WEBVTT

1
00:00.000 --> 00:08.160
So, in this challenge, we're going to be building a redundant IPsec VPN between

2
00:08.160 --> 00:09.400
Google Cloud

3
00:09.400 --> 00:11.440
and router 2.

4
00:11.440 --> 00:13.760
But here's the fundamental problem.

5
00:13.760 --> 00:20.100
Currently, we have one Pat device here at headquarters with one IP address on

6
00:20.100 --> 00:21.600
the outside

7
00:21.600 --> 00:24.480
sending traffic to the internet.

8
00:24.480 --> 00:30.260
Google Cloud will not let you create a duplicate tunnel with the same peer
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

8
00:24.480 --> 00:30.260
Google Cloud will not let you create a duplicate tunnel with the same peer

9
00:30.260 --> 00:31.320
address.

10
00:31.320 --> 00:37.630
So if you're in a situation where you actually have multiple addresses that you

11
00:37.630 --> 00:39.040
can use outside

12
00:39.040 --> 00:45.480
of Pat, so at least two or more, you could simply nat each one of those

13
00:45.480 --> 00:48.120
addresses to R1

14
00:48.120 --> 00:52.600
and one going to R2 and you could simply build a tunnel that way.

15
00:52.600 --> 00:57.760
However, I don't have that situation, so let me explain what I'm going to be

16
00:57.760 --> 00:59.160
showing you

17
00:59.160 --> 01:01.560
as we move through this discussion.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

17
00:59.160 --> 01:01.560
as we move through this discussion.

18
01:01.560 --> 01:07.920
So in my case, what I'm going to be doing is using an offsite R2.

19
01:07.920 --> 01:15.280
So my R2 is not going to be connected to this Pat device and it's not connected

20
01:15.280 --> 01:15.600
to this

21
01:15.600 --> 01:20.840
switch either because it's not at my current location.

22
01:20.840 --> 01:28.440
So what I'm doing instead is my R2 is going to be connecting out to a separate

23
01:28.440 --> 01:29.640
Pat device.

24
01:29.640 --> 01:32.500
That device is connected directly to the internet.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

24
01:29.640 --> 01:32.500
That device is connected directly to the internet.

25
01:32.500 --> 01:39.390
That connects to my R2 and just so the interfaces can be up and online, my R2

26
01:39.390 --> 01:40.840
is going to be connecting

27
01:40.840 --> 01:44.720
out to a completely separate switch.

28
01:44.720 --> 01:51.260
This switch quite honestly doesn't go anywhere, it's just so router twos, gigab

29
01:51.260 --> 01:52.760
it two interface

30
01:52.760 --> 01:54.480
can come up.

31
01:54.480 --> 01:57.920
So what I'm going to be doing, just so we're very clear, is I'm going to be

32
01:57.920 --> 01:58.640
building our

33
01:58.640 --> 02:05.080
second tunnel between this outside address and Google Cloud.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

33
01:58.640 --> 02:05.080
second tunnel between this outside address and Google Cloud.

34
02:05.080 --> 02:11.120
So effectively between R2 and Google Cloud, this is going to be tunnel two.

35
02:11.120 --> 02:16.250
However, for testing traffic, I'm going to have to actually shut down the

36
02:16.250 --> 02:17.260
interface on

37
02:17.260 --> 02:22.540
R1 up here, specifically the tunnel interface because otherwise the routing is

38
02:22.540 --> 02:23.360
not going to

39
02:23.360 --> 02:25.120
work properly.

40
02:25.120 --> 02:27.240
So that's what we're going to be configuring.

41
02:27.240 --> 02:32.450
Again, if you have multiple addresses on your outside interface of your
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

41
02:27.240 --> 02:32.450
Again, if you have multiple addresses on your outside interface of your

42
02:32.450 --> 02:33.720
firewall or

43
02:33.720 --> 02:37.840
NAT or Pat router, then this would not be a problem.

44
02:37.840 --> 02:42.190
So depending on your situation, you may or may not have to do this, but again,

45
02:42.190 --> 02:43.160
my R2 is

46
02:43.160 --> 02:48.440
actually off-premises behind a completely different Pat device at a completely

47
02:48.440 --> 02:49.240
different

48
02:49.240 --> 02:51.120
outside address.

49
02:51.120 --> 02:53.640
So that's how we're going to be handling this challenge.

50
02:53.640 --> 02:58.370
Once again, you can do either one of these depending on your current

51
02:58.370 --> 02:59.640
environment.

52
02:59.640 --> 03:04.140
All of that said, go ahead and jump into the challenge, good luck, and I'll see
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

52
02:59.640 --> 03:04.140
All of that said, go ahead and jump into the challenge, good luck, and I'll see

53
03:04.140 --> 03:04.640
you in

54
03:04.640 --> 03:07.180
the solution video on the other side.

55
03:07.180 --> 03:17.180
[BLANK_AUDIO]