WEBVTT

1
00:00.000 --> 00:07.160
So, before we jump in and just begin configuring things, we of course need to

2
00:07.160 --> 00:07.680
put together

3
00:07.680 --> 00:08.960
our game plan.

4
00:08.960 --> 00:12.000
We have to know what it is we're trying to accomplish.

5
00:12.000 --> 00:16.990
It's also important to understand that this skill builds off of what we put

6
00:16.990 --> 00:17.720
together

7
00:17.720 --> 00:19.680
in the previous skill.

8
00:19.680 --> 00:23.370
That previous skill is referenced above this video in case you need to go back

9
00:23.370 --> 00:24.000
and review

10
00:24.000 --> 00:27.360
that before jumping into this skill.

11
00:27.360 --> 00:31.960
But now, let's jump into our topology diagram and discuss what it is we're
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

11
00:27.360 --> 00:31.960
But now, let's jump into our topology diagram and discuss what it is we're

12
00:31.960 --> 00:32.760
going to be putting

13
00:32.760 --> 00:37.080
together in this skill.

14
00:37.080 --> 00:41.480
So let's begin by talking about the top part of our diagram here.

15
00:41.480 --> 00:47.120
This part up at the top is representing our on-prem location.

16
00:47.120 --> 00:51.960
In some places we'll also just refer to it as our headquarters site.

17
00:51.960 --> 00:56.590
But either way, this top part should already be pre-configured in your

18
00:56.590 --> 00:57.840
environment.

19
00:57.840 --> 01:04.110
If it's not the configuration files for both Cisco CML and non-Sysco CML
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

19
00:57.840 --> 01:04.110
If it's not the configuration files for both Cisco CML and non-Sysco CML

20
01:04.110 --> 01:05.480
environments

21
01:05.480 --> 01:11.260
are provided below this video for your reference so you can build the top part

22
01:11.260 --> 01:12.480
of this diagram.

23
01:12.480 --> 01:18.780
Now, as far as our bottom section here in Google Cloud, also understand that

24
01:18.780 --> 01:19.920
the jump box

25
01:19.920 --> 01:32.730
SRV1 or Server1, GCPR1 and GCPR2 were all built and configured in our previous
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

25
01:19.920 --> 01:32.730
SRV1 or Server1, GCPR1 and GCPR2 were all built and configured in our previous

26
01:32.730 --> 01:33.640
skill.

27
01:33.640 --> 01:38.890
So once again, if you have not yet done that, I would encourage you to go do so

28
01:38.890 --> 01:39.360
before we

29
01:39.360 --> 01:44.980
get started because this skill assumes that all of this is already built

30
01:44.980 --> 01:46.000
running that the

31
01:46.000 --> 01:50.010
on-prem and headquarters location have access to the internet and that's

32
01:50.010 --> 01:52.760
specifically GCPR1

33
01:52.760 --> 01:57.680
and GCPR2 also have access to the internet.

34
01:57.680 --> 02:02.240
So assuming all of that is built, let's talk about what we're going to be doing
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

34
01:57.680 --> 02:02.240
So assuming all of that is built, let's talk about what we're going to be doing

35
02:02.240 --> 02:02.760
now.

36
02:02.760 --> 02:10.830
Our primary goal in this skill is going to be to build an IPsec VPN from on-

37
02:10.830 --> 02:12.200
prem R1 down

38
02:12.200 --> 02:15.160
here to GCPR1.

39
02:15.160 --> 02:18.240
Of course this IPsec VPN is going to come out here through the internet and

40
02:18.240 --> 02:19.000
through Google

41
02:19.000 --> 02:23.720
Cloud and we're going to be building our VPN like this.

42
02:23.720 --> 02:29.440
Also, we're going to need to make sure that our VLAN 10 up here on the on-prem

43
02:29.440 --> 02:30.800
network and
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

43
02:29.440 --> 02:30.800
network and

44
02:30.800 --> 02:37.590
subnet 10 down here on our second VPC in Google Cloud are advertised to the

45
02:37.590 --> 02:38.840
other router

46
02:38.840 --> 02:42.560
as being available through this IPsec tunnel.

47
02:42.560 --> 02:45.880
Now there's of course a lot of different ways we could do this, specifically we

48
02:45.880 --> 02:46.200
're going

49
02:46.200 --> 02:50.440
to advertise these in this example through OSPF.

50
02:50.440 --> 02:53.990
That's what we're going to use for our dynamic routing protocol and

51
02:53.990 --> 02:54.760
specifically we're

52
02:54.760 --> 02:57.160
going to put all of these into area zero.

53
02:57.160 --> 03:03.000
It's not a large environment so we don't need multiple OSPF areas but also be
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

53
02:57.160 --> 03:03.000
It's not a large environment so we don't need multiple OSPF areas but also be

54
03:03.000 --> 03:03.720
aware that

55
03:03.720 --> 03:08.850
you could do this with static routing or EIGRP, even BGP, you can really use

56
03:08.850 --> 03:09.760
any routing

57
03:09.760 --> 03:11.480
protocol here you choose.

58
03:11.480 --> 03:13.920
We're just going to be using OSPF.

59
03:13.920 --> 03:19.780
The end goal of course of all of this is we want workstation 1 up here on the

60
03:19.780 --> 03:21.680
on-prem location

61
03:21.680 --> 03:28.680
to be able to talk to server 1 or SRV1 down here in Google Cloud.

62
03:28.680 --> 03:30.480
So that's where we're going to be headed.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

62
03:28.680 --> 03:30.480
So that's where we're going to be headed.

63
03:30.480 --> 03:37.330
We're going to build this IPsec VPN between on-prem R1 and GCPR1, advertise the

64
03:37.330 --> 03:38.240
networks

65
03:38.240 --> 03:43.060
through that tunnel using OSPF and then of course we'll verify that the work

66
03:43.060 --> 03:44.720
station and server

67
03:44.720 --> 03:47.200
have communication.

68
03:47.200 --> 03:51.400
So in this video we just put together our game plan of what we're trying to

69
03:51.400 --> 03:52.120
accomplish

70
03:52.120 --> 03:53.920
in this skill.

71
03:53.920 --> 03:57.980
Again the main thing here is that VPN that we're going to be building between

72
03:57.980 --> 03:59.160
on-prem R1

73
03:59.160 --> 04:04.860
and GCPR1 also note that in the challenge we're going to be building a
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

73
03:59.160 --> 04:04.860
and GCPR1 also note that in the challenge we're going to be building a

74
04:04.860 --> 04:07.720
redundant IPsec VPN

75
04:07.720 --> 04:12.280
between on-prem R2 and GCPR2.

76
04:12.280 --> 04:17.630
But the end goal here is to have the workstation in the on-prem location be

77
04:17.630 --> 04:19.560
able to talk to the server

78
04:19.560 --> 04:23.600
which is on our inside network in Google Cloud.

79
04:23.600 --> 04:27.390
So now that we know where we're headed let's go ahead and jump in in the next

80
04:27.390 --> 04:28.040
video and

81
04:28.040 --> 04:32.320
begin configuring the components we need for our IPsec VPN.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

81
04:28.040 --> 04:32.320
begin configuring the components we need for our IPsec VPN.

82
04:32.320 --> 04:42.320
[BLANK_AUDIO]