WEBVTT 1 00:00.000 --> 00:07.000 So before we start configuring anything, of course we want to jump in, take a 2 00:07.000 --> 00:07.320 look at 3 00:07.320 --> 00:12.190 our diagram and understand fully what it is that we're trying to accomplish 4 00:12.190 --> 00:12.540 with our 5 00:12.540 --> 00:13.540 VPN. 6 00:13.540 --> 00:19.190 Now, also note as we jump in here that this does build off of what we set up in 7 00:19.190 --> 00:19.440 the 8 00:19.440 --> 00:21.200 previous skill. 9 00:21.200 --> 00:25.560 That skill is referenced above and if you have not completed that skill, I 10 00:25.560 --> 00:26.520 would suggest 11 00:26.520 --> 00:31.740 that you go do so before jumping into this one because we are assuming that the WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 11 00:26.520 --> 00:31.740 that you go do so before jumping into this one because we are assuming that the 12 00:31.740 --> 00:32.280 catalyst 13 00:32.280 --> 00:37.440 8000 v is already deployed into our Azure environment. 14 00:37.440 --> 00:41.160 Here we're going to be picking up just building our VPN. 15 00:41.160 --> 00:44.760 So let's take a look at our diagram and talk about exactly what it is we're 16 00:44.760 --> 00:45.480 going to be 17 00:45.480 --> 00:48.400 building. 18 00:48.400 --> 00:53.240 So as I mentioned during the introduction, for the start of this skill, 19 00:53.240 --> 00:54.000 everything should 20 00:54.000 --> 00:58.840 already be configured down here in the Azure environment. 21 00:58.840 --> 01:02.160 In other words, we should already have our jump box up and running. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 21 00:58.840 --> 01:02.160 In other words, we should already have our jump box up and running. 22 01:02.160 --> 01:09.840 We should already have Azure R1 and Azure R2 up and running and SRV1 should be 23 01:09.840 --> 01:10.160 up and 24 01:10.160 --> 01:15.760 working as well and all of these should have access to the internet and have 25 01:15.760 --> 01:16.360 DNS name 26 01:16.360 --> 01:18.040 resolution. 27 01:18.040 --> 01:22.240 So that said, let's talk about the section up top. 28 01:22.240 --> 01:27.760 This is what's going to be acting as our headquarters or on-prem location. 29 01:27.760 --> 01:29.560 This should also be pre-configured. 30 01:29.560 --> 01:33.200 However, we did not do that in the previous skill. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 30 01:29.560 --> 01:33.200 However, we did not do that in the previous skill. 31 01:33.200 --> 01:38.400 So if you don't have that built, these configurations are provided below for 32 01:38.400 --> 01:40.640 both the Cisco CML and 33 01:40.640 --> 01:42.560 the non-CML environment. 34 01:42.560 --> 01:46.040 So you could still build that right from here. 35 01:46.040 --> 01:50.360 All we did in the previous skill is at the Azure environment configured. 36 01:50.360 --> 01:53.400 So what is it that we're going to accomplish now? 37 01:53.400 --> 02:01.510 Now what we want to do is build an IPsec VPN between our on-prem router one and WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 37 01:53.400 --> 02:01.510 Now what we want to do is build an IPsec VPN between our on-prem router one and 38 02:01.510 --> 02:02.720 Azure router 39 02:02.720 --> 02:04.040 one. 40 02:04.040 --> 02:09.420 Then we want to ensure that our VLAN 10 over here at headquarters and our sub 41 02:09.420 --> 02:10.600 net 10 down 42 02:10.600 --> 02:16.840 here on the Azure side are both reachable through that VPN tunnel. 43 02:16.840 --> 02:19.600 So that means we have to have some form of routing. 44 02:19.600 --> 02:24.240 We're going to be using OSPF specifically, but we're going to roll out dynamic 45 02:24.240 --> 02:25.040 routing. 46 02:25.040 --> 02:31.730 Our end goal here is workstation one back here at headquarters should be able WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 46 02:25.040 --> 02:31.730 Our end goal here is workstation one back here at headquarters should be able 47 02:31.730 --> 02:32.680 to talk to 48 02:32.680 --> 02:36.320 SRV one in Azure. 49 02:36.320 --> 02:41.310 Also server one should still be able to access the internet directly without 50 02:41.310 --> 02:42.600 going through 51 02:42.600 --> 02:44.720 the VPN tunnel. 52 02:44.720 --> 02:51.220 So again that VPN tunnel is going to be built through here between on-prem R1 53 02:51.220 --> 02:53.280 and Azure R1. 54 02:53.280 --> 02:58.740 And we're going to use that for reachability from the on-prem network into the 55 02:58.740 --> 03:00.000 server subnet WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 56 03:00.000 --> 03:04.080 subnet 10 in our Azure environment. 57 03:04.080 --> 03:09.570 So in this video, we just jumped in here and got a look at our topology diagram 58 03:09.570 --> 03:09.880 to talk 59 03:09.880 --> 03:12.040 about what it is we're going to be building. 60 03:12.040 --> 03:18.700 Specifically, we're going to be building that IP sec VPN between on-prem R1 and 61 03:18.700 --> 03:20.280 Azure R1. 62 03:20.280 --> 03:24.050 I didn't really mention it here, but in our challenge, we'll be building a 63 03:24.050 --> 03:24.640 redundant 64 03:24.640 --> 03:30.200 tunnel as well between on-prem R2 and Azure R2. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 64 03:24.640 --> 03:30.200 tunnel as well between on-prem R2 and Azure R2. 65 03:30.200 --> 03:34.440 But at the end of the day, our main goal here is going to be to have work 66 03:34.440 --> 03:36.600 station one at headquarters, 67 03:36.600 --> 03:42.960 be able to talk to server one in the Azure subnet through our VPN connection. 68 03:42.960 --> 03:47.750 So all of that said, let's jump in in the next video and begin configuring the 69 03:47.750 --> 03:48.400 components 70 03:48.400 --> 03:50.920 that we need for IP version two. 71 03:50.920 --> 04:00.920 [BLANK_AUDIO]