WEBVTT

1
00:00.000 --> 00:12.600
So for this skill, we're still going to be on AWS Cloud Topology 3.

2
00:12.600 --> 00:17.400
Now one piece of equipment on this diagram that we're not going to be using for

3
00:17.400 --> 00:17.600
this

4
00:17.600 --> 00:23.320
particular skill is we're actually not going to be using router 2.

5
00:23.320 --> 00:27.640
So for router 2, we're just sort of going to pretend that it's not there.

6
00:27.640 --> 00:35.240
What we are going to be doing is building an IPsec tunnel from router 1 in our
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

6
00:27.640 --> 00:35.240
What we are going to be doing is building an IPsec tunnel from router 1 in our

7
00:35.240 --> 00:36.040
onsite

8
00:36.040 --> 00:41.360
to AWS R1 in the AWS location.

9
00:41.360 --> 00:45.800
So we're going to be building a tunnel looks something a little bit like this.

10
00:45.800 --> 00:47.880
Now that does mean a few things.

11
00:47.880 --> 00:53.690
First, it means that we're going to be using an address on this subnet as the

12
00:53.690 --> 00:55.200
outside address

13
00:55.200 --> 01:02.650
for the on-prem router 1 and of course the address on subnet 1 over here in AWS
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

13
00:55.200 --> 01:02.650
for the on-prem router 1 and of course the address on subnet 1 over here in AWS

14
01:02.650 --> 01:03.120
as the

15
01:03.120 --> 01:08.000
outside address for the AWS side of the tunnel.

16
01:08.000 --> 01:13.960
Also keep in mind that we have a device here on-prem that is doing PAT or port

17
01:13.960 --> 01:14.520
address

18
01:14.520 --> 01:21.410
translation and AWS is doing the same thing with the internet gateway that we

19
01:21.410 --> 01:22.480
currently

20
01:22.480 --> 01:24.400
have configured.

21
01:24.400 --> 01:29.990
It's also doing that for the elastic IP addresses that we have set up that are

22
01:29.990 --> 01:31.160
assigned to this
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

22
01:29.990 --> 01:31.160
assigned to this

23
01:31.160 --> 01:33.200
address over here.

24
01:33.200 --> 01:36.600
So we're doing PAT on both sides.

25
01:36.600 --> 01:40.360
This is going to affect how we can figure our addresses a bit.

26
01:40.360 --> 01:46.880
So we will have to know the public and private IP addresses on each side.

27
01:46.880 --> 01:50.240
The public address of course on the AWS side.

28
01:50.240 --> 01:55.280
This is going to be that elastic IP and of course on this interface it's going

29
01:55.280 --> 01:55.680
to be

30
01:55.680 --> 02:00.560
the real outside IP address from the service provider.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

30
01:55.680 --> 02:00.560
the real outside IP address from the service provider.

31
02:00.560 --> 02:06.920
But we're going to be traversing PAT on both of these devices for the IP sector

32
02:06.920 --> 02:06.960
.

33
02:06.960 --> 02:14.070
Now the ultimate end goal here is going to be to have VLAN 10 specifically work

34
02:14.070 --> 02:14.720
station

35
02:14.720 --> 02:22.210
one on VLAN 10 being able to reach or contact subnet 10 down here on the AWS

36
02:22.210 --> 02:23.840
side once again

37
02:23.840 --> 02:26.600
specifically server one.

38
02:26.600 --> 02:31.560
So when this is all said and done we should be able to ping and trace from work
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

38
02:26.600 --> 02:31.560
So when this is all said and done we should be able to ping and trace from work

39
02:31.560 --> 02:32.240
station

40
02:32.240 --> 02:36.400
one to server one and or vice versa.

41
02:36.400 --> 02:40.600
We'll probably do our testing from server one but we should be able to do this

42
02:40.600 --> 02:41.080
either

43
02:41.080 --> 02:42.080
way.

44
02:42.080 --> 02:46.280
So the main goal here is of course to build the IP sack tunnel.

45
02:46.280 --> 02:50.240
But then of course we also have to verify our reach ability.

46
02:50.240 --> 02:55.440
So that said let's go ahead and jump in beginning with our configuration.

47
02:55.440 --> 03:00.390
We'll start on both of our devices by creating the key rings that we're going
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

47
02:55.440 --> 03:00.390
We'll start on both of our devices by creating the key rings that we're going

48
03:00.390 --> 03:01.120
to use for

49
03:01.120 --> 03:01.960
IP sack.

50
03:01.960 --> 03:10.540
[BLANK_AUDIO]