WEBVTT

1
00:00.000 --> 00:06.300
So now we're up to our final step, verification.

2
00:06.300 --> 00:12.600
All we have to do here is jump into SRV1, verify that it can get to workstation

3
00:12.600 --> 00:13.640
1, we'll verify

4
00:13.640 --> 00:18.430
that it still has internet reachability, and then everything should be correct

5
00:18.430 --> 00:18.620
for what

6
00:18.620 --> 00:20.340
we were trying to accomplish.

7
00:20.340 --> 00:26.420
So let's jump into SRV1 and verify that reachability.

8
00:26.420 --> 00:31.470
So of course to get to SRV1, we are going to start off here on our jump box,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

8
00:26.420 --> 00:31.470
So of course to get to SRV1, we are going to start off here on our jump box,

9
00:31.470 --> 00:31.760
then we're

10
00:31.760 --> 00:35.420
going to SSH into that server.

11
00:35.420 --> 00:40.150
So now that we're connected here to SRV1, let's go ahead and do some

12
00:40.150 --> 00:41.500
verification.

13
00:41.500 --> 00:45.860
First, we'll do a ping to 10.10.10.10.

14
00:45.860 --> 00:50.260
That's workstation 1 inside the on-prem network.

15
00:50.260 --> 00:54.380
We can enter, and we can see that that's working.

16
00:54.380 --> 00:58.790
We should also of course still be able to get to the internet, and we see that

17
00:58.790 --> 00:59.100
's working

18
00:59.100 --> 01:00.600
as well.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

18
00:59.100 --> 01:00.600
as well.

19
01:00.600 --> 01:05.900
Of course we should also probably verify the path that this traffic is taking.

20
01:05.900 --> 01:09.100
So let's do a trace route to the 10 address.

21
01:09.100 --> 01:13.300
And what we're looking for here particularly for the first hop, it's hitting

22
01:13.300 --> 01:14.100
the catalyst

23
01:14.100 --> 01:18.700
8000V at the 10.30.10.254.

24
01:18.700 --> 01:25.750
Then we see it's going across the tunnel and hitting on-prem R1 at the 169.254.

25
01:25.750 --> 01:28.060
31.2 address.

26
01:28.060 --> 01:32.600
And finally it gets to the final destination, which is connected to on-prem R1
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

26
01:28.060 --> 01:32.600
And finally it gets to the final destination, which is connected to on-prem R1

27
01:32.600 --> 01:35.460
at the 10.10.10.10.10.

28
01:35.460 --> 01:39.860
So not only is it working, but we can see that it is in fact going across our

29
01:39.860 --> 01:41.180
IP sec tunnel.

30
01:41.180 --> 01:45.980
Now we can also do a trace route to the 8.8.8.8.

31
01:45.980 --> 01:48.620
To be honest, this isn't going to show us much.

32
01:48.620 --> 01:51.540
It's just going to show us the first hop here.

33
01:51.540 --> 01:56.510
So we at least know that it's going to the catalyst 8000V, but the thing is it

34
01:56.510 --> 01:57.260
then goes to

35
01:57.260 --> 02:01.420
the Microsoft Azure Internet gateway from there.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

35
01:57.260 --> 02:01.420
the Microsoft Azure Internet gateway from there.

36
02:01.420 --> 02:04.660
And that device doesn't reply to the trace.

37
02:04.660 --> 02:07.580
So we're just getting timeouts from there.

38
02:07.580 --> 02:10.420
But the important thing we care about is that first hop.

39
02:10.420 --> 02:14.660
So we see that it is in fact going to our catalyst.

40
02:14.660 --> 02:19.780
So that means that everything is working as designed.

41
02:19.780 --> 02:26.330
So in this video, we just verified that workstation 1 and SRV1 have reach

42
02:26.330 --> 02:29.300
ability across our VPN.

43
02:29.300 --> 02:31.940
And that was the goal of this skill.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

43
02:29.300 --> 02:31.940
And that was the goal of this skill.

44
02:31.940 --> 02:37.100
Therefore that completes everything we need to cover except for the challenge.

45
02:37.100 --> 02:43.730
For the challenge, we're going to have you build a second VPN between Azure R2

46
02:43.730 --> 02:45.900
and on prem R2.

47
02:45.900 --> 02:49.220
Now it's essentially going to be the same as the one we just built.

48
02:49.220 --> 02:52.420
You can use your own IP addressing for the tunnel.

49
02:52.420 --> 02:56.420
But other than that, it's going to be almost the same configuration.

50
02:56.420 --> 02:58.380
So go ahead and give that a shot.

51
02:58.380 --> 02:59.380
Good luck.

52
02:59.380 --> 03:02.460
And I'll see you in the solution video on the other side.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

52
02:59.380 --> 03:02.460
And I'll see you in the solution video on the other side.

53
03:02.460 --> 03:12.460
[BLANK_AUDIO]