WEBVTT

1
00:02.670 --> 00:04.260
So now let's move on

2
00:04.260 --> 00:06.750
to our final level of redundancy,

3
00:06.750 --> 00:09.180
having multiple edge routers,

4
00:09.180 --> 00:11.820
with multiple links to the internet

5
00:11.820 --> 00:14.340
at the on-premises site.

6
00:14.340 --> 00:15.870
Now in order to do this,

7
00:15.870 --> 00:20.730
we simply have to configure a new customer gateway on AWS

8
00:20.730 --> 00:23.580
with our new outside IP address.

9
00:23.580 --> 00:24.600
And then of course

10
00:24.600 --> 00:27.330
we have to configure the site to site VPN

11
00:27.330 --> 00:29.550
for this new customer gateway.

12
00:29.550 --> 00:32.310
And finally configure router two
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

12
00:29.550 --> 00:32.310
And finally configure router two

13
00:32.310 --> 00:35.520
with the settings for that new VPN.

14
00:35.520 --> 00:38.310
So, we've sort of been down this road already.

15
00:38.310 --> 00:41.070
So as far as the configuration of the device,

16
00:41.070 --> 00:43.110
we'll be doing a lot of copying and pasting

17
00:43.110 --> 00:44.820
with Notepad++,

18
00:44.820 --> 00:47.370
because again, we have configured

19
00:47.370 --> 00:50.460
these VPNs on IOS XE already.

20
00:50.460 --> 00:52.290
So let's just go ahead and get started

21
00:52.290 --> 00:54.180
and see what we have to do to configure

22
00:54.180 --> 00:55.713
this redundant router.

23
00:57.600 --> 00:58.980
So our first step

24
00:58.980 --> 01:01.860
is going to be to create the customer gateway
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

24
00:58.980 --> 01:01.860
is going to be to create the customer gateway

25
01:01.860 --> 01:05.070
for our redundant internet IP address.

26
01:05.070 --> 01:06.000
So for this,

27
01:06.000 --> 01:09.810
we're going to go ahead and start off on the VPC dashboard.

28
01:09.810 --> 01:12.716
We'll scroll down to the VPN section,

29
01:12.716 --> 01:16.140
and here we'll choose our customer gateways.

30
01:16.140 --> 01:18.930
So here we see our existing customer gateway,

31
01:18.930 --> 01:21.090
so of course, what we're going to want to do is

32
01:21.090 --> 01:23.342
create a customer gateway.

33
01:23.342 --> 01:25.230
For the name, we'll simply call it

34
01:25.230 --> 01:29.100
CG_2 as customer gateway two.

35
01:29.100 --> 01:32.730
The BGP ASN number is going to be the same.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

35
01:29.100 --> 01:32.730
The BGP ASN number is going to be the same.

36
01:32.730 --> 01:35.700
We're still gonna keep this as 65,001,

37
01:35.700 --> 01:37.590
because there's no need for us to run

38
01:37.590 --> 01:42.210
two different AS numbers on the on-prem location.

39
01:42.210 --> 01:44.310
Now, for the IP address,

40
01:44.310 --> 01:47.760
this is where we need to put in the external IP address

41
01:47.760 --> 01:50.130
of our second internet connection.

42
01:50.130 --> 01:52.710
So I'll go ahead and paste mine in here.

43
01:52.710 --> 01:54.870
The rest of this information is optional,

44
01:54.870 --> 01:56.670
so we'll simply scroll down

45
01:56.670 --> 01:59.220
and hit create customer gateway.

46
01:59.220 --> 02:01.740
So now we have two customer gateways.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

46
01:59.220 --> 02:01.740
So now we have two customer gateways.

47
02:01.740 --> 02:04.650
The display here will by default filter it

48
02:04.650 --> 02:06.930
to just the one we created,

49
02:06.930 --> 02:09.810
but we can simply hit clear filters,

50
02:09.810 --> 02:12.660
and we can see both of our customer gateways here

51
02:12.660 --> 02:16.230
with their appropriate external IP addresses.

52
02:16.230 --> 02:19.830
Our next step is going to be to go back to VPN.

53
02:19.830 --> 02:23.220
We'll choose our site to site VPN connections,

54
02:23.220 --> 02:26.310
we see that we have our VPN 1 already selected here.

55
02:26.310 --> 02:29.250
We'll hit create VPN connection.

56
02:29.250 --> 02:32.133
So we'll simply call this VPN_2.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

56
02:29.250 --> 02:32.133
So we'll simply call this VPN_2.

57
02:33.270 --> 02:36.690
It's going to use our same virtual gateway.

58
02:36.690 --> 02:39.330
We'll choose our new customer gateway,

59
02:39.330 --> 02:41.460
customer gateway 2,

60
02:41.460 --> 02:44.280
we'll leave the routing on BGP,

61
02:44.280 --> 02:47.220
and then we'll make the appropriate changes to our tunnels

62
02:47.220 --> 02:50.400
as far as the encryption and the IP address.

63
02:50.400 --> 02:53.010
So we'll paste in the IP address,

64
02:53.010 --> 02:55.110
we'll paste in the key,

65
02:55.110 --> 02:58.170
we'll say to edit the tunnel 1 options,

66
02:58.170 --> 02:59.850
and then we'll set our encryption

67
02:59.850 --> 03:02.670
the same way we did for router 1.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

67
02:59.850 --> 03:02.670
the same way we did for router 1.

68
03:02.670 --> 03:05.220
We'll do the same thing for tunnel 2.

69
03:05.220 --> 03:07.440
Paste in its IP address

70
03:07.440 --> 03:09.150
and the key,

71
03:09.150 --> 03:11.730
and then change the tunnel 2 options.

72
03:11.730 --> 03:13.320
Once everything's configured,

73
03:13.320 --> 03:15.573
we'll simply say create VPN connection.

74
03:17.670 --> 03:18.750
After a few moments,

75
03:18.750 --> 03:21.180
this will go from pending to available.

76
03:21.180 --> 03:23.280
So now we can go ahead and

77
03:23.280 --> 03:24.990
download our configuration

78
03:24.990 --> 03:26.850
as we've done before.

79
03:26.850 --> 03:28.440
I've already done this,

80
03:28.440 --> 03:29.760
and cleaned it up,

81
03:29.760 --> 03:32.610
and placed it in Notepad ++.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

81
03:29.760 --> 03:32.610
and placed it in Notepad ++.

82
03:32.610 --> 03:35.613
So now let's go over and take a look at that configuration.

83
03:36.540 --> 03:39.030
So here in our scrubbed configuration,

84
03:39.030 --> 03:41.610
what we want to do, is we wanna replace

85
03:41.610 --> 03:45.540
everywhere that it says AWS IP address 1,

86
03:45.540 --> 03:48.000
with the address for tunnel 1,

87
03:48.000 --> 03:51.570
and everywhere it says AWS IP address 2,

88
03:51.570 --> 03:54.030
with the address for tunnel 2.

89
03:54.030 --> 03:55.860
Now, depending on your text editor,

90
03:55.860 --> 03:57.930
there may be different ways of doing this,

91
03:57.930 --> 04:00.000
here in Notepad ++,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

92
04:00.000 --> 04:03.390
I can simply highlight this section of text.

93
04:03.390 --> 04:06.570
Go to search> replace.

94
04:06.570 --> 04:10.380
It'll put in the text that I had highlighted automatically,

95
04:10.380 --> 04:12.750
and I can simply say to replace it with

96
04:12.750 --> 04:17.310
and paste in the address of tunnel 1.

97
04:17.310 --> 04:19.710
I'll then hit replace all.

98
04:19.710 --> 04:21.780
It should replace three occurrences.

99
04:21.780 --> 04:24.090
That's how many times in this document

100
04:24.090 --> 04:26.550
that IP address needs to be replaced.

101
04:26.550 --> 04:29.010
I can then close this window,

102
04:29.010 --> 04:31.530
highlight address 2,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

102
04:29.010 --> 04:31.530
highlight address 2,

103
04:31.530 --> 04:33.900
do the same thing. You can just hit Control H

104
04:33.900 --> 04:35.880
to bring this up if you like.

105
04:35.880 --> 04:39.060
Then of course, we need the address of the other tunnel.

106
04:39.060 --> 04:41.880
So again, we'll just paste that in here

107
04:41.880 --> 04:43.980
and say replace all.

108
04:43.980 --> 04:47.460
Once again, it replaced all three occurrences.

109
04:47.460 --> 04:49.680
Then we can close this window.

110
04:49.680 --> 04:52.110
And the text document should now be ready

111
04:52.110 --> 04:54.180
to paste in to our router.

112
04:54.180 --> 04:57.420
So we'll hit control A, to highlight everything,

113
04:57.420 --> 04:59.460
control C to copy everything,

114
04:59.460 --> 05:01.710
and go over to router 2.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

114
04:59.460 --> 05:01.710
and go over to router 2.

115
05:01.710 --> 05:02.640
So on router 2,

116
05:02.640 --> 05:04.410
before we paste the configuration in,

117
05:04.410 --> 05:07.020
let's just do a show IP interface brief.

118
05:07.020 --> 05:10.020
Make sure that our inside and outside interfaces

119
05:10.020 --> 05:11.820
are properly configured.

120
05:11.820 --> 05:13.530
We can see here that they are,

121
05:13.530 --> 05:16.830
we can also just do a ping test.

122
05:16.830 --> 05:19.080
We'll just ping Cisco for example.

123
05:19.080 --> 05:20.400
And we can see that this router

124
05:20.400 --> 05:23.010
does have outside reach ability.

125
05:23.010 --> 05:23.843
So that means

126
05:23.843 --> 05:25.830
that this should be ready for our configuration.

127
05:25.830 --> 05:27.960
So we'll simply go into configuration mode,

128
05:27.960 --> 05:30.540
and paste in that whole configuration
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

128
05:27.960 --> 05:30.540
and paste in that whole configuration

129
05:30.540 --> 05:32.400
that we just created.

130
05:32.400 --> 05:34.440
So if all of this worked correctly,

131
05:34.440 --> 05:37.860
we should be able to do a show IP interface brief.

132
05:37.860 --> 05:40.710
And here we see that our tunnel 1 is up,

133
05:40.710 --> 05:42.960
as well as our tunnel 2.

134
05:42.960 --> 05:45.630
And if all of this is working successfully,

135
05:45.630 --> 05:48.330
we can do a show IP BGP summary,

136
05:48.330 --> 05:52.113
and we see that our BGP neighbor-ships are up as well.

137
05:53.070 --> 05:55.740
We do a show IP BGP,

138
05:55.740 --> 05:57.060
we see that we are in fact

139
05:57.060 --> 06:00.360
learning the prefixes from AWS
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

139
05:57.060 --> 06:00.360
learning the prefixes from AWS

140
06:00.360 --> 06:04.140
for the 10.20.0.0/16,

141
06:04.140 --> 06:06.570
exactly as we should be.

142
06:06.570 --> 06:09.840
Also, if we do a show IP route BGP,

143
06:09.840 --> 06:11.400
we'll see that that route,

144
06:11.400 --> 06:13.620
through the tunnel 1 interface,

145
06:13.620 --> 06:16.980
has been selected and placed into the routing table.

146
06:16.980 --> 06:20.040
So now we have a total of four tunnels

147
06:20.040 --> 06:21.870
running to AWS,

148
06:21.870 --> 06:23.430
two from router 1,

149
06:23.430 --> 06:25.140
two from router 2,

150
06:25.140 --> 06:28.470
and we're learning all the routes through BGP.

151
06:28.470 --> 06:33.420
Let's go over and verify this connectivity on AWS as well.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

151
06:28.470 --> 06:33.420
Let's go over and verify this connectivity on AWS as well.

152
06:33.420 --> 06:37.320
So back here on our VPN 2 tunnel details,

153
06:37.320 --> 06:40.590
we see that both of our tunnels are up,

154
06:40.590 --> 06:44.550
and both of them have learned a BGP route.

155
06:44.550 --> 06:47.370
Something else we can do for verification of course,

156
06:47.370 --> 06:50.280
is to go over here to route tables,

157
06:50.280 --> 06:53.040
under our route table, choose routes.

158
06:53.040 --> 06:56.280
And we can see right here that AWS,

159
06:56.280 --> 06:58.260
in RVPC does in fact

160
06:58.260 --> 07:03.030
have our route for 10.10.10.0/24
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

160
06:58.260 --> 07:03.030
have our route for 10.10.10.0/24

161
07:03.030 --> 07:04.830
learned through BGP

162
07:04.830 --> 07:08.100
and available through our virtual gateway.

163
07:08.100 --> 07:10.710
So now we have redundant connections

164
07:10.710 --> 07:12.480
with two edge routers

165
07:12.480 --> 07:15.903
running BGP, to the AWS environment.

166
07:17.190 --> 07:18.660
In this video,

167
07:18.660 --> 07:21.030
we configured a second edge router

168
07:21.030 --> 07:22.950
with VPN connections,

169
07:22.950 --> 07:24.720
and BGP

170
07:24.720 --> 07:26.970
to AWS.

171
07:26.970 --> 07:28.530
This pretty much provides

172
07:28.530 --> 07:30.720
the highest level of redundancy
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

172
07:28.530 --> 07:30.720
the highest level of redundancy

173
07:30.720 --> 07:33.420
in that, we have device redundancy

174
07:33.420 --> 07:35.370
and link redundancy

175
07:35.370 --> 07:38.100
going out to our cloud environment.

176
07:38.100 --> 07:41.010
So now this just leaves us with a challenge,

177
07:41.010 --> 07:43.293
and that's exactly what we're gonna do next.