WEBVTT

1
00:00.000 --> 00:08.130
So now let's jump into the AWS management console and build the different

2
00:08.130 --> 00:09.040
components

3
00:09.040 --> 00:14.720
that we're going to need for the deployment of the catalyst 8000 V. First, of

4
00:14.720 --> 00:15.080
course,

5
00:15.080 --> 00:20.310
we're going to need a VPC. Then we'll create the subnets we need. We said that

6
00:20.310 --> 00:20.640
we're going

7
00:20.640 --> 00:25.960
to use subnets one and 10 for now. Then, of course, this needs to be able to

8
00:25.960 --> 00:26.280
get out

9
00:26.280 --> 00:30.080
to the Internet. So we'll create an Internet gateway. We'll create different
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

9
00:26.280 --> 00:30.080
to the Internet. So we'll create an Internet gateway. We'll create different

10
00:30.080 --> 00:30.840
route tables

11
00:30.840 --> 00:35.620
for our different subnets. And then finally, we'll wrap up by taking a look at

12
00:35.620 --> 00:36.440
our security

13
00:36.440 --> 00:41.360
groups. I do have those pre-configured, but we will verify them so that you

14
00:41.360 --> 00:42.080
know what

15
00:42.080 --> 00:46.560
needs to be in them and we'll make sure that they're configured properly. So

16
00:46.560 --> 00:46.760
let's go

17
00:46.760 --> 00:52.200
ahead and jump into the AWS management console and get started.

18
00:52.200 --> 00:58.330
So we'll start off here on the VPC dashboard. Notice that right now we have

19
00:58.330 --> 00:59.600
zero VPCs. So

20
00:59.600 --> 01:04.080
of course, the first thing we're going to have to do is create a VPC. So we'll
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

20
00:59.600 --> 01:04.080
of course, the first thing we're going to have to do is create a VPC. So we'll

21
01:04.080 --> 01:04.480
just use

22
01:04.480 --> 01:11.040
our convenient create VPC button. For right now, we'll just create the VPC for

23
01:11.040 --> 01:12.640
the name.

24
01:12.640 --> 01:17.390
What we'll call it VPC underscore one. For our cider block, this is going to be

25
01:17.390 --> 01:17.880
10 dot

26
01:17.880 --> 01:24.440
20 dot zero dot zero slash 16. We're not going to configure IPV six right now.

27
01:24.440 --> 01:25.280
So let's scroll

28
01:25.280 --> 01:31.110
down. The rest of these options are okay. So we'll just say create VPC. Our
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

28
01:25.280 --> 01:31.110
down. The rest of these options are okay. So we'll just say create VPC. Our

29
01:31.110 --> 01:31.520
next step

30
01:31.520 --> 01:35.430
would be to create our subnets. Notice that right now there are zero subnets in

31
01:35.430 --> 01:37.000
the VPC.

32
01:37.000 --> 01:42.160
So we'll simply click on subnets. We'll create a subnet. We'll start by

33
01:42.160 --> 01:44.600
selecting our VPC

34
01:44.600 --> 01:48.240
and then we'll scroll down to the subnet settings. We'll start off by creating

35
01:48.240 --> 01:48.640
subnet

36
01:48.640 --> 01:54.980
one for the availability zone. Select one in your area. I'm going to create us

37
01:54.980 --> 01:55.600
East

38
01:55.600 --> 01:59.270
one a we just want to make sure that we create everything in the same

39
01:59.270 --> 02:00.640
availability zone as
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

39
01:59.270 --> 02:00.640
availability zone as

40
02:00.640 --> 02:05.820
we move through this. Then for the subnet block, this is going to be 10 dot 20

41
02:05.820 --> 02:06.240
dot one

42
02:06.240 --> 02:14.130
dot zero slash 24. We'll scroll down and we'll say create subnet. Then we'll

43
02:14.130 --> 02:14.480
create another

44
02:14.480 --> 02:21.940
subnet. Once again, we'll select our VPC. This will be subnet 10. Once again,

45
02:21.940 --> 02:22.480
we'll

46
02:22.480 --> 02:26.630
choose our availability zone. We'll simply choose the same one. This is going

47
02:26.630 --> 02:27.440
to be subnet

48
02:27.440 --> 02:35.540
10 dot 20 dot 10 dot zero slash 24. We'll scroll down and create subnet. If we
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

48
02:27.440 --> 02:35.540
10 dot 20 dot 10 dot zero slash 24. We'll scroll down and create subnet. If we

49
02:35.540 --> 02:35.680
clear

50
02:35.680 --> 02:40.830
our filters, we see that we now have both of our subnets created. They are both

51
02:40.830 --> 02:41.640
available

52
02:41.640 --> 02:48.900
and they have the correct IPV for cider. Next, let's create an internet gateway

53
02:48.900 --> 02:49.280
. We'll simply

54
02:49.280 --> 02:55.840
say create internet gateway. We'll just call it IG underscore one and hit

55
02:55.840 --> 02:56.920
create. Once

56
02:56.920 --> 03:02.880
it's created, we can just say attached to a VPC. You can also get to this under
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

56
02:56.920 --> 03:02.880
it's created, we can just say attached to a VPC. You can also get to this under

57
03:02.880 --> 03:03.160
actions.

58
03:03.160 --> 03:07.950
Under the VPCs, we'll simply select our one VPC that we created and say to

59
03:07.950 --> 03:08.880
attach internet

60
03:08.880 --> 03:14.490
gateway. Now we see the state changes to attached. So our next step would be to

61
03:14.490 --> 03:15.440
create some route

62
03:15.440 --> 03:20.540
tables. So let's go to our route table section. Notice here that we have our

63
03:20.540 --> 03:21.080
default route

64
03:21.080 --> 03:26.090
table. First thing we're going to do is simply rename this. We'll just call

65
03:26.090 --> 03:27.120
this internet

66
03:27.120 --> 03:32.420
and hit save. Next thing we're going to want to do is go to routes, hit edit
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

66
03:27.120 --> 03:32.420
and hit save. Next thing we're going to want to do is go to routes, hit edit

67
03:32.420 --> 03:33.960
routes. We're

68
03:33.960 --> 03:40.350
going to want to add a route. Specifically, we want to add a default gateway.

69
03:40.350 --> 03:40.560
And we

70
03:40.560 --> 03:45.400
want to point this to our internet gateway. We only have one so it'll be the

71
03:45.400 --> 03:46.040
only one

72
03:46.040 --> 03:52.120
on the list. We'll select our internet gateway one and we'll hit save changes.

73
03:52.120 --> 03:52.440
So now we

74
03:52.440 --> 03:58.590
have a default route pointing to our internet gateway. Next thing we want to do

75
03:58.590 --> 03:59.040
is go to

76
03:59.040 --> 04:06.480
subnet associations, edit subnet associations. And we want to associate subnet
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

76
03:59.040 --> 04:06.480
subnet associations, edit subnet associations. And we want to associate subnet

77
04:06.480 --> 04:07.280
one with

78
04:07.280 --> 04:12.990
this route table. So now we have specifically, if we go back to our subnet

79
04:12.990 --> 04:14.080
associations,

80
04:14.080 --> 04:20.200
we see that subnet one is now explicitly configured to this route table. Next,

81
04:20.200 --> 04:20.720
we're

82
04:20.720 --> 04:25.460
going to want to make a new route table. So let's go back to route tables. We

83
04:25.460 --> 04:25.840
'll create

84
04:25.840 --> 04:32.400
a route table. We'll simply call this network 10. We'll assign it to our VPC,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

84
04:25.840 --> 04:32.400
a route table. We'll simply call this network 10. We'll assign it to our VPC,

85
04:32.400 --> 04:33.360
hit create

86
04:33.360 --> 04:38.480
route table. Now ultimately, we're going to need a default route in this route

87
04:38.480 --> 04:38.920
table

88
04:38.920 --> 04:44.410
as well. But we need that route to point to our instance, which is going to be

89
04:44.410 --> 04:45.520
the 8000

90
04:45.520 --> 04:51.090
V. So we can't configure that part just yet. But we can configure our subnet

91
04:51.090 --> 04:52.800
associations.

92
04:52.800 --> 04:59.180
We'll edit. And of course, we'll assign subnet 10 to this route table. The

93
04:59.180 --> 04:59.680
final thing we

94
04:59.680 --> 05:05.250
want to do is examine our security groups. Now you will not have these created
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

94
04:59.680 --> 05:05.250
want to do is examine our security groups. Now you will not have these created

95
05:05.250 --> 05:05.960
already.

96
05:05.960 --> 05:09.650
I already do. So you might just have to create them. But let's take a look at

97
05:09.650 --> 05:11.240
what we have.

98
05:11.240 --> 05:16.560
So under security, we'll go to security groups. So we see here we have the two

99
05:16.560 --> 05:17.680
security groups

100
05:17.680 --> 05:22.060
that we've created. Let's start by looking at SG one. This is what we're going

101
05:22.060 --> 05:22.400
to use

102
05:22.400 --> 05:27.870
for the outside. If we click this to look at the details, and specifically, we

103
05:27.870 --> 05:28.560
look at

104
05:28.560 --> 05:36.070
the inbound rules. Notice that what we're allowing here is ICMP, of course,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

104
05:28.560 --> 05:36.070
the inbound rules. Notice that what we're allowing here is ICMP, of course,

105
05:36.070 --> 05:37.200
four pings

106
05:37.200 --> 05:44.410
or allowing ESP, which is protocol 50, A H, which is protocol 51. These are

107
05:44.410 --> 05:45.040
both to

108
05:45.040 --> 05:50.560
permit the VPNs that we're going to create in our next skill. We're also

109
05:50.560 --> 05:51.600
allowing custom

110
05:51.600 --> 06:01.300
UDP port 4500 and custom UDP port 500. These are also to support the VPN. That
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

110
05:51.600 --> 06:01.300
UDP port 4500 and custom UDP port 500. These are also to support the VPN. That

111
06:01.300 --> 06:01.800
notice,

112
06:01.800 --> 06:06.950
we're also allowing RDP. That's in case we decide to deploy a Windows server.

113
06:06.950 --> 06:07.280
And if

114
06:07.280 --> 06:12.780
we scroll down just a little bit, we see that we're also allowing SSH so that

115
06:12.780 --> 06:13.400
we can get

116
06:13.400 --> 06:20.300
in to our Linux devices, as well as the catalyst 8000 V. If we look at our SG

117
06:20.300 --> 06:21.200
land security

118
06:21.200 --> 06:27.110
group, this one is very simple. This is simply allowing all traffic. We're

119
06:27.110 --> 06:28.360
going to use this

120
06:28.360 --> 06:37.770
inside of our AWS environment for the devices going to the catalyst 8000 V. So
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

120
06:28.360 --> 06:37.770
inside of our AWS environment for the devices going to the catalyst 8000 V. So

121
06:37.770 --> 06:38.200
that takes

122
06:38.200 --> 06:42.440
care of configuring the majority of the components that we're going to need in

123
06:42.440 --> 06:43.440
AWS before we

124
06:43.440 --> 06:49.480
begin our deployment of the catalyst 8000 V. So now let's go ahead and start

125
06:49.480 --> 06:50.640
that deployment

126
06:50.640 --> 06:51.900
of the AMI.

127
06:51.900 --> 07:01.900
[BLANK_AUDIO]