WEBVTT

1
00:00.000 --> 00:08.400
So in this video, our goal is to get our Azure network ready to go to deploy

2
00:08.400 --> 00:09.040
the catalyst

3
00:09.040 --> 00:11.040
8000V.

4
00:11.040 --> 00:16.380
Specifically, we're going to need a virtual network or a VNet, then we're going

5
00:16.380 --> 00:16.960
to need

6
00:16.960 --> 00:21.610
at least two subnets inside of that VNet because we're going to have two

7
00:21.610 --> 00:22.480
interfaces

8
00:22.480 --> 00:24.720
on our catalyst 8000V.

9
00:24.720 --> 00:30.220
Now, the reason I say at a minimum, you could of course add more subnets and
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

9
00:24.720 --> 00:30.220
Now, the reason I say at a minimum, you could of course add more subnets and

10
00:30.220 --> 00:31.720
add more interfaces

11
00:31.720 --> 00:33.880
to the catalyst 8000.

12
00:33.880 --> 00:36.040
We're just going to be doing two for our example.

13
00:36.040 --> 00:39.770
That's what we're going to need as a minimum, the forward traffic between two

14
00:39.770 --> 00:40.640
interfaces,

15
00:40.640 --> 00:42.840
but you could of course have more.

16
00:42.840 --> 00:46.890
The other thing we're going to do here is we're going to deploy a workstation

17
00:46.890 --> 00:47.680
or what's

18
00:47.680 --> 00:52.400
going to be our jump box to actually act as a target inside of the Azure

19
00:52.400 --> 00:53.360
network.

20
00:53.360 --> 00:59.800
So let's go ahead and jump into the dashboard and get started with those tasks.

21
00:59.800 --> 01:04.840
So starting off here on the Azure dashboard, the first thing we want to do is
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

21
00:59.800 --> 01:04.840
So starting off here on the Azure dashboard, the first thing we want to do is

22
01:04.840 --> 01:05.800
go over to

23
01:05.800 --> 01:07.520
virtual networks.

24
01:07.520 --> 01:10.360
So let's go over here to virtual networks.

25
01:10.360 --> 01:12.760
As you can see, we don't currently have any.

26
01:12.760 --> 01:15.920
So we're going to say to create a virtual network.

27
01:15.920 --> 01:19.960
The first thing we have to do is choose a subscription, which as you can see, I

28
01:19.960 --> 01:20.480
've already

29
01:20.480 --> 01:25.730
selected my subscription here, and then we also need to choose a resource group

30
01:25.730 --> 01:25.880
.

31
01:25.880 --> 01:30.280
This network watcher resource group that's created here is something that's
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

31
01:25.880 --> 01:30.280
This network watcher resource group that's created here is something that's

32
01:30.280 --> 01:31.480
created automatically

33
01:31.480 --> 01:33.000
by Azure.

34
01:33.000 --> 01:35.520
This isn't something you're normally going to want to use.

35
01:35.520 --> 01:40.020
If we click on this dropdown, we can see that I already have another resource

36
01:40.020 --> 01:41.080
group,

37
01:41.080 --> 01:42.560
SD win.

38
01:42.560 --> 01:44.760
That's the one I intend to use.

39
01:44.760 --> 01:49.990
It's also important because I've had a couple quotas increased in that resource

40
01:49.990 --> 01:50.800
group that

41
01:50.800 --> 01:52.160
we're going need.

42
01:52.160 --> 01:56.430
So I'm going to stick with that resource group that already has my increased

43
01:56.430 --> 01:57.280
quotas.

44
01:57.280 --> 02:01.720
The next thing we need to do, of course, is give this virtual network a name.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

44
01:57.280 --> 02:01.720
The next thing we need to do, of course, is give this virtual network a name.

45
02:01.720 --> 02:03.920
We'll just call it SD win.

46
02:03.920 --> 02:07.280
We don't have to give it anything fancy for the region.

47
02:07.280 --> 02:12.720
It's actually defaulting to us East, which is appropriate for my location.

48
02:12.720 --> 02:17.160
Of course, you would want to choose whatever region is closest to you.

49
02:17.160 --> 02:19.400
Let's go ahead and hit next.

50
02:19.400 --> 02:23.840
Under security here, you could, of course, enable any of these features you

51
02:23.840 --> 02:24.560
want to.

52
02:24.560 --> 02:28.220
I'm not going to be enabling these because we're just working with a lab

53
02:28.220 --> 02:29.200
environment.

54
02:29.200 --> 02:33.890
However, if you need these in production, of course, go ahead and able these
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

54
02:29.200 --> 02:33.890
However, if you need these in production, of course, go ahead and able these

55
02:33.890 --> 02:34.480
here.

56
02:34.480 --> 02:36.640
We're just going to go ahead and hit next.

57
02:36.640 --> 02:41.860
And here's where we're going to choose our address space and create our subnets

58
02:41.860 --> 02:41.880
.

59
02:41.880 --> 02:46.330
So the first thing we want to do here is for the address space, we want to

60
02:46.330 --> 02:47.240
change this,

61
02:47.240 --> 02:51.640
like we said, to 10 dot 30 dot zero zero.

62
02:51.640 --> 02:54.520
And that's going to be a slash 16.

63
02:54.520 --> 02:57.840
The next thing we're going to do is create our subnets.

64
02:57.840 --> 03:01.120
Now notice it's already created a subnet here.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

64
02:57.840 --> 03:01.120
Now notice it's already created a subnet here.

65
03:01.120 --> 03:04.320
That's 10 dot 30 dot zero slash 24.

66
03:04.320 --> 03:07.760
Well, we're not actually going to use that subnet.

67
03:07.760 --> 03:12.470
You could leave it here if you want to, or you can just delete it since we're

68
03:12.470 --> 03:13.120
not going

69
03:13.120 --> 03:14.640
to use it.

70
03:14.640 --> 03:18.380
Then we're going to add our own subnet for the name.

71
03:18.380 --> 03:22.720
This first one will just call it subnet one.

72
03:22.720 --> 03:27.360
It's going to come out of the address range of the 10 dot 30 dot zero dot zero

73
03:27.360 --> 03:29.160
slash 16.

74
03:29.160 --> 03:36.960
But then its starting address is going to be 10 dot 30 dot one dot zero slash
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

74
03:29.160 --> 03:36.960
But then its starting address is going to be 10 dot 30 dot one dot zero slash

75
03:36.960 --> 03:38.080
24.

76
03:38.080 --> 03:41.920
Now there's of course other things you can configure here further down.

77
03:41.920 --> 03:46.280
One of the things that we'll be configuring a little bit later is a route table

78
03:46.280 --> 03:46.880
, but we

79
03:46.880 --> 03:50.160
have to build a couple other components first for now.

80
03:50.160 --> 03:52.240
Let's just hit add.

81
03:52.240 --> 03:54.800
And then we're going to create our second subnet.

82
03:54.800 --> 04:01.120
We'll simply make this one subnet 10 and its starting address is going to be 10
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

82
03:54.800 --> 04:01.120
We'll simply make this one subnet 10 and its starting address is going to be 10

83
04:01.120 --> 04:02.000
dot 30

84
04:02.000 --> 04:04.800
dot 10 dot zero slash 24.

85
04:04.800 --> 04:07.840
This is the one that we're going to be using for our workstation.

86
04:07.840 --> 04:13.210
This is essentially the inside interface of the catalyst eight thousand V and

87
04:13.210 --> 04:13.600
we're going

88
04:13.600 --> 04:18.700
to be using subnet one as the outside interface that's going to be connected

89
04:18.700 --> 04:20.200
out to the internet.

90
04:20.200 --> 04:22.600
So now let's go ahead and hit add.

91
04:22.600 --> 04:23.600
We'll hit next.

92
04:23.600 --> 04:26.560
Now if you want you can put tags on this.

93
04:26.560 --> 04:28.440
We're not going to worry about tags right now.

94
04:28.440 --> 04:30.700
We'll just hit next again.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

94
04:28.440 --> 04:30.700
We'll just hit next again.

95
04:30.700 --> 04:34.440
It's going to present us with the review page looking over this.

96
04:34.440 --> 04:35.440
It looks correct.

97
04:35.440 --> 04:37.040
Our resource group is right.

98
04:37.040 --> 04:38.080
The name is right.

99
04:38.080 --> 04:39.640
The region is right.

100
04:39.640 --> 04:43.280
We're not enabling any of our security features for this.

101
04:43.280 --> 04:48.440
And then our address space and our two subnets are configured properly.

102
04:48.440 --> 04:52.420
So as long as everything here looks okay, we're going to go ahead and hit

103
04:52.420 --> 04:53.120
create.

104
04:53.120 --> 04:56.360
We get a message here that deployment is in progress.

105
04:56.360 --> 05:01.520
We get a pop up message telling us that the resource was created successfully.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

105
04:56.360 --> 05:01.520
We get a pop up message telling us that the resource was created successfully.

106
05:01.520 --> 05:06.860
So if we go back to virtual networks, we can see that this SD WAN virtual

107
05:06.860 --> 05:07.840
network now

108
05:07.840 --> 05:09.480
exists.

109
05:09.480 --> 05:13.480
So now that our network is built, let's go ahead and deploy what's going to be

110
05:13.480 --> 05:13.920
Azure

111
05:13.920 --> 05:18.600
workstation one or basically just a virtual machine.

112
05:18.600 --> 05:21.560
So for this, we go over here to virtual machines.

113
05:21.560 --> 05:25.040
Again, we don't have any yet so we can hit create.

114
05:25.040 --> 05:28.880
We can either do the create in the main window here or of course, there's also

115
05:28.880 --> 05:29.720
a create right

116
05:29.720 --> 05:33.080
up here we can use they both do the same thing.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

116
05:29.720 --> 05:33.080
up here we can use they both do the same thing.

117
05:33.080 --> 05:36.560
We're going to say to create an Azure virtual machine.

118
05:36.560 --> 05:39.120
First thing we need to do of course is select our resource group.

119
05:39.120 --> 05:41.560
So we'll select SD WAN.

120
05:41.560 --> 05:44.440
We need to give the virtual machine a name.

121
05:44.440 --> 05:48.040
We'll just make this Azure workstation one for the region.

122
05:48.040 --> 05:52.720
Again, I'm going to leave it as us east for the availability zone.

123
05:52.720 --> 05:57.160
We could choose one or select zone options, but we're just going to let it do

124
05:57.160 --> 05:58.120
self selected

125
05:58.120 --> 05:59.680
zones.

126
05:59.680 --> 06:05.490
So now we'll scroll down for the image will select Ubuntu server 22.04 long
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

126
05:59.680 --> 06:05.490
So now we'll scroll down for the image will select Ubuntu server 22.04 long

127
06:05.490 --> 06:06.840
term support.

128
06:06.840 --> 06:09.400
The architecture is going to be X 64.

129
06:09.400 --> 06:10.400
That's fine.

130
06:10.400 --> 06:16.040
Now the size here you might know is going to a rather large machine by default.

131
06:16.040 --> 06:19.400
We don't need something that large just for this box.

132
06:19.400 --> 06:23.180
So we're going to actually select this other one here that I've recently used,

133
06:23.180 --> 06:23.660
which is

134
06:23.660 --> 06:25.240
considerably cheaper.

135
06:25.240 --> 06:29.280
Again, it's just one CPU, one gig of memory.

136
06:29.280 --> 06:34.040
And that's of course way more than enough to run our Ubuntu server.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

136
06:29.280 --> 06:34.040
And that's of course way more than enough to run our Ubuntu server.

137
06:34.040 --> 06:35.880
So we'll scroll down here.

138
06:35.880 --> 06:41.020
It's going to ask us about our username and a public key structure.

139
06:41.020 --> 06:44.440
If you already had a key pair, you could of course use it here.

140
06:44.440 --> 06:46.320
I personally don't have one yet.

141
06:46.320 --> 06:49.720
So I'm going to let it generate a new key pair, but I'm going to give it sort

142
06:49.720 --> 06:50.200
of a more

143
06:50.200 --> 06:54.640
generic name than being specifically for the workstation.

144
06:54.640 --> 06:58.640
I'm actually just going to name this as your key.

145
06:58.640 --> 07:00.760
And then we can use it for our router as well.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

145
06:58.640 --> 07:00.760
And then we can use it for our router as well.

146
07:00.760 --> 07:02.600
Once it's created.

147
07:02.600 --> 07:07.220
Next it's going to ask us what inbound port rules to use default is just to

148
07:07.220 --> 07:09.040
allow SSH.

149
07:09.040 --> 07:11.320
And that's going to be fine.

150
07:11.320 --> 07:12.320
So let's hit next.

151
07:12.320 --> 07:14.040
Take a look at our disks.

152
07:14.040 --> 07:16.280
Here we can choose the disk size we're going to use.

153
07:16.280 --> 07:19.600
Of course, 30 gigs is way more than enough for Linux.

154
07:19.600 --> 07:21.960
We can choose the disk type here.

155
07:21.960 --> 07:25.400
Of course, we can choose either standard SSD.

156
07:25.400 --> 07:29.200
There's also a premium SSD or just a standard hard drive.

157
07:29.200 --> 07:34.040
Again, standard SSD is going to be perfectly fine for this image.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

157
07:29.200 --> 07:34.040
Again, standard SSD is going to be perfectly fine for this image.

158
07:34.040 --> 07:38.600
We can tell it to delete it when we delete the VM or we can turn that off.

159
07:38.600 --> 07:41.750
And of course, there's some other key management and such we can do here as

160
07:41.750 --> 07:42.240
well.

161
07:42.240 --> 07:45.920
But overall, this is going to be perfectly fine for our needs.

162
07:45.920 --> 07:48.760
So let's hit next and go to networking.

163
07:48.760 --> 07:53.720
So for the virtual network, it has already chosen SD WAN, which is fine.

164
07:53.720 --> 07:56.040
That's our only virtual network right now.

165
07:56.040 --> 08:00.000
However, this is not the subnet that we wish to put it on.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

166
08:00.000 --> 08:03.680
So what we're going to do is we're going to select subnet 10.

167
08:03.680 --> 08:06.840
If we want, we can choose a public IP here.

168
08:06.840 --> 08:11.480
If we had one already saved, again, I don't have one already saved.

169
08:11.480 --> 08:15.480
So we're just going to let Azure make a new one for us here.

170
08:15.480 --> 08:18.560
And then we can choose which ports are allowed through.

171
08:18.560 --> 08:22.750
Once again, we see here that the defaults are to put on a basic security group

172
08:22.750 --> 08:23.520
and allow

173
08:23.520 --> 08:28.000
only the selected ports defaulting to SSH.

174
08:28.000 --> 08:29.600
That's going to be fine.

175
08:29.600 --> 08:35.450
We can also tell it to delete the public IP and the NIC or the network card
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

175
08:29.600 --> 08:35.450
We can also tell it to delete the public IP and the NIC or the network card

176
08:35.450 --> 08:36.640
when the VM

177
08:36.640 --> 08:37.640
is deleted.

178
08:37.640 --> 08:39.560
Now, you may not always want to do this.

179
08:39.560 --> 08:42.370
If you know you're going to delete it and recreate it and things like that and

180
08:42.370 --> 08:42.760
you want

181
08:42.760 --> 08:46.840
it to still have the same addresses, then you wouldn't want to do that.

182
08:46.840 --> 08:50.440
However, in this case, I'm building it just for this lab.

183
08:50.440 --> 08:55.800
So when I delete it, I actually do want it to delete the network card and the

184
08:55.800 --> 08:56.400
public

185
08:56.400 --> 08:57.880
IP address.

186
08:57.880 --> 09:01.080
Otherwise, of course, you get billed for them.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

186
08:57.880 --> 09:01.080
Otherwise, of course, you get billed for them.

187
09:01.080 --> 09:04.040
These other choices we don't really have to worry too much about for a lab.

188
09:04.040 --> 09:07.760
We're not going to be doing accelerated networking or load balancing.

189
09:07.760 --> 09:10.840
So now we can just hit review and create.

190
09:10.840 --> 09:14.470
So we see here it says it passed validation, which means it doesn't see

191
09:14.470 --> 09:15.640
anything incorrect

192
09:15.640 --> 09:17.720
with our configuration or anything.

193
09:17.720 --> 09:20.240
So let's go ahead and hit create.

194
09:20.240 --> 09:23.850
Here it's telling us that since we're generating a new key pair, we're going to

195
09:23.850 --> 09:24.720
have to download

196
09:24.720 --> 09:28.040
the private key and create the resource.

197
09:28.040 --> 09:29.400
So we're going to do this.

198
09:29.400 --> 09:31.720
And when you do it, make sure you keep that private key.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

198
09:29.400 --> 09:31.720
And when you do it, make sure you keep that private key.

199
09:31.720 --> 09:36.640
We'll need it for connecting in to our workstation and our router.

200
09:36.640 --> 09:40.400
So we'll just say download private key and create the resource.

201
09:40.400 --> 09:45.400
We can see here it just downloaded that Azure underscore key that I told it to

202
09:45.400 --> 09:45.640
name it.

203
09:45.640 --> 09:48.360
And it's now deploying the virtual machine.

204
09:48.360 --> 09:52.250
So now that it's been successfully deployed, we can simply click here to go to

205
09:52.250 --> 09:53.080
the resource.

206
09:53.080 --> 09:55.080
We can see that this is up and running.

207
09:55.080 --> 09:58.800
So now we should be able to connect to it through SSH.

208
09:58.800 --> 10:03.740
So we can see here that using the outside public address of the workstation as
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

208
09:58.800 --> 10:03.740
So we can see here that using the outside public address of the workstation as

209
10:03.740 --> 10:04.320
well as

210
10:04.320 --> 10:09.680
our key, we can in fact, SSH into our workstation.

211
10:09.680 --> 10:13.760
And it's fully functional except for one small problem.

212
10:13.760 --> 10:18.320
It has an address of 10 dot 30 dot 10 dot four.

213
10:18.320 --> 10:23.040
We really want this to be 10 dot 30 dot 10 dot 100.

214
10:23.040 --> 10:26.560
So let's jump back over into Azure.

215
10:26.560 --> 10:31.410
And if we look here at the details of the virtual machine, we can actually see
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

215
10:26.560 --> 10:31.410
And if we look here at the details of the virtual machine, we can actually see

216
10:31.410 --> 10:32.160
right here

217
10:32.160 --> 10:36.840
that the private address is in fact that 10 dot 30 dot 10 dot four.

218
10:36.840 --> 10:42.330
So what we want to do is come over here to network settings, select this

219
10:42.330 --> 10:43.680
network card,

220
10:43.680 --> 10:51.000
select our IP configuration and change this from dynamic to static and set this

221
10:51.000 --> 10:51.400
to dot

222
10:51.400 --> 10:52.400
100.

223
10:52.400 --> 10:55.000
We'll go ahead and hit save.

224
10:55.000 --> 10:58.840
So we can see here at the bottom that this has successfully been applied.

225
10:58.840 --> 11:02.080
So let's jump back over to our workstation.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

225
10:58.840 --> 11:02.080
So let's jump back over to our workstation.

226
11:02.080 --> 11:06.550
Now of course, I did have to reconnect to this workstation because its address

227
11:06.550 --> 11:08.040
did change,

228
11:08.040 --> 11:13.190
but after the reconnection, notice that the address is now 10 dot 30 dot 10 dot

229
11:13.190 --> 11:14.160
100, which

230
11:14.160 --> 11:15.960
is our intention.

231
11:15.960 --> 11:19.600
Now the last thing we want to do is verify its routing real quick.

232
11:19.600 --> 11:25.180
So let's do a route minus N. Notice, however, that the route tool is not

233
11:25.180 --> 11:26.560
installed by default.

234
11:26.560 --> 11:27.880
So let's go ahead and add it.

235
11:27.880 --> 11:30.360
They tell you right here how to do so.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

235
11:27.880 --> 11:30.360
They tell you right here how to do so.

236
11:30.360 --> 11:35.310
We simply do an after install for net tools, let it go ahead and download those

237
11:35.310 --> 11:36.160
and install

238
11:36.160 --> 11:37.640
them.

239
11:37.640 --> 11:42.150
And then we can do our route minus N. What we're looking here for specifically

240
11:42.150 --> 11:43.000
is the default

241
11:43.000 --> 11:44.200
gateway.

242
11:44.200 --> 11:49.830
We have a default gateway here set to 10 dot 30 dot 10 dot one, which is

243
11:49.830 --> 11:51.240
Microsoft's internet

244
11:51.240 --> 11:52.480
gateway.

245
11:52.480 --> 11:56.600
That's what's letting this subnet get out to the internet.

246
11:56.600 --> 12:01.460
So this is set up correctly, but this is also going to have to be changed as we
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

246
11:56.600 --> 12:01.460
So this is set up correctly, but this is also going to have to be changed as we

247
12:01.460 --> 12:02.200
move through

248
12:02.200 --> 12:07.680
this skill and we get our catalyst 8000 V online.

249
12:07.680 --> 12:13.960
In this video, what we did is we created our virtual network in Microsoft Azure

250
12:13.960 --> 12:14.040
.

251
12:14.040 --> 12:18.450
We created our two subnets within that virtual network, making sure they had

252
12:18.450 --> 12:19.560
the appropriate

253
12:19.560 --> 12:20.880
address space.

254
12:20.880 --> 12:26.430
Then, of course, once that was set up, we deployed our host here or our work

255
12:26.430 --> 12:27.320
station,

256
12:27.320 --> 12:30.040
ensured that it got the proper IP address.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

256
12:27.320 --> 12:30.040
ensured that it got the proper IP address.

257
12:30.040 --> 12:34.310
And then, of course, verified that everything was working as far as internet

258
12:34.310 --> 12:34.960
access and

259
12:34.960 --> 12:38.320
being able to gain access to the workstation.

260
12:38.320 --> 12:41.980
Now that this is all set up and running, well, now we're ready to deploy the

261
12:41.980 --> 12:43.160
catalyst 8000

262
12:43.160 --> 12:46.960
V. And that's exactly what we're going to do in the next video.

263
12:46.960 --> 12:56.020
[BLANK_AUDIO]