WEBVTT

1
00:02.670 --> 00:06.030
So the first thing we want to do here is jump in

2
00:06.030 --> 00:09.630
and just get a quick review of our game plan.

3
00:09.630 --> 00:12.210
Remember we went over this fairly extensively

4
00:12.210 --> 00:14.460
in the previous skill, so again,

5
00:14.460 --> 00:15.870
if you have not gone through that,

6
00:15.870 --> 00:17.850
I would encourage you to do so

7
00:17.850 --> 00:21.180
because we're gonna need the AWS section configured

8
00:21.180 --> 00:24.330
before we can do this skill anyway.

9
00:24.330 --> 00:25.740
So again, just a reminder,

10
00:25.740 --> 00:27.750
if you have not done the previous skill,

11
00:27.750 --> 00:30.600
I would encourage you to go and do so.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

11
00:27.750 --> 00:30.600
I would encourage you to go and do so.

12
00:30.600 --> 00:32.940
That said, we are just gonna take a moment here

13
00:32.940 --> 00:36.030
to bring up the topology, quick review of what we're trying

14
00:36.030 --> 00:38.520
to accomplish and what it is that we need

15
00:38.520 --> 00:42.810
to do in this particular skill to finish out our goal.

16
00:42.810 --> 00:44.673
So let's go ahead and take a look.

17
00:46.830 --> 00:48.660
So like the previous skill,

18
00:48.660 --> 00:53.340
we are again gonna be using AWS Cloud Topology 1.

19
00:53.340 --> 00:55.080
So what are some of the important things we need

20
00:55.080 --> 00:56.310
to keep in mind?

21
00:56.310 --> 01:00.690
First, we already have this workstation 1 configured,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

21
00:56.310 --> 01:00.690
First, we already have this workstation 1 configured,

22
01:00.690 --> 01:05.690
it has a default gateway that is pointing to router 1.

23
01:05.820 --> 01:08.160
This is the device we're primarily going

24
01:08.160 --> 01:11.430
to be focusing on in this skill.

25
01:11.430 --> 01:15.150
We have already configured our AWS environment,

26
01:15.150 --> 01:17.850
except for perhaps a few routes and such

27
01:17.850 --> 01:20.130
that we may need as we go.

28
01:20.130 --> 01:24.210
We also are going to need to deploy this SRV 1,

29
01:24.210 --> 01:28.500
or server 1 down here, into our AWS cloud

30
01:28.500 --> 01:31.530
so that we can verify our connectivity.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

30
01:28.500 --> 01:31.530
so that we can verify our connectivity.

31
01:31.530 --> 01:34.170
Also, keep in mind as we're going through this,

32
01:34.170 --> 01:39.170
that our headquarters site has a total network, or subnet,

33
01:39.960 --> 01:44.550
of 10.10.0.0/16

34
01:44.550 --> 01:48.060
And in AWS in our VPC,

35
01:48.060 --> 01:53.060
we've set up 10.20.0.0/16.

36
01:56.220 --> 01:59.820
Now we do currently have two different subnets

37
01:59.820 --> 02:02.700
that we configured in our AWS cloud,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

37
01:59.820 --> 02:02.700
that we configured in our AWS cloud,

38
02:02.700 --> 02:06.360
assuming of course that we completed the challenge.

39
02:06.360 --> 02:08.520
The first is subnet 10,

40
02:08.520 --> 02:12.480
that part we built during our normal course of the skill.

41
02:12.480 --> 02:15.630
However, in the challenge on the previous skill,

42
02:15.630 --> 02:18.360
we also added a subnet 20.

43
02:18.360 --> 02:23.360
So there's also a 10.20.20.0/24

44
02:26.430 --> 02:29.280
configured on AWS as well.

45
02:29.280 --> 02:31.110
Something else to keep in mind,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

45
02:29.280 --> 02:31.110
Something else to keep in mind,

46
02:31.110 --> 02:33.510
and we'll see this more in this skill

47
02:33.510 --> 02:35.670
once we get our tunnels up,

48
02:35.670 --> 02:39.030
that we do have this PAT device out here,

49
02:39.030 --> 02:43.830
which means that ultimately we are going to be using NAT-T,

50
02:43.830 --> 02:48.300
or Nat Traversal, for our IPsec tunnel.

51
02:48.300 --> 02:51.450
And finally, remember that that tunnel is going

52
02:51.450 --> 02:56.010
to be configured between this interface on router 1,

53
02:56.010 --> 02:59.880
the outside interfaces on Amazon,

54
02:59.880 --> 03:02.280
and therefore our tunnel ultimately
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

54
02:59.880 --> 03:02.280
and therefore our tunnel ultimately

55
03:02.280 --> 03:04.590
is going to run like this.

56
03:04.590 --> 03:08.250
Once all of this is up and running and configured,

57
03:08.250 --> 03:10.800
the final test for our connectivity,

58
03:10.800 --> 03:14.430
routing, security, and the IPsec tunnel,

59
03:14.430 --> 03:16.350
we should ultimately be able to ping

60
03:16.350 --> 03:20.070
between workstation 1 and server 1

61
03:20.070 --> 03:23.250
once we get everything up, running and configured.

62
03:23.250 --> 03:25.740
So that's our ultimate goal for this skill,

63
03:25.740 --> 03:30.690
is to get reachability between workstation 1 and server 1.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

63
03:25.740 --> 03:30.690
is to get reachability between workstation 1 and server 1.

64
03:30.690 --> 03:33.750
Once again, AWS is already configured,

65
03:33.750 --> 03:36.873
so we're gonna be focusing here on router 1.

66
03:38.040 --> 03:40.980
So now that we have an idea where we're going here,

67
03:40.980 --> 03:43.380
our next step is going to be to configure

68
03:43.380 --> 03:47.430
the IKEv2 key chain on router 1.

69
03:47.430 --> 03:51.420
For that, we're going to need the tunnel destinations

70
03:51.420 --> 03:56.420
and the pre shared key that we saved in our previous skill

71
03:56.520 --> 04:01.520
that we collected from the AWS downloaded configuration.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

71
03:56.520 --> 04:01.520
that we collected from the AWS downloaded configuration.

72
04:01.620 --> 04:03.900
Again, if you did not go through that,

73
04:03.900 --> 04:06.510
I would encourage you to go back and review that

74
04:06.510 --> 04:09.150
before we jump in to the next video.

75
04:09.150 --> 04:12.120
Otherwise, keep that text document handy,

76
04:12.120 --> 04:14.553
we're gonna be needing it in the next section.