systems,

41
02:07.050 --> 02:08.910
so we'll choose that.

42
02:08.910 --> 02:13.020
For the platform, choose whatever is the most appropriate.

43
02:13.020 --> 02:15.090
For this particular device,

44
02:15.090 --> 02:19.470
the closest one is going to be the ISR series routers.

45
02:19.470 --> 02:23.580
For the operating system, the only choice is 12.4+,

46
02:23.580 --> 02:26.610
which of course we are way over 12.4.

47
02:26.610 --> 02:28.620
It's just the configuration hasn't really

48
02:28.620 --> 02:30.210
changed since then.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

48
02:28.620 --> 02:30.210
changed since then.

49
02:30.210 --> 02:32.354
So 12.4 is fine.

50
02:32.354 --> 02:35.040
And here's sort of our limiting factor here.

51
02:35.040 --> 02:39.570
Notice the only choice is IKE version one, which is not

52
02:39.570 --> 02:43.680
what we're using, but as I mentioned, that's okay.

53
02:43.680 --> 02:46.410
We're just looking for a few key fields here.

54
02:46.410 --> 02:49.080
So we'll go ahead and choose the IKE version one

55
02:49.080 --> 02:50.493
and we'll say download.

56
02:53.130 --> 02:54.480
As we can see here,

57
02:54.480 --> 02:57.420
this downloaded a VPN text file

58
02:57.420 --> 02:59.910
into our default download directory.

59
02:59.910 --> 03:04.440
So let's go take a look at that file in Notepad++.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

59
02:59.910 --> 03:04.440
So let's go take a look at that file in Notepad++.

60
03:04.440 --> 03:08.100
So what we have here is, I have the VPN file

61
03:08.100 --> 03:13.100
that we downloaded open in one tab here in Notepad++.

62
03:13.590 --> 03:15.930
And then here I have another document

63
03:15.930 --> 03:17.910
that I've already created that's blank

64
03:17.910 --> 03:20.880
called AWS VPN Settings.

65
03:20.880 --> 03:22.830
That's where we're going to paste the settings

66
03:22.830 --> 03:27.030
that we actually need just to make this easier to work with.

67
03:27.030 --> 03:29.970
Now the first thing we wanna note is this configuration is

68
03:29.970 --> 03:32.550
broken into two major sections.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

68
03:29.970 --> 03:32.550
broken into two major sections.

69
03:32.550 --> 03:34.560
We can see the beginning of the first one here

70
03:34.560 --> 03:37.440
where it says IPSec tunnel one.

71
03:37.440 --> 03:40.380
Roughly halfway through this document we're going

72
03:40.380 --> 03:44.550
to see a whole another section, IPSec tunnel two.

73
03:44.550 --> 03:46.620
So the things that we're going to be taking out

74
03:46.620 --> 03:49.950
of here are going to be from each of the sections

75
03:49.950 --> 03:52.080
for each of the tunnels.

76
03:52.080 --> 03:54.840
The first thing we're going to need is the tunnel

77
03:54.840 --> 03:59.840
destination address and the pre-shared key for the tunnel.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

78
04:00.210 --> 04:04.380
This should generally be right around line 53.

79
04:04.380 --> 04:09.270
So if we scroll down to line 53, we see here at line 53

80
04:09.270 --> 04:11.430
where we have the remote address

81
04:11.430 --> 04:14.460
and the pre-shared key for tunnel one.

82
04:14.460 --> 04:16.530
So let's go ahead and copy that.

83
04:16.530 --> 04:19.020
We'll go over to our new document.

84
04:19.020 --> 04:22.770
Let's just make a section here for tunnel one.

85
04:22.770 --> 04:25.680
We're gonna need these two pieces of information.

86
04:25.680 --> 04:27.270
We can split this up if we want,

87
04:27.270 --> 04:28.980
make it look a little prettier,

88
04:28.980 --> 04:31.980
but this is really the information we need.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

88
04:28.980 --> 04:31.980
but this is really the information we need.

89
04:31.980 --> 04:34.470
We'll also make a section here for tunnel two,

90
04:34.470 --> 04:37.287
and let's go back and get that configuration.

91
04:37.287 --> 04:41.400
That should be right around line 200.

92
04:41.400 --> 04:43.830
So here we have the key for the other side.

93
04:43.830 --> 04:48.120
We'll go ahead and copy that, paste it under tunnel two.

94
04:48.120 --> 04:51.420
And now let's go back and get the next information we need.

95
04:51.420 --> 04:53.732
The next piece of information we need out of here

96
04:53.732 --> 04:58.140
is the IP address that AWS assigned

97
04:58.140 --> 05:00.480
to the tunnels themselves.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

97
04:58.140 --> 05:00.480
to the tunnels themselves.

98
05:00.480 --> 05:03.360
The first one for tunnel one should be right

99
05:03.360 --> 05:05.910
around line 132.

100
05:05.910 --> 05:07.830
So let's scroll back up.

101
05:07.830 --> 05:11.760
And here under tunnel one is the IP address.

102
05:11.760 --> 05:15.870
So let's go ahead and copy that, put that under our tunnel

103
05:15.870 --> 05:18.270
and we'll do the same for tunnel two.

104
05:18.270 --> 05:21.240
This should be right around 279.

105
05:21.240 --> 05:25.020
And here at line 279, we do see the IP address

106
05:25.020 --> 05:26.970
for tunnel two.

107
05:26.970 --> 05:29.550
So we'll go ahead and copy that as well.

108
05:29.550 --> 05:32.910
Put it in our configuration and then we'll go ahead
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

108
05:29.550 --> 05:32.910
Put it in our configuration and then we'll go ahead

109
05:32.910 --> 05:34.563
and save these changes.

110
05:35.520 --> 05:38.610
Now of course, the important part here is just

111
05:38.610 --> 05:40.500
to gather this information.

112
05:40.500 --> 05:41.700
We don't necessarily have

113
05:41.700 --> 05:44.550
to put it in its own text file like we just did.

114
05:44.550 --> 05:47.040
It's just gonna be easier to work with later.

115
05:47.040 --> 05:48.900
So I would encourage it,

116
05:48.900 --> 05:51.420
but you can of course, always pull this directly out

117
05:51.420 --> 05:54.270
of the original text file when you need it.

118
05:54.270 --> 05:56.520
But either way, we've gotten the critical pieces

119
05:56.520 --> 05:58.140
of information we need here

120
05:58.140 --> 06:01.590
to then start our IOS XE configuration,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

120
05:58.140 --> 06:01.590
to then start our IOS XE configuration,

121
06:01.590 --> 06:04.290
which we're gonna be doing in the next skill.

122
06:04.290 --> 06:07.620
So keep this text file handy for when we get

123
06:07.620 --> 06:09.813
to configuring IOS XE.