WEBVTT

1
00:00.000 --> 00:07.120
So the first thing we're told to do in this challenge is to bring on-prem

2
00:07.120 --> 00:08.700
router 2 into

3
00:08.700 --> 00:11.000
our SD-WAN environment.

4
00:11.000 --> 00:13.320
So let's go ahead and go through this.

5
00:13.320 --> 00:17.400
The first thing we need to do, of course, is put our certificate in here.

6
00:17.400 --> 00:21.320
So we'll go ahead and paste the script that we created earlier.

7
00:21.320 --> 00:25.480
We'll go ahead and verify that our certificate is correct, which it is.

8
00:25.480 --> 00:28.360
Then we'll do our controller mode enable.

9
00:28.360 --> 00:32.480
Of course, it's going to tell us all of the warnings, just like router 1 did.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

9
00:28.360 --> 00:32.480
Of course, it's going to tell us all of the warnings, just like router 1 did.

10
00:32.480 --> 00:36.000
We'll continue and we're not going to abort.

11
00:36.000 --> 00:39.560
We'll just hit enter to let this device reload.

12
00:39.560 --> 00:44.230
Once again, this is going to take quite some time, so we will jump ahead until

13
00:44.230 --> 00:45.000
this router

14
00:45.000 --> 00:46.720
is rebooted.

15
00:46.720 --> 00:49.560
So now router 2 is fully booted.

16
00:49.560 --> 00:51.760
We'll go ahead and log in.

17
00:51.760 --> 00:53.960
We'll change our password.

18
00:53.960 --> 00:58.100
Now remember, the first thing we have to do is tell it to actually install our

19
00:58.100 --> 00:58.440
root

20
00:58.440 --> 01:00.000
certificate.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

21
01:00.000 --> 01:05.360
So we'll do our request platform software, SD-WAN, root search chain, install,

22
01:05.360 --> 01:05.800
and then

23
01:05.800 --> 01:08.000
point it to our file.

24
01:08.000 --> 01:12.680
Once that's successfully installed, we'll put on our baseline configuration.

25
01:12.680 --> 01:15.520
So let's go into config transaction.

26
01:15.520 --> 01:19.240
We'll go ahead and paste in the first part of our configuration.

27
01:19.240 --> 01:22.640
So notice this is very similar to what we did on router 1.

28
01:22.640 --> 01:28.640
Of course, our Gigabit 1 and our Gigabit 2.100 IP addresses are different.

29
01:28.640 --> 01:30.160
Same default route.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

29
01:28.640 --> 01:30.160
Same default route.

30
01:30.160 --> 01:32.920
Next, let's put in our system information.

31
01:32.920 --> 01:38.130
Again, the system IP is going to be different, but the rest of this is the same

32
01:38.130 --> 01:38.240
.

33
01:38.240 --> 01:41.050
Just like we did before, let's go ahead and commit at this point to make sure

34
01:41.050 --> 01:41.440
there's

35
01:41.440 --> 01:43.180
no issues.

36
01:43.180 --> 01:44.380
That was successful.

37
01:44.380 --> 01:48.240
So now let's put on our SD-WAN configuration.

38
01:48.240 --> 01:51.440
Everything here is essentially the same as router 1.

39
01:51.440 --> 01:53.360
So let's just go ahead and commit.

40
01:53.360 --> 01:56.240
So we'll go ahead and exit configuration.

41
01:56.240 --> 01:59.480
And then we'll put in our command to have this joined SD-WAN.

42
01:59.480 --> 02:03.520
Now remember, this is a rather long command.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

42
01:59.480 --> 02:03.520
Now remember, this is a rather long command.

43
02:03.520 --> 02:08.400
Here it is in Notepad++ just so you can see it, but it's request platform

44
02:08.400 --> 02:09.600
software, SD-WAN,

45
02:09.600 --> 02:16.490
V-edge_cloud, activate Chassis number, put in one of the Chassis numbers from

46
02:16.490 --> 02:17.360
your SD-WAN

47
02:17.360 --> 02:22.130
V-Manage device list, then put in the token, and then you should be able to

48
02:22.130 --> 02:22.920
paste this

49
02:22.920 --> 02:24.320
in.

50
02:24.320 --> 02:28.400
Of course, the reason I showed it to you in Notepad is when I paste it in.

51
02:28.400 --> 02:30.880
You cannot see the beginning of the command at all.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

51
02:28.400 --> 02:30.880
You cannot see the beginning of the command at all.

52
02:30.880 --> 02:34.440
You see that dollar sign at the beginning indicating that the command has

53
02:34.440 --> 02:35.080
essentially

54
02:35.080 --> 02:37.760
gone behind the command prompt.

55
02:37.760 --> 02:40.000
So let's go ahead and hit enter.

56
02:40.000 --> 02:45.240
We'll give this just a few moments, and then let's go back over to SD-WAN.

57
02:45.240 --> 02:48.990
So I let this sit for actually quite a while to make sure that we would

58
02:48.990 --> 02:50.040
actually be able

59
02:50.040 --> 02:53.360
to get the statistics from router 2 as well.

60
02:53.360 --> 02:57.720
So the first thing, of course, to note is that under our WAN-edge devices, we

61
02:57.720 --> 02:58.320
now have

62
02:58.320 --> 03:00.360
two that are reachable.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

62
02:58.320 --> 03:00.360
two that are reachable.

63
03:00.360 --> 03:05.710
And if we scroll down and look at our WAN-edge health box this time, notice

64
03:05.710 --> 03:06.760
that we now have

65
03:06.760 --> 03:12.960
information from both on-prem router 1 and on-prem router 2.

66
03:12.960 --> 03:15.440
Both devices are healthy.

67
03:15.440 --> 03:19.720
And of course, if we scroll back up, we can also go to devices.

68
03:19.720 --> 03:24.560
We can again filter it by reachability being up.

69
03:24.560 --> 03:30.160
And we can see here that on-prem router 2 is up, connected, reachable.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

69
03:24.560 --> 03:30.160
And we can see here that on-prem router 2 is up, connected, reachable.

70
03:30.160 --> 03:35.170
It has its connection to the vSmart controller, and we've gotten our CPU load

71
03:35.170 --> 03:37.240
and memory utilization

72
03:37.240 --> 03:38.680
from this router.

73
03:38.680 --> 03:43.760
So that takes care of bringing on-prem router 2 into our environment.

74
03:43.760 --> 03:49.280
The second part of this challenge is to add the second vSmart controller.

75
03:49.280 --> 03:52.080
So for this, we're going to go back to our main menu.

76
03:52.080 --> 03:56.400
We're going to go into configuration and into devices.

77
03:56.400 --> 03:58.640
We'll go to controllers.

78
03:58.640 --> 04:02.920
Under add controller, we will choose vSmart.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

78
03:58.640 --> 04:02.920
Under add controller, we will choose vSmart.

79
04:02.920 --> 04:08.480
This device's address is 10.100.10.218.

80
04:08.480 --> 04:10.800
The username is admin.

81
04:10.800 --> 04:12.880
We'll put in our password.

82
04:12.880 --> 04:15.800
We'll take off the generate CSR.

83
04:15.800 --> 04:17.480
Hit add.

84
04:17.480 --> 04:19.440
Next we have to generate a certificate for it.

85
04:19.440 --> 04:23.960
So we'll go back to our menu, configuration certificates.

86
04:23.960 --> 04:25.960
Go to controllers.

87
04:25.960 --> 04:31.680
And for the second vSmart controller, we will generate a CSR.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

87
04:25.960 --> 04:31.680
And for the second vSmart controller, we will generate a CSR.

88
04:31.680 --> 04:33.440
We'll download it.

89
04:33.440 --> 04:35.160
We'll close this.

90
04:35.160 --> 04:37.960
Then we'll open our downloads folder.

91
04:37.960 --> 04:41.760
Find the undefined certificate request.

92
04:41.760 --> 04:44.440
We'll rename it to vSmart2.

93
04:44.440 --> 04:46.840
Then we'll open PowerShell.

94
04:46.840 --> 04:49.680
We'll cd into the downloads folder.

95
04:49.680 --> 04:53.720
We'll upload this file to the vManage server.

96
04:53.720 --> 04:56.560
And then we'll open up vManage.

97
04:56.560 --> 04:59.280
On vManage, we'll go into vShell.

98
04:59.280 --> 05:00.720
We'll do our LS.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

98
04:59.280 --> 05:00.720
We'll do our LS.

99
05:00.720 --> 05:04.240
We see here that we have the vSmart2.csr.

100
05:04.240 --> 05:08.150
So here's the command that we need to enter on vManage to create the

101
05:08.150 --> 05:09.080
certificate.

102
05:09.080 --> 05:11.200
We'll go ahead and hit enter.

103
05:11.200 --> 05:12.760
We'll do an LS again.

104
05:12.760 --> 05:17.760
And we see that now we have the vSmart2.crt.

105
05:17.760 --> 05:21.240
So now we simply have to copy this back to our PC.

106
05:21.240 --> 05:27.270
So back here in PowerShell, we'll put in the command to copy that file, the v

107
05:27.270 --> 05:28.560
Smart2.crt,

108
05:28.560 --> 05:30.640
back here to the PC.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

108
05:28.560 --> 05:30.640
back here to the PC.

109
05:30.640 --> 05:32.600
So that copies the file.

110
05:32.600 --> 05:35.400
So now let's go back over to vSmart.

111
05:35.400 --> 05:40.800
Back here in vSmart, we're going to choose install certificate, select file,

112
05:40.800 --> 05:40.880
and we're

113
05:40.880 --> 05:44.440
going to choose the vSmart2.crt.

114
05:44.440 --> 05:48.120
We'll go ahead and hit open and install.

115
05:48.120 --> 05:51.040
Now that this is complete, we'll hit back.

116
05:51.040 --> 05:57.280
Notice that this new vSmart controller now has a certificate serial number.

117
05:57.280 --> 05:59.400
So the certificate looks good.

118
05:59.400 --> 06:04.600
Now what we have to do is convert its VPN to a tunnel.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

118
05:59.400 --> 06:04.600
Now what we have to do is convert its VPN to a tunnel.

119
06:04.600 --> 06:08.000
So let's connect into vSmart2.

120
06:08.000 --> 06:12.420
Here on vSmart2, we'll simply paste the configuration needed to convert this

121
06:12.420 --> 06:14.760
interface to a tunnel.

122
06:14.760 --> 06:19.360
And then we can just go right back over to vManage and verify that everything

123
06:19.360 --> 06:20.240
is correct.

124
06:20.240 --> 06:24.080
So here on the certificates page, everything looks okay.

125
06:24.080 --> 06:26.640
All the v-ages are in sync.

126
06:26.640 --> 06:30.240
We see that we now have vSmart2's host name.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

126
06:26.640 --> 06:30.240
We see that we now have vSmart2's host name.

127
06:30.240 --> 06:32.080
We have its system IP.

128
06:32.080 --> 06:34.480
So everything here looks correct.

129
06:34.480 --> 06:37.240
Let's go back to our overview page.

130
06:37.240 --> 06:43.680
Here on the overview page, we're now showing two vSmart controllers.

131
06:43.680 --> 06:49.370
And if we go to devices and filter this by devices that are up, we see here

132
06:49.370 --> 06:50.880
that vSmart2

133
06:50.880 --> 06:52.480
is in fact up.

134
06:52.480 --> 06:55.960
It's learned everything about it.

135
06:55.960 --> 07:03.450
And most importantly, we see under the vSmart control column that vManage, both
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

135
06:55.960 --> 07:03.450
And most importantly, we see under the vSmart control column that vManage, both

136
07:03.450 --> 07:04.440
of our on-prem

137
07:04.440 --> 07:11.650
routers are one and are two, both have two connections now to the two vSmart

138
07:11.650 --> 07:13.360
controllers.

139
07:13.360 --> 07:16.930
Also if we look at the vSmart controllers themselves, we see that they have

140
07:16.930 --> 07:17.640
connections

141
07:17.640 --> 07:19.160
to each other.

142
07:19.160 --> 07:22.800
So all of our connections are up and working and we've added the second vSmart

143
07:22.800 --> 07:23.440
controller

144
07:23.440 --> 07:24.720
now.

145
07:24.720 --> 07:29.440
So that concludes everything that we need to accomplish in this challenge,

146
07:29.440 --> 07:29.720
which means

147
07:29.720 --> 07:32.960
that also concludes this skill.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

147
07:29.720 --> 07:32.960
that also concludes this skill.

148
07:32.960 --> 07:38.360
So congratulations on completing Configure Our Controllers and Edge Devices.

149
07:38.360 --> 07:42.440
I hope this has been informative for you and I'd like to thank you for viewing.

150
07:42.440 --> 07:52.440
[BLANK_AUDIO]