WEBVTT

1
00:00.000 --> 00:07.310
So now that all of our other components are configured and functioning properly

2
00:07.310 --> 00:07.560
, it's

3
00:07.560 --> 00:10.760
time to bring in our SD-WAN Edge devices.

4
00:10.760 --> 00:15.640
We're going to be using, of course, the Catalyst 8000V.

5
00:15.640 --> 00:22.000
Now in CML 2.7, there's actually two choices for this, assuming we've added the

6
00:22.000 --> 00:22.960
additional

7
00:22.960 --> 00:25.600
components as we have.

8
00:25.600 --> 00:31.790
First you have the normal Catalyst 8000V, which essentially comes up with a
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

8
00:25.600 --> 00:31.790
First you have the normal Catalyst 8000V, which essentially comes up with a

9
00:31.790 --> 00:33.600
blank configuration.

10
00:33.600 --> 00:39.800
Then there's the one that's actually listed as the Catalyst SD-WAN Edge.

11
00:39.800 --> 00:46.320
That Catalyst 8000V is going to come up automatically in controller mode.

12
00:46.320 --> 00:48.320
That's the one we're going to use.

13
00:48.320 --> 00:53.040
However, it coming up automatically in controller mode is sort of going to

14
00:53.040 --> 00:54.280
bring some interesting

15
00:54.280 --> 00:59.500
aspects to the table as far as configuring this and getting our root

16
00:59.500 --> 01:01.000
certificate onto
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

16
00:59.500 --> 01:01.000
certificate onto

17
01:01.000 --> 01:02.480
that router.

18
01:02.480 --> 01:05.920
That's actually going to be our main focus here, because adding it into the

19
01:05.920 --> 01:06.780
environment is

20
01:06.780 --> 01:08.600
actually quite simple.

21
01:08.600 --> 01:11.440
So let's go ahead and jump in and get started.

22
01:11.440 --> 01:18.730
We'll start by adding our component list or our device list into SD-WAN Manager

23
01:18.730 --> 01:18.840
.

24
01:18.840 --> 01:22.360
Let's go ahead and get started.

25
01:22.360 --> 01:30.020
So the first thing we have to do is upload our serial file.vetelafile to SD-WAN
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

25
01:22.360 --> 01:30.020
So the first thing we have to do is upload our serial file.vetelafile to SD-WAN

26
01:30.020 --> 01:31.240
Manager.

27
01:31.240 --> 01:34.400
We need this the same as we did with previous versions.

28
01:34.400 --> 01:38.370
So again, I'm not going to review how to get this file that's covered in a

29
01:38.370 --> 01:39.000
previous

30
01:39.000 --> 01:40.360
skill.

31
01:40.360 --> 01:45.550
But to add it here to this version of SD-WAN Manager, we're going to go to

32
01:45.550 --> 01:47.000
configuration,

33
01:47.000 --> 01:52.860
we're going to go to devices, and under the WAN Edge list here, we're going to

34
01:52.860 --> 01:53.520
choose

35
01:53.520 --> 01:56.120
Upload WAN Edge List.

36
01:56.120 --> 02:01.490
Then over here on the right, we're going to choose a file or you can drag and
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

36
01:56.120 --> 02:01.490
Then over here on the right, we're going to choose a file or you can drag and

37
02:01.490 --> 02:01.840
drop.

38
02:01.840 --> 02:04.400
So we're simply going to choose a file.

39
02:04.400 --> 02:06.880
This is in my Downloads folder.

40
02:06.880 --> 02:11.760
So I'm simply going to choose the file, hit Open, and then we want to change

41
02:11.760 --> 02:12.460
the Send

42
02:12.460 --> 02:15.440
to Controllers to Yes.

43
02:15.440 --> 02:20.080
That way everybody has the information, and then we hit Upload.

44
02:20.080 --> 02:23.000
This will take just a few minutes to push out to all of the devices.

45
02:23.000 --> 02:28.320
We see currently the status is in progress, and now it switches to success.

46
02:28.320 --> 02:32.710
So now what we want to do is hit back in our browser, and this will now bring
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

46
02:28.320 --> 02:32.710
So now what we want to do is hit back in our browser, and this will now bring

47
02:32.710 --> 02:33.560
up the list

48
02:33.560 --> 02:36.760
of devices from that file.

49
02:36.760 --> 02:43.190
We're going to need two components off this list to add the devices into SD-WAN

50
02:43.190 --> 02:44.260
Manager.

51
02:44.260 --> 02:48.100
The first is the chassis number, which as we can see is in this first column on

52
02:48.100 --> 02:49.480
the left,

53
02:49.480 --> 02:51.840
but we also need the token.

54
02:51.840 --> 02:57.440
That's not shown here by default as it actually was in earlier versions of code

55
02:57.440 --> 02:57.500
.

56
02:57.500 --> 03:02.700
So what we need to do is come over here to the gear and choose to turn on the
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

56
02:57.500 --> 03:02.700
So what we need to do is come over here to the gear and choose to turn on the

57
03:02.700 --> 03:03.340
serial

58
03:03.340 --> 03:05.260
number or token.

59
03:05.260 --> 03:10.840
We'll hit Apply, and now we have a field here, Serial Number, Token.

60
03:10.840 --> 03:14.620
We may have to scroll over to see it, but there's our column.

61
03:14.620 --> 03:17.280
We now have the Serial Number and Token.

62
03:17.280 --> 03:24.320
So what we have to do now is we have to pick two 8,000 V's off our list, copy

63
03:24.320 --> 03:25.480
their chassis

64
03:25.480 --> 03:29.820
number, and their serial number or token.

65
03:29.820 --> 03:36.020
Now if I scroll down my list here, you can see that my catalyst 8,000 V's are
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

65
03:29.820 --> 03:36.020
Now if I scroll down my list here, you can see that my catalyst 8,000 V's are

66
03:36.020 --> 03:36.700
listed

67
03:36.700 --> 03:38.280
here at the bottom.

68
03:38.280 --> 03:43.600
So I'm going to be using two of these with those tokens in order to add these

69
03:43.600 --> 03:44.380
devices

70
03:44.380 --> 03:46.060
into my environment.

71
03:46.060 --> 03:49.920
So copy that information and keep it handy.

72
03:49.920 --> 03:56.380
The next thing we have to do is get our root certificate onto these routers.

73
03:56.380 --> 03:58.380
And that's a little bit tricky.

74
03:58.380 --> 04:03.060
In previous skills, we did that using a TCL script.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

74
03:58.380 --> 04:03.060
In previous skills, we did that using a TCL script.

75
04:03.060 --> 04:05.860
However, here's a small problem.

76
04:05.860 --> 04:08.540
Let's switch over to router one.

77
04:08.540 --> 04:15.030
Since we're using Cisco's configuration that comes with CML 2.7, the login here

78
04:15.030 --> 04:15.600
is going

79
04:15.600 --> 04:18.040
to be Cisco Cisco.

80
04:18.040 --> 04:20.540
And here's the fundamental problem.

81
04:20.540 --> 04:26.120
If we try to go into TCL Shell, this command is not supported while we're in

82
04:26.120 --> 04:27.040
controller

83
04:27.040 --> 04:28.120
mode.

84
04:28.120 --> 04:32.460
So that's what's going to make getting the certificate here onto these routers
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

84
04:28.120 --> 04:32.460
So that's what's going to make getting the certificate here onto these routers

85
04:32.460 --> 04:32.960
a little

86
04:32.960 --> 04:34.600
more difficult.

87
04:34.600 --> 04:37.580
Now there's probably several different ways to do it.

88
04:37.580 --> 04:41.500
But what I found is in the lab environment here, the easiest way to do it, at

89
04:41.500 --> 04:42.020
least I

90
04:42.020 --> 04:46.600
think, is to use a TFTP server.

91
04:46.600 --> 04:50.400
Well I don't really have a TFTP server in my lab.

92
04:50.400 --> 04:54.750
So what I'm going to do is I'm just going to use our headquarter switch to

93
04:54.750 --> 04:55.360
serve this

94
04:55.360 --> 04:57.940
up through TFTP.

95
04:57.940 --> 05:00.980
So let me jump over to the headquarter switch.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

95
04:57.940 --> 05:00.980
So let me jump over to the headquarter switch.

96
05:00.980 --> 05:06.730
We'll go into enable mode, we'll go into TCL Shell, and now we can put in the

97
05:06.730 --> 05:07.500
script to

98
05:07.500 --> 05:09.740
create the certificate.

99
05:09.740 --> 05:17.180
If we do a DIR, we can see that now we have this CA dot cert on flash zero.

100
05:17.180 --> 05:20.780
So now all we have to do is go into configuration mode.

101
05:20.780 --> 05:27.180
First, we'll tell it to make this file available through TFTP using the TFTP

102
05:27.180 --> 05:28.860
server command.

103
05:28.860 --> 05:33.610
Then we have to give this device an IP address on VLAN 100 that we can use to
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

103
05:28.860 --> 05:33.610
Then we have to give this device an IP address on VLAN 100 that we can use to

104
05:33.610 --> 05:34.540
connect to

105
05:34.540 --> 05:35.540
it.

106
05:35.540 --> 05:40.900
So we'll just create an SVI interface for VLAN 100, give it an IP address, make

107
05:40.900 --> 05:41.260
sure

108
05:41.260 --> 05:45.380
it's no shut, and exit configuration.

109
05:45.380 --> 05:49.700
Now we should be able to do some configuration on router one.

110
05:49.700 --> 05:54.830
So back over on router one, we're going to put our baseline configuration on

111
05:54.830 --> 05:55.460
here.

112
05:55.460 --> 06:01.340
So what we're not going to do is configure the SD WAN section with our tunnels.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

112
05:55.460 --> 06:01.340
So what we're not going to do is configure the SD WAN section with our tunnels.

113
06:01.340 --> 06:08.140
If we do that, it actually denies all traffic on VPN zero.

114
06:08.140 --> 06:13.000
We could change that, but it's easier just to copy the file before we turn on

115
06:13.000 --> 06:14.260
that feature.

116
06:14.260 --> 06:18.050
So what we're going to do is we're going to tell it to copy that file from the

117
06:18.050 --> 06:18.580
switch

118
06:18.580 --> 06:20.900
and put it on the boot flash.

119
06:20.900 --> 06:25.040
Now that we have the file, we're going to tell it to install that as the root

120
06:25.040 --> 06:25.540
search

121
06:25.540 --> 06:27.100
chain.

122
06:27.100 --> 06:31.140
Now that that's done, we're going to go back into configuration mode.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

122
06:27.100 --> 06:31.140
Now that that's done, we're going to go back into configuration mode.

123
06:31.140 --> 06:36.620
Remember that in controller mode, you can't just use configure terminal.

124
06:36.620 --> 06:40.980
It tells you that's not supported, but at least it does tell you the command to

125
06:40.980 --> 06:41.500
use.

126
06:41.500 --> 06:45.780
As you can see, it's config transaction.

127
06:45.780 --> 06:49.860
Now we can put the rest of our SD WAN configuration in.

128
06:49.860 --> 06:54.300
Our final step is now going to be to register this with the fabric.

129
06:54.300 --> 06:56.660
As you can see, that's quite a long command.

130
06:56.660 --> 06:59.560
So I'll just put it down here at the bottom so you can see it, but this is

131
06:59.560 --> 07:00.100
where we're
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

131
06:59.560 --> 07:00.100
where we're

132
07:00.100 --> 07:04.020
putting in our chassis number and our token and so on.

133
07:04.020 --> 07:07.580
So let's just go ahead and add this here on router one.

134
07:07.580 --> 07:10.480
So now that we've seen how to configure this, I'm going to go ahead and

135
07:10.480 --> 07:11.340
configure router

136
07:11.340 --> 07:14.220
two the exact same way.

137
07:14.220 --> 07:18.340
Then we'll go back to SD WAN manager and make sure that both of our edge

138
07:18.340 --> 07:20.740
devices are installed.

139
07:20.740 --> 07:26.480
So now when we switch back over here to SD WAN manager, notice that we now have

140
07:26.480 --> 07:27.180
two WAN

141
07:27.180 --> 07:32.740
edges and as further verification, we can just click on devices here.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

141
07:27.180 --> 07:32.740
edges and as further verification, we can just click on devices here.

142
07:32.740 --> 07:37.310
And here we can see that are on-prem router one and on-prem router two that we

143
07:37.310 --> 07:38.420
just configured

144
07:38.420 --> 07:41.660
are both up and running.

145
07:41.660 --> 07:47.870
So in this video, we took a look at how to add the SD WAN edge devices in

146
07:47.870 --> 07:48.660
controller

147
07:48.660 --> 07:52.380
mode into SD WAN manager.

148
07:52.380 --> 07:55.740
So now our entire environment is up and running.

149
07:55.740 --> 07:58.020
We just have to configure it.

150
07:58.020 --> 08:05.020
Now there's two skills after this one that are actually almost identical.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

150
07:58.020 --> 08:05.020
Now there's two skills after this one that are actually almost identical.

151
08:05.020 --> 08:13.340
One of them is meant for if you're using CML 2.6 or earlier and then the second

152
08:13.340 --> 08:14.020
one is

153
08:14.020 --> 08:18.140
if you're using 2.7 or higher.

154
08:18.140 --> 08:24.740
So please choose your next skill based on which version of CML you're deciding

155
08:24.740 --> 08:26.420
to run.

156
08:26.420 --> 08:31.220
But that said, that's everything we need to cover in this skill.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

156
08:26.420 --> 08:31.220
But that said, that's everything we need to cover in this skill.

157
08:31.220 --> 08:34.740
So that leaves us with just the challenge.

158
08:34.740 --> 08:39.860
Go ahead and give the challenge a shot and I'll see you in the solution video

159
08:39.860 --> 08:40.180
on the

160
08:40.180 --> 08:40.900
other side.