WEBVTT

1
00:00.000 --> 00:09.000
So now our final step, the moment of truth, let's jump into SRV1 and make sure

2
00:09.000 --> 00:09.520
that it

3
00:09.520 --> 00:15.600
actually has reachability to workstation one, which is a device on-prem sitting

4
00:15.600 --> 00:16.360
behind

5
00:16.360 --> 00:18.280
on-prem router one.

6
00:18.280 --> 00:19.920
So let's go ahead and jump in.

7
00:19.920 --> 00:24.390
We'll also verify, by the way, that it still has internet access and everything

8
00:24.390 --> 00:24.400
.

9
00:24.400 --> 00:29.440
So we'll test full reachability from SRV1.

10
00:29.440 --> 00:34.850
So starting off here on the jump box, we'll go ahead and paste in our command
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

10
00:29.440 --> 00:34.850
So starting off here on the jump box, we'll go ahead and paste in our command

11
00:34.850 --> 00:35.680
for SSHing

12
00:35.680 --> 00:43.300
into 10.20.10.100, which of course is SRV1, and then we'll just do our simple

13
00:43.300 --> 00:44.120
tests.

14
00:44.120 --> 00:49.880
Let's start by pinging workstation one, which is 10.10.10.10.

15
00:49.880 --> 00:53.040
As we can see, that's working perfectly fine.

16
00:53.040 --> 00:55.200
We should also still have internet.

17
00:55.200 --> 00:58.160
So let's ping 8.8.8.8.8.

18
00:58.160 --> 01:03.120
We see that's working as well, but more interestingly, let's actually trace
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

18
00:58.160 --> 01:03.120
We see that's working as well, but more interestingly, let's actually trace

19
01:03.120 --> 01:03.960
these.

20
01:03.960 --> 01:07.280
So let's trace route to the 10.10.10.10.

21
01:07.280 --> 01:11.240
We want, of course, make sure that it's going across the VPN.

22
01:11.240 --> 01:18.360
We see that first it's going to 10.20.10.254, which is, of course, AWS R1.

23
01:18.360 --> 01:25.660
Then it's going across the tunnel to the 169.254.11.2, which is on-prem router

24
01:25.660 --> 01:26.240
one.

25
01:26.240 --> 01:31.470
And then, of course, it reaches the destination, and everything here is working
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

25
01:26.240 --> 01:31.470
And then, of course, it reaches the destination, and everything here is working

26
01:31.470 --> 01:31.960
fine.

27
01:31.960 --> 01:35.710
If we were to trace out to the internet, what we're looking for here is that it

28
01:35.710 --> 01:36.240
's actually

29
01:36.240 --> 01:38.400
not going across the tunnel.

30
01:38.400 --> 01:40.520
So let's go ahead and trace that.

31
01:40.520 --> 01:42.120
There's quite a few hops here.

32
01:42.120 --> 01:45.680
And of course, we have a lot of name resolution getting in the way and so on.

33
01:45.680 --> 01:50.440
But the important things we really want to see are the first couple hops.

34
01:50.440 --> 01:55.240
So the first hop here we can see is going to 10.20.10.254.

35
01:55.240 --> 01:58.120
So it is going to AWS R1.

36
01:58.120 --> 02:03.280
But then notice it's immediately going off the network to other destinations.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

36
01:58.120 --> 02:03.280
But then notice it's immediately going off the network to other destinations.

37
02:03.280 --> 02:09.100
In other words, it's immediately leaving the AWS network through our internet

38
02:09.100 --> 02:09.840
gateway.

39
02:09.840 --> 02:12.120
It's not trying to go through the tunnel.

40
02:12.120 --> 02:17.440
So that means that all of our traffic is flowing exactly as we want it to.

41
02:17.440 --> 02:21.760
So this traffic satisfies the goal of this skill.

42
02:21.760 --> 02:26.970
We wanted traffic for the land to go across our VPN tunnel, which it is, and

43
02:26.970 --> 02:27.400
traffic for

44
02:27.400 --> 02:30.960
the internet to still go out through the internet gateway.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

44
02:27.400 --> 02:30.960
the internet to still go out through the internet gateway.

45
02:30.960 --> 02:33.600
So that concludes everything we need to cover here.

46
02:33.600 --> 02:35.720
Now there's just the challenge.

47
02:35.720 --> 02:45.720
[BLANK_AUDIO]