WEBVTT

1
00:03.150 --> 00:05.640
So let's jump into our solution here

2
00:05.640 --> 00:08.610
on the VPC dashboard.

3
00:08.610 --> 00:10.590
The first place we're gonna want to go

4
00:10.590 --> 00:14.520
is we're gonna wanna scroll down in our navigation pane,

5
00:14.520 --> 00:15.690
and we're gonna want to go

6
00:15.690 --> 00:18.540
to our "Site-to-Site VPN connections"

7
00:18.540 --> 00:22.140
so that we can modify our existing tunnels.

8
00:22.140 --> 00:23.550
In order to do this,

9
00:23.550 --> 00:26.760
we're gonna go ahead and click on "Tunnel details".

10
00:26.760 --> 00:29.760
And then if we open up "Tunnel 1 options",

11
00:29.760 --> 00:31.137
scroll down a little bit,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

11
00:29.760 --> 00:31.137
scroll down a little bit,

12
00:31.137 --> 00:33.720
we can see all the different things

13
00:33.720 --> 00:36.570
that Tunnel 1 is currently supporting.

14
00:36.570 --> 00:39.990
And we're supposed to be taking some of these out.

15
00:39.990 --> 00:43.350
So the way we do this is we go up here

16
00:43.350 --> 00:45.990
to the top to "Actions",

17
00:45.990 --> 00:50.130
and we choose "Modify VPN tunnel options".

18
00:50.130 --> 00:55.130
Then we choose the tunnel based on its outside IP address.

19
00:55.350 --> 00:56.970
If you're not sure which one's which,

20
00:56.970 --> 00:59.280
just remember which one you change first

21
00:59.280 --> 01:01.440
so that you can do the other one.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

21
00:59.280 --> 01:01.440
so that you can do the other one.

22
01:01.440 --> 01:05.850
We'll choose the one ending in .55 first.

23
01:05.850 --> 01:07.860
And then we'll simply make the changes

24
01:07.860 --> 01:10.170
that we were requested to make.

25
01:10.170 --> 01:15.170
The first thing is we're supposed to get rid of the AES128

26
01:15.180 --> 01:19.767
because we're only supposed to support the AES256 option.

27
01:19.767 --> 01:23.400
So we'll do that on both of our algorithms.

28
01:23.400 --> 01:25.230
We'll scroll down.

29
01:25.230 --> 01:30.230
We'll take everything except SHA2-512 off of these options
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

29
01:25.230 --> 01:30.230
We'll take everything except SHA2-512 off of these options

30
01:30.360 --> 01:32.520
because that was the requirement.

31
01:32.520 --> 01:34.350
And finally, we're only supposed

32
01:34.350 --> 01:37.260
to allow Diffie-Hellman Group 20,

33
01:37.260 --> 01:40.500
so we'll go ahead and remove 19.

34
01:40.500 --> 01:43.800
We were already selected for only IKEv2,

35
01:43.800 --> 01:46.830
so those should be all the changes we need to make.

36
01:46.830 --> 01:49.830
Let's go ahead and scroll all the way to the bottom.

37
01:49.830 --> 01:52.530
And we can choose "Save changes".

38
01:52.530 --> 01:55.500
Now we can see here the state goes to modifying,

39
01:55.500 --> 01:59.100
and this will take a few moments.

40
01:59.100 --> 02:03.630
If we go to "Actions", notice we can't modify anything
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

40
01:59.100 --> 02:03.630
If we go to "Actions", notice we can't modify anything

41
02:03.630 --> 02:06.930
about the tunnels or anything else at this time,

42
02:06.930 --> 02:10.170
so we will have to wait until the modifying is complete

43
02:10.170 --> 02:13.890
before we can come back here and modify our second tunnel.

44
02:13.890 --> 02:16.980
So let's go ahead and give this just a few moments.

45
02:16.980 --> 02:19.170
And once the modification is complete,

46
02:19.170 --> 02:22.170
we'll come back here and make our changes.

47
02:22.170 --> 02:23.580
So after a few moments,

48
02:23.580 --> 02:27.300
go ahead and do your refresh and see if this updates.

49
02:27.300 --> 02:29.760
So now that this comes back as available,

50
02:29.760 --> 02:31.830
we can go back into "Actions".
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

50
02:29.760 --> 02:31.830
we can go back into "Actions".

51
02:31.830 --> 02:35.760
Now we can modify the VPN tunnel options again.

52
02:35.760 --> 02:39.180
This time, of course, we choose the other tunnel

53
02:39.180 --> 02:41.490
and we're gonna make the same changes.

54
02:41.490 --> 02:43.890
So we'll remove the 128

55
02:43.890 --> 02:46.680
from both of our encryption algorithms.

56
02:46.680 --> 02:50.010
We'll remove everything except SHA-512

57
02:50.010 --> 02:52.410
from the integrity algorithms.

58
02:52.410 --> 02:56.430
And we'll remove Diffie-Hellman Group 19.

59
02:56.430 --> 03:00.330
Once again, we'll scroll to the bottom and save the changes.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

59
02:56.430 --> 03:00.330
Once again, we'll scroll to the bottom and save the changes.

60
03:00.330 --> 03:03.069
This will of course go to modifying again,

61
03:03.069 --> 03:07.230
but this time let's let this sit here and modify

62
03:07.230 --> 03:11.700
while we move on with our other steps for this challenge.

63
03:11.700 --> 03:15.810
So the next step would take us over here to "Subnets".

64
03:15.810 --> 03:18.240
Then we'll create a new subnet.

65
03:18.240 --> 03:20.580
We'll select our VPC.

66
03:20.580 --> 03:23.340
We'll scroll down here to the subnet settings.

67
03:23.340 --> 03:26.010
We'll call this "Subnet_20".

68
03:26.010 --> 03:30.900
For the CIDR block, this is gonna be 10.20.20.0/24.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

68
03:26.010 --> 03:30.900
For the CIDR block, this is gonna be 10.20.20.0/24.

69
03:32.160 --> 03:34.710
Everything else can stay the same.

70
03:34.710 --> 03:37.560
We'll scroll down, create the subnet.

71
03:37.560 --> 03:39.060
And then we need to make sure

72
03:39.060 --> 03:42.630
that this is being advertised into our route table.

73
03:42.630 --> 03:45.270
So let's go into our "Route tables".

74
03:45.270 --> 03:47.550
Select our route table.

75
03:47.550 --> 03:50.160
We'll move this up so we can see a little better.

76
03:50.160 --> 03:52.800
We'll go to "Subnet associations".

77
03:52.800 --> 03:54.990
And then here on our Subnet_20,

78
03:54.990 --> 03:57.720
we'll edit subnet associations.

79
03:57.720 --> 04:02.280
Select "Subnet_20" and save the associations.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

79
03:57.720 --> 04:02.280
Select "Subnet_20" and save the associations.

80
04:02.280 --> 04:07.230
Notice that now it has two subnets explicitly associated.

81
04:07.230 --> 04:09.210
And of course, if we highlight our route table

82
04:09.210 --> 04:13.650
to get details and we go back to "Subnet associations",

83
04:13.650 --> 04:15.600
we can see that both of our subnets

84
04:15.600 --> 04:20.550
are now explicitly associated with this route table.

85
04:20.550 --> 04:22.380
As our final verification,

86
04:22.380 --> 04:26.280
let's go back to our "Site-to-Site VPN connections".

87
04:26.280 --> 04:30.030
And here we can verify that the state is again available.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

87
04:26.280 --> 04:30.030
And here we can verify that the state is again available.

88
04:30.030 --> 04:32.490
It's no longer modifying.

89
04:32.490 --> 04:35.640
So this should take care of all of the changes

90
04:35.640 --> 04:38.400
required for this challenge.

91
04:38.400 --> 04:39.900
So that concludes everything

92
04:39.900 --> 04:42.510
that we're going to be covering in this skill.

93
04:42.510 --> 04:43.740
Please keep in mind

94
04:43.740 --> 04:47.040
that this is part one of a two part skill.

95
04:47.040 --> 04:51.930
We will be configuring the IOS XE portion in the next skill.

96
04:51.930 --> 04:54.720
In the meantime, congratulations on

97
04:54.720 --> 04:59.720
completing "Configure AWS VPC for IPsec VPN to IOS XE".
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

98
05:02.190 --> 05:04.470
I hope this has been informative for you,

99
05:04.470 --> 05:06.370
and I'd like to thank you for viewing.