WEBVTT

1
00:00.000 --> 00:08.940
So our next step here is going to be to configure our VPN 512 for out of band

2
00:08.940 --> 00:10.280
management.

3
00:10.280 --> 00:14.460
Now this is going to be a fairly simple template, but let's go ahead and jump

4
00:14.460 --> 00:15.280
in and configure

5
00:15.280 --> 00:16.280
it.

6
00:16.280 --> 00:21.560
And then we'll go ahead and apply this device template to both router one and

7
00:21.560 --> 00:22.560
router two,

8
00:22.560 --> 00:26.600
put in the appropriate values for the stuff that needs to be filled in.

9
00:26.600 --> 00:33.120
And then we'll push the configuration out and verify that it's been applied.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

9
00:26.600 --> 00:33.120
And then we'll push the configuration out and verify that it's been applied.

10
00:33.120 --> 00:36.880
So once again, we'll start off here on the device template screen.

11
00:36.880 --> 00:39.360
We'll go over here to our action menu.

12
00:39.360 --> 00:41.200
We'll choose edit.

13
00:41.200 --> 00:48.360
This time we'll scroll down to VPN 512 and we'll add a new VPN 512 template.

14
00:48.360 --> 00:55.600
Just like before, we'll name this VPN 512 description VPN 512.

15
00:55.600 --> 00:59.200
You could add for management to this if you want as well.

16
00:59.200 --> 01:07.010
Notice that just like with VPN zero, since we created this under VPN 512, it's
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

16
00:59.200 --> 01:07.010
Notice that just like with VPN zero, since we created this under VPN 512, it's

17
01:07.010 --> 01:07.480
already

18
01:07.480 --> 01:10.560
filled in the VPN number for us.

19
01:10.560 --> 01:15.350
However, for our management interface, we're actually going to use static

20
01:15.350 --> 01:16.480
routing here.

21
01:16.480 --> 01:19.800
So if we want to add a static route, what we need to do is scroll down just a

22
01:19.800 --> 01:20.240
little

23
01:20.240 --> 01:24.760
bit further to the IPV for route section.

24
01:24.760 --> 01:27.960
Here we're going to choose a new IPV for route.

25
01:27.960 --> 01:29.480
This is going to be a default route.

26
01:29.480 --> 01:34.480
So we're just going to say, zero, zero, zero, zero, slash zero for the gateway.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

26
01:29.480 --> 01:34.480
So we're just going to say, zero, zero, zero, zero, slash zero for the gateway.

27
01:34.480 --> 01:39.260
Notice we have choices such as to send it to a next hop address or to null zero

28
01:39.260 --> 01:39.600
.

29
01:39.600 --> 01:45.810
If we wanted to black hole the traffic or to a VPN or DHCP, well, we're going

30
01:45.810 --> 01:46.000
to do

31
01:46.000 --> 01:47.920
a next hop.

32
01:47.920 --> 01:50.680
So we have to fill in the next hop down below.

33
01:50.680 --> 01:55.520
Now there's two choices to just do a next hop or a next hop with a tracker.

34
01:55.520 --> 01:58.450
We're not going to go ahead and set up a tracker and everything for our out of

35
01:58.450 --> 01:58.800
band

36
01:58.800 --> 02:00.600
management interface.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

36
01:58.800 --> 02:00.600
management interface.

37
02:00.600 --> 02:03.680
So we're just going to click on add next hop.

38
02:03.680 --> 02:05.800
We'll say to add next hop.

39
02:05.800 --> 02:11.920
The next hop address for my management network is 192.168.1.1.

40
02:11.920 --> 02:15.840
Notice we can also configure the administrative distance here.

41
02:15.840 --> 02:18.360
Maybe if we had more than one next hop.

42
02:18.360 --> 02:20.800
Again, we can come down here and say add next hop.

43
02:20.800 --> 02:23.000
You can put in more than one.

44
02:23.000 --> 02:26.340
Now we're not going to do that because I don't have that kind of redundancy set

45
02:26.340 --> 02:26.520
up

46
02:26.520 --> 02:28.320
on my management network.

47
02:28.320 --> 02:33.150
So we'll just go ahead and remove this second one, but we can add multiple next
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

47
02:28.320 --> 02:33.150
So we'll just go ahead and remove this second one, but we can add multiple next

48
02:33.150 --> 02:33.840
hops and

49
02:33.840 --> 02:36.120
then set the admin distance.

50
02:36.120 --> 02:38.840
We don't need to set the admin distance on this one because it's going to be

51
02:38.840 --> 02:39.240
the only

52
02:39.240 --> 02:42.080
one we'll hit add.

53
02:42.080 --> 02:46.990
And sort of like we saw with OSPF, this is not complete until we come over here

54
02:46.990 --> 02:47.360
and

55
02:47.360 --> 02:49.680
hit add on the right.

56
02:49.680 --> 02:54.640
Once again, just like OSPF, this should be a single line for each route and on

57
02:54.640 --> 02:55.200
the far

58
02:55.200 --> 02:59.600
right, we of course have that option to either edit or remove it.

59
02:59.600 --> 03:03.560
Now this is all we have to configure in our VPN 512 template.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

59
02:59.600 --> 03:03.560
Now this is all we have to configure in our VPN 512 template.

60
03:03.560 --> 03:05.720
So let's go ahead and hit save.

61
03:05.720 --> 03:08.800
But we also have to add our management interface.

62
03:08.800 --> 03:14.490
So over here on the right, let's go ahead and add a new Cisco VPN interface

63
03:14.490 --> 03:14.840
ethernet

64
03:14.840 --> 03:17.240
and we'll make a new template for it.

65
03:17.240 --> 03:22.320
So we'll set our template name and our description similar to how we did before

66
03:22.320 --> 03:22.400
.

67
03:22.400 --> 03:24.840
We'll scroll down under shutdown.

68
03:24.840 --> 03:27.440
Of course, we have to change this to no.

69
03:27.440 --> 03:33.120
The interface name is going to be gigabit ethernet five.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

69
03:27.440 --> 03:33.120
The interface name is going to be gigabit ethernet five.

70
03:33.120 --> 03:39.550
The description again, optional, but I would just give it something like

71
03:39.550 --> 03:40.840
management interface.

72
03:40.840 --> 03:45.120
For the IPV four address, as we did before, we're going to set this to device

73
03:45.120 --> 03:45.800
specific

74
03:45.800 --> 03:50.320
and we're going to change the key and just add the interface.

75
03:50.320 --> 03:53.560
We also want to ensure that the tunnel interface is off.

76
03:53.560 --> 03:54.720
That is the default.

77
03:54.720 --> 03:58.270
So we really shouldn't have to verify it, but just to make sure notice the

78
03:58.270 --> 03:59.160
tunnel interface

79
03:59.160 --> 04:00.720
is in fact off.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

79
03:59.160 --> 04:00.720
is in fact off.

80
04:00.720 --> 04:03.560
So let's go ahead and hit save.

81
04:03.560 --> 04:05.000
We'll scroll down here just a little bit.

82
04:05.000 --> 04:10.750
Just make sure we have our two components, the VPN 512 template with its static

83
04:10.750 --> 04:11.200
route

84
04:11.200 --> 04:15.960
and the gigabit five interface, which is going to need an IP address.

85
04:15.960 --> 04:17.240
So this is complete.

86
04:17.240 --> 04:19.320
Let's go ahead and hit update.

87
04:19.320 --> 04:24.480
Now what we want to do is apply this to our two devices router one and router

88
04:24.480 --> 04:25.120
two.

89
04:25.120 --> 04:27.520
So we go to our action menu.

90
04:27.520 --> 04:29.840
We say attached devices.

91
04:29.840 --> 04:33.600
And here it's going to show us all of the devices in our inventory.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

91
04:29.840 --> 04:33.600
And here it's going to show us all of the devices in our inventory.

92
04:33.600 --> 04:36.080
In other words, from the allowed device list.

93
04:36.080 --> 04:38.720
Now these have not all been added, of course.

94
04:38.720 --> 04:41.240
So I'm going to scroll down to the two we've added.

95
04:41.240 --> 04:43.240
We can see here that it's these two.

96
04:43.240 --> 04:47.530
You can actually select them both together and then we'll add them to the right

97
04:47.530 --> 04:47.960
side that

98
04:47.960 --> 04:51.040
we're going to be adding to this template.

99
04:51.040 --> 04:55.920
We'll hit attach and this brings us up to the screen to actually apply this to

100
04:55.920 --> 04:57.520
the devices.

101
04:57.520 --> 05:04.080
Now the first thing to note here is on the far left, there's a grayed out X.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

101
04:57.520 --> 05:04.080
Now the first thing to note here is on the far left, there's a grayed out X.

102
05:04.080 --> 05:09.200
That means that those devices are not yet ready to accept the configuration.

103
05:09.200 --> 05:14.680
The reason for it is we have some fields here that need to be filled in.

104
05:14.680 --> 05:20.320
Something else to note is take careful look at the host name when you're

105
05:20.320 --> 05:21.120
putting this

106
05:21.120 --> 05:23.000
information in.

107
05:23.000 --> 05:26.920
They don't always necessarily show up in the same order.

108
05:26.920 --> 05:30.400
So in our case, router one's on top, router two's on the bottom.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

108
05:26.920 --> 05:30.400
So in our case, router one's on top, router two's on the bottom.

109
05:30.400 --> 05:33.840
We now have to fill in all of these different fields.

110
05:33.840 --> 05:36.720
Now this is what I was talking about before.

111
05:36.720 --> 05:38.520
Notice these key names.

112
05:38.520 --> 05:42.780
We have this one right here where it says GE5 and this one right here where it

113
05:42.780 --> 05:43.680
says GE

114
05:43.680 --> 05:45.520
2.100.

115
05:45.520 --> 05:47.760
See why it's important that these are different.

116
05:47.760 --> 05:50.720
Otherwise I wouldn't know which interface is which.

117
05:50.720 --> 05:55.970
So what we need to do is fill in this information that's going to be per device

118
05:55.970 --> 05:56.000
.

119
05:56.000 --> 05:58.080
So let's just fill this in.

120
05:58.080 --> 06:02.880
So those are the management interfaces for router one and router two.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

120
05:58.080 --> 06:02.880
So those are the management interfaces for router one and router two.

121
06:02.880 --> 06:05.200
For the inside interface.

122
06:05.200 --> 06:09.120
So that takes care of the VPN zero interface.

123
06:09.120 --> 06:12.960
Notice however, there's still gray X's at the beginning.

124
06:12.960 --> 06:15.240
That's because there's still more fields.

125
06:15.240 --> 06:19.600
You might have to scroll to the side here to see the rest of the fields.

126
06:19.600 --> 06:23.690
The first time you deploy this, it's going to want the host name again because

127
06:23.690 --> 06:24.320
remember

128
06:24.320 --> 06:28.390
that this is actually going to be overriding the config that's already on these

129
06:28.390 --> 06:29.200
devices.

130
06:29.200 --> 06:31.720
Now we're actually going to keep them the same.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

130
06:29.200 --> 06:31.720
Now we're actually going to keep them the same.

131
06:31.720 --> 06:37.120
So this is still going to be on Prem R1 on Prem R2.

132
06:37.120 --> 06:41.220
We're going to keep the same system IP addresses and they're both going to be

133
06:41.220 --> 06:43.360
in site ID 100.

134
06:43.360 --> 06:47.180
So even though it had some of this information already, you can see it was

135
06:47.180 --> 06:48.160
already telling

136
06:48.160 --> 06:52.280
us the host name and system IP over on the left.

137
06:52.280 --> 06:56.370
It's not going to assume that what you temporarily configured them with is what

138
06:56.370 --> 06:57.760
you want permanently.

139
06:57.760 --> 07:01.080
I'm just trying to clarify why we had to sort of put this in again.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

139
06:57.760 --> 07:01.080
I'm just trying to clarify why we had to sort of put this in again.

140
07:01.080 --> 07:06.210
Now, as soon as we click out of this field, we see that the bottom router just

141
07:06.210 --> 07:06.720
went to

142
07:06.720 --> 07:08.440
a green check.

143
07:08.440 --> 07:10.480
The top router is not.

144
07:10.480 --> 07:13.640
So something's not right on the top router.

145
07:13.640 --> 07:15.160
Let's take a look.

146
07:15.160 --> 07:18.080
So when looking over it, nothing was wrong.

147
07:18.080 --> 07:20.800
It just seems the interface here glitched a little bit.

148
07:20.800 --> 07:24.200
As soon as I clicked on one of the fields and clicked off of it again, it went

149
07:24.200 --> 07:24.480
to a

150
07:24.480 --> 07:25.600
green check.

151
07:25.600 --> 07:28.440
So we actually did have it filled in correctly.

152
07:28.440 --> 07:33.000
So once we have our two green checks, we hit next over on the left, it's going
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

152
07:28.440 --> 07:33.000
So once we have our two green checks, we hit next over on the left, it's going

153
07:33.000 --> 07:33.560
to tell

154
07:33.560 --> 07:36.520
us the two devices that it's going to configure.

155
07:36.520 --> 07:40.000
Now something that's pretty cool here and it is completely optional.

156
07:40.000 --> 07:44.720
You could just down here at the bottom, click on configure devices right now.

157
07:44.720 --> 07:48.160
However, you might want to see what's actually going to be changed.

158
07:48.160 --> 07:50.720
So what you can do is you can actually click on one of these devices.

159
07:50.720 --> 07:55.150
I'll pick router one and it's going to bring up the config that it's going to

160
07:55.150 --> 07:55.840
put on this

161
07:55.840 --> 07:59.280
device when we apply the configuration.

162
07:59.280 --> 08:03.490
Now as you can see, that does take a second, but this is the configuration it's
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

162
07:59.280 --> 08:03.490
Now as you can see, that does take a second, but this is the configuration it's

163
08:03.490 --> 08:03.880
going to

164
08:03.880 --> 08:04.880
apply.

165
08:04.880 --> 08:07.640
And of course, we could scroll down through this.

166
08:07.640 --> 08:13.680
However, I think the cooler part is to hit config diff.

167
08:13.680 --> 08:18.160
This will actually show us the differences in what's going to be added and what

168
08:18.160 --> 08:18.600
's going

169
08:18.600 --> 08:22.160
to be removed from the current configuration.

170
08:22.160 --> 08:26.160
And if you don't like this format where it's sort of showing you in white, what

171
08:26.160 --> 08:26.360
's going

172
08:26.360 --> 08:30.050
to stay the same in green, what's going to be added and in red, what's going to
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

172
08:26.360 --> 08:30.050
to stay the same in green, what's going to be added and in red, what's going to

173
08:30.050 --> 08:31.600
be removed,

174
08:31.600 --> 08:35.520
there's another button over here you can hit side by side difference and it'll

175
08:35.520 --> 08:36.080
actually

176
08:36.080 --> 08:38.560
show you two separate columns.

177
08:38.560 --> 08:41.800
Now personally, I sort of like the one where they're mixed together.

178
08:41.800 --> 08:45.440
However, I just want to show you that you can switch between these.

179
08:45.440 --> 08:50.390
You can just go back to the inline differences, whichever way makes more sense

180
08:50.390 --> 08:51.080
to you.

181
08:51.080 --> 08:53.520
So you can see what's all going to be changed.

182
08:53.520 --> 08:56.720
Now in our case, we already know that all of this is going to be okay.

183
08:56.720 --> 08:59.960
So we can just move on to configure devices.

184
08:59.960 --> 09:02.640
So we'll just click on configure devices down here.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

184
08:59.960 --> 09:02.640
So we'll just click on configure devices down here.

185
09:02.640 --> 09:04.740
It's going to come up with a verification.

186
09:04.740 --> 09:09.740
You actually have to hit the checkbox to say, yes, I want to actually configure

187
09:09.740 --> 09:09.880
these

188
09:09.880 --> 09:11.360
two devices.

189
09:11.360 --> 09:13.000
Hit okay.

190
09:13.000 --> 09:16.280
We can see here that it now goes to in progress.

191
09:16.280 --> 09:18.120
This will take a few moments.

192
09:18.120 --> 09:21.680
So let's jump ahead until this is gone to successful.

193
09:21.680 --> 09:25.440
So we see here, it's now saying that these templates were successfully rolled

194
09:25.440 --> 09:25.800
out to

195
09:25.800 --> 09:26.800
our routers.

196
09:26.800 --> 09:29.600
Well, I think we should verify that.

197
09:29.600 --> 09:34.820
If this has been successful, we should now be able to SSH into these routers on
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

197
09:29.600 --> 09:34.820
If this has been successful, we should now be able to SSH into these routers on

198
09:34.820 --> 09:35.140
their

199
09:35.140 --> 09:37.120
out of band management network.

200
09:37.120 --> 09:39.600
So let's do some verification.

201
09:39.600 --> 09:45.750
So here we are SSH into router one and we already have an immediate indicator

202
09:45.750 --> 09:46.360
that our

203
09:46.360 --> 09:48.560
configuration was successful.

204
09:48.560 --> 09:54.880
We have a login banner here that says unauthorized logins tracked restricted

205
09:54.880 --> 09:56.680
use, sort of a generic

206
09:56.680 --> 10:00.160
banner, but that's what's already been configured.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

206
09:56.680 --> 10:00.160
banner, but that's what's already been configured.

207
10:00.160 --> 10:03.910
If we do a show IP interface brief, we can see that our sub interface is

208
10:03.910 --> 10:04.840
configured.

209
10:04.840 --> 10:09.050
We see that our gigabit five interfaces configured and we see that our system

210
10:09.050 --> 10:10.560
interface is configured

211
10:10.560 --> 10:12.840
with the system ID.

212
10:12.840 --> 10:18.300
There's also of course a couple other interfaces configured here that are for

213
10:18.300 --> 10:19.040
use by SD when

214
10:19.040 --> 10:22.200
let's verify this on router two as well.

215
10:22.200 --> 10:25.240
Once again, router two has the login banner.

216
10:25.240 --> 10:29.520
And if we do our show IP interface brief, this also looks correct.

217
10:29.520 --> 10:31.800
Our inside interface is configured.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

217
10:29.520 --> 10:31.800
Our inside interface is configured.

218
10:31.800 --> 10:34.440
Our gigabit five interfaces configured.

219
10:34.440 --> 10:38.400
And we have some other interfaces and such for SD when.

220
10:38.400 --> 10:45.000
So now our template has successfully been applied to our two devices.

221
10:45.000 --> 10:49.280
So in this video, we got some really important stuff done.

222
10:49.280 --> 10:54.400
First we set up our out of band management interface, of course VPN 512.

223
10:54.400 --> 10:59.750
But even more importantly than that, we got our device template applied to our

224
10:59.750 --> 11:00.640
two routers
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

224
10:59.750 --> 11:00.640
two routers

225
11:00.640 --> 11:05.160
and we came in and verified that that configuration had taken place.

226
11:05.160 --> 11:09.880
We did that by first SSHing into the device, which of course indicates that our

227
11:09.880 --> 11:10.360
gigabit

228
11:10.360 --> 11:12.320
five interfaces fine.

229
11:12.320 --> 11:16.750
And of course, we also verified the login banner has been applied as well as

230
11:16.750 --> 11:17.400
the other

231
11:17.400 --> 11:20.120
interfaces have been configured.

232
11:20.120 --> 11:24.060
Now we just have really one more step we have to do, which is configuring our

233
11:24.060 --> 11:25.800
service VPN

234
11:25.800 --> 11:29.680
so that our workstation can actually get out to the internet.

235
11:29.680 --> 11:34.040
So let's go ahead and set up that service VPN VPN 10.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

235
11:29.680 --> 11:34.040
So let's go ahead and set up that service VPN VPN 10.

236
11:34.040 --> 11:43.800
[BLANK_AUDIO]