WEBVTT

1
00:00.000 --> 00:09.520
So our final step here is going to be to do some final verification and build a

2
00:09.520 --> 00:15.440
VPN so that our on-prem network can talk to the network that we deployed in

3
00:15.440 --> 00:17.000
Microsoft Azure.

4
00:17.000 --> 00:19.000
Let's go ahead and jump in.

5
00:19.000 --> 00:23.000
We'll start on the SD-WAN side.

6
00:23.000 --> 00:28.000
So starting off again here on the dashboard for Cloud on-ramp.

7
00:28.000 --> 00:32.000
There's actually a few things we can do on this page.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

7
00:28.000 --> 00:32.000
There's actually a few things we can do on this page.

8
00:32.000 --> 00:37.610
First, if we open Network Snapshot over here, we can see that for our Microsoft

9
00:37.610 --> 00:43.620
Azure network, we currently have one cloud gateway and there are currently two

10
00:43.620 --> 00:45.000
WAN edges deployed.

11
00:45.000 --> 00:50.380
We can also see down here in the center section that we have those two devices

12
00:50.380 --> 00:57.000
and we can actually come down here, click on this, and get more information on

13
00:57.000 --> 00:57.000
the two devices.

14
00:57.000 --> 01:00.000
On the two devices that are deployed.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

15
01:00.000 --> 01:04.690
But what we really want to do is jump into the command line on one of these and

16
01:04.690 --> 01:07.000
see what's going on for the VPNs.

17
01:07.000 --> 01:11.000
So to do this, let's cancel out of here.

18
01:11.000 --> 01:13.000
We'll go to our main menu.

19
01:13.000 --> 01:15.000
We'll go to tools.

20
01:15.000 --> 01:20.000
We'll go to SSH terminal and we'll select Azure R1.

21
01:20.000 --> 01:24.000
The default login is admin admin.

22
01:24.000 --> 01:29.000
And it will make us put the password in a second time to go into enable mode.

23
01:29.000 --> 01:33.000
Let's zoom in here a little bit on the console so we can see a little better.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

23
01:29.000 --> 01:33.000
Let's zoom in here a little bit on the console so we can see a little better.

24
01:33.000 --> 01:37.900
This being a web interface. Unfortunately, that means we have to zoom in on the

25
01:37.900 --> 01:39.000
whole web page.

26
01:39.000 --> 01:44.400
But what we want to look at here is if we do a show VRF, notice that it has two

27
01:44.400 --> 01:51.800
VRFs here for the underlay interfaces and the management interface VRF for VPN

28
01:51.800 --> 01:53.000
512.

29
01:53.000 --> 01:56.000
But we don't have any service VPNs.

30
01:56.000 --> 01:58.000
So that's what we want to configure next.

31
01:58.000 --> 02:03.000
For this, let's go ahead and zoom back out so we can see the whole interface.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

31
01:58.000 --> 02:03.000
For this, let's go ahead and zoom back out so we can see the whole interface.

32
02:03.000 --> 02:05.000
Then let's go up here to the cloud.

33
02:05.000 --> 02:09.000
We'll go back to cloud on ramp for multi cloud.

34
02:09.000 --> 02:13.570
And down here at the bottom under intent management, let's click on cloud

35
02:13.570 --> 02:15.000
connectivity.

36
02:15.000 --> 02:19.870
So what we want to do is we want to connect our source VPN 10 to our

37
02:19.870 --> 02:22.000
destination server network.

38
02:22.000 --> 02:26.980
You can see here, by the way, where it's actually using that tag that we put in

39
02:26.980 --> 02:28.000
previously.

40
02:28.000 --> 02:32.000
Well, in order to modify this, what we need to do is hit edit.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

40
02:28.000 --> 02:32.000
Well, in order to modify this, what we need to do is hit edit.

41
02:32.000 --> 02:36.910
And then over here on the grid, we simply click where we want the connectivity

42
02:36.910 --> 02:38.000
to take place.

43
02:38.000 --> 02:43.000
So we want to connect VPN 10 to the server network.

44
02:43.000 --> 02:45.000
Let's go ahead and hit save.

45
02:45.000 --> 02:48.000
And it will begin to deploy.

46
02:48.000 --> 02:52.000
So here we see that our mapping went through successfully.

47
02:52.000 --> 02:56.390
Once again, we can expand our success dialogue and we can see the various steps

48
02:56.390 --> 02:59.000
that went through to create the mapping.

49
02:59.000 --> 03:05.000
Next, let's jump back over to the command line on Azure router one.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

49
02:59.000 --> 03:05.000
Next, let's jump back over to the command line on Azure router one.

50
03:05.000 --> 03:07.000
So we'll come back up here.

51
03:07.000 --> 03:14.000
We'll go to tools back to the SSH terminal and back into Azure router one.

52
03:14.000 --> 03:16.000
We'll go ahead and zoom in again.

53
03:16.000 --> 03:25.000
If we do a show VRF again, notice that now we have VRF 10 for VPN 10.

54
03:25.000 --> 03:29.000
Also, let's do a show IP route for VRF 10.

55
03:29.000 --> 03:33.000
And there's really two things that we want to focus on here.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

55
03:29.000 --> 03:33.000
And there's really two things that we want to focus on here.

56
03:33.000 --> 03:37.000
First are the BGP routes.

57
03:37.000 --> 03:46.000
The BGP routes for 10.20.0.0 that we're learning through the Azure virtual hub.

58
03:46.000 --> 03:55.790
And we have this OMP learned route, the 100.64.10.0, which is our local land

59
03:55.790 --> 03:58.000
for the on-prem network.

60
03:58.000 --> 04:02.000
So what we can do is actually verify connectivity.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

60
03:58.000 --> 04:02.000
So what we can do is actually verify connectivity.

61
04:02.000 --> 04:07.690
So let's jump over to a workstation that we have running on the on-prem network

62
04:07.690 --> 04:08.000
.

63
04:08.000 --> 04:13.000
So here on our workstation, let's go ahead and launch a command prompt.

64
04:13.000 --> 04:15.000
And let's verify reachability.

65
04:15.000 --> 04:21.000
Again, we'll just do a ping to our server that we deployed in our Azure vnet.

66
04:21.000 --> 04:26.000
Mine got the address 10.20.10.157.

67
04:26.000 --> 04:32.000
If you're not sure what IP address your VM got, you can verify this, of course,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

67
04:26.000 --> 04:32.000
If you're not sure what IP address your VM got, you can verify this, of course,

68
04:32.000 --> 04:36.000
through the details of that VM in the Azure portal.

69
04:36.000 --> 04:39.000
So let's go ahead and verify this ping.

70
04:39.000 --> 04:45.000
We can see that we do in fact have full reachability to this destination.

71
04:45.000 --> 04:50.540
So now we have full reachability from our on-prem network to the server that we

72
04:50.540 --> 04:53.000
deployed in Microsoft Azure.

73
04:53.000 --> 04:55.000
That being complete.

74
04:55.000 --> 04:58.000
That's everything that we need to cover in this skill.

75
04:58.000 --> 05:01.000
That leaves us with just the challenge.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

75
04:58.000 --> 05:01.000
That leaves us with just the challenge.

76
05:01.000 --> 05:07.240
So jump in, tackle that challenge, and I'll see you in the answers on the other

77
05:07.240 --> 05:08.000
side.