WEBVTT

1
00:00.000 --> 00:06.800
So our next step is going to be to create the template that we're going to be

2
00:06.800 --> 00:09.500
using for our Azure Edge routers.

3
00:09.500 --> 00:12.500
Now, we have a couple of goals with this template.

4
00:12.500 --> 00:18.000
The first is to not accidentally cut ourselves off from access to the Azure

5
00:18.000 --> 00:19.000
routers.

6
00:19.000 --> 00:22.000
So we need to make sure that we configure our interfaces properly,

7
00:22.000 --> 00:26.000
and then we also need to make sure that we configure VPN 10

8
00:26.000 --> 00:31.060
so that we can create that connection between our on-prem devices and the Azure
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

8
00:26.000 --> 00:31.060
so that we can create that connection between our on-prem devices and the Azure

9
00:31.060 --> 00:32.000
network.

10
00:32.000 --> 00:34.000
So let's go ahead and get started.

11
00:34.000 --> 00:37.000
We'll jump in to SD-WAN manager.

12
00:37.000 --> 00:43.000
So here in SD-WAN manager, let's go over to configuration.

13
00:43.000 --> 00:46.000
Let's go to templates.

14
00:46.000 --> 00:48.000
Now, we do have a few templates here to start with.

15
00:48.000 --> 00:54.330
We have our WAN Edge site 100 template, which is applied to the devices that

16
00:54.330 --> 00:55.000
are on-prem.

17
00:55.000 --> 01:00.550
We have AWS Edge router, which is actually applied to the routers connecting
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

17
00:55.000 --> 01:00.550
We have AWS Edge router, which is actually applied to the routers connecting

18
01:00.550 --> 01:02.000
out to AWS,

19
01:02.000 --> 01:04.000
that we configured in a previous skill.

20
01:04.000 --> 01:12.000
And we have AWS, Azure, and GCP templates that are used for cloud on-prem.

21
01:12.000 --> 01:16.000
Now, we're going to be making a new one here for the Azure Edge routers.

22
01:16.000 --> 01:20.000
But before we do that, we actually want to make a new feature template.

23
01:20.000 --> 01:22.000
So let's go over to feature templates.

24
01:22.000 --> 01:29.000
And what we want to do is make a new VPN zero template for site 30.

25
01:29.000 --> 01:36.110
Now, we have one here for site 100, and we can simply come over here, click on
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

25
01:29.000 --> 01:36.110
Now, we have one here for site 100, and we can simply come over here, click on

26
01:36.110 --> 01:37.000
the drop-down menu,

27
01:37.000 --> 01:41.000
and copy this one to create the template for site 30.

28
01:41.000 --> 01:44.000
So we'll simply rename it appropriately.

29
01:44.000 --> 01:49.000
We'll change the description appropriately, and we'll hit copy.

30
01:49.000 --> 01:53.000
Once that's done, we have this new site 30 down here at the bottom.

31
01:53.000 --> 01:55.000
We'll go into edit this.

32
01:55.000 --> 01:59.000
So here we can see, of course, it put in the correct template name and

33
01:59.000 --> 02:01.000
description that we put in when we copied it.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

33
01:59.000 --> 02:01.000
description that we put in when we copied it.

34
02:01.000 --> 02:04.000
We see that the VPN is in fact set to zero.

35
02:04.000 --> 02:09.730
There's not really too much else configured in here, except for a default route

36
02:09.730 --> 02:10.000
.

37
02:10.000 --> 02:15.000
So if we scroll down here to the IPv4 routes, we see that we have a default.

38
02:15.000 --> 02:20.000
This is copied, therefore, it's not going to have the correct next hop.

39
02:20.000 --> 02:24.000
So what we need to do is click on edit over here.

40
02:24.000 --> 02:29.000
Then we have to hit the one next hop to edit the next hop.

41
02:29.000 --> 02:33.000
We can see that this is currently set for the on-prem routers.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

41
02:29.000 --> 02:33.000
We can see that this is currently set for the on-prem routers.

42
02:33.000 --> 02:38.000
We need this to be 10.30.1.1.

43
02:38.000 --> 02:42.000
That would be Microsoft's Internet Gateway on VLAN 1.

44
02:42.000 --> 02:48.000
So let's save the changes, save these changes, and update the template.

45
02:48.000 --> 02:53.380
Now that we have our feature template, let's go back to device templates, and

46
02:53.380 --> 02:56.000
we'll say create template from feature template.

47
02:56.000 --> 03:02.000
First thing we need to do is choose the C8000V for the device role.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

47
02:56.000 --> 03:02.000
First thing we need to do is choose the C8000V for the device role.

48
03:02.000 --> 03:04.000
It's SD-WAN edge.

49
03:04.000 --> 03:09.000
For the template name, let's call it Azure Edge Router.

50
03:09.000 --> 03:15.000
For the description, we'll simply say template for Azure Edge devices.

51
03:15.000 --> 03:22.300
Now as far as Cisco system and Cisco logging here under basic information, we

52
03:22.300 --> 03:24.000
can leave these at their default.

53
03:24.000 --> 03:26.000
So let's scroll down a little bit.

54
03:26.000 --> 03:31.510
Now we do want to set something here on the Cisco AAA, because if we don't set
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

54
03:26.000 --> 03:31.510
Now we do want to set something here on the Cisco AAA, because if we don't set

55
03:31.510 --> 03:37.000
this, it's going to override what Azure is already setting on these routers.

56
03:37.000 --> 03:40.000
So we want to make sure we set this to something that we know.

57
03:40.000 --> 03:45.410
So on the dropdown, we're going to choose local user, which is a template that

58
03:45.410 --> 03:47.000
we've used previously.

59
03:47.000 --> 03:52.040
It simply makes a local account called admin with our password that we've been

60
03:52.040 --> 03:59.000
using throughout the course of one, two, three, four, capital Q, capital W, ER.

61
03:59.000 --> 04:01.000
So that way we can still log into the device.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

61
03:59.000 --> 04:01.000
So that way we can still log into the device.

62
04:01.000 --> 04:05.000
Then let's come down here to VPN zero.

63
04:05.000 --> 04:10.190
So for VPN zero, the first thing we want to do here, of course, is choose the

64
04:10.190 --> 04:16.000
template that we just created the VPN zero site 30 for the interface.

65
04:16.000 --> 04:21.000
We want to choose this template called gigabit one DHCP.

66
04:21.000 --> 04:24.000
This template doesn't really have much in it.

67
04:24.000 --> 04:31.100
It is simply setting interface gigabit ethernet one to pull it address from
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

67
04:24.000 --> 04:31.100
It is simply setting interface gigabit ethernet one to pull it address from

68
04:31.100 --> 04:32.000
DHCP.

69
04:32.000 --> 04:36.000
Now we also, of course, have VPN 512.

70
04:36.000 --> 04:40.000
We're simply going to set this to the default Azure template.

71
04:40.000 --> 04:42.000
We're not going to actually put an interface on here.

72
04:42.000 --> 04:47.000
You, of course, can if you like, but we pretty much have out of band access to

73
04:47.000 --> 04:50.000
these routers through Microsoft Azure.

74
04:50.000 --> 04:54.670
So we don't really necessarily need an out of band ethernet interface, but you

75
04:54.670 --> 04:57.000
could certainly put one here if you want.

76
04:57.000 --> 05:00.990
The other thing we want to configure, though, is coming down here to the
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

76
04:57.000 --> 05:00.990
The other thing we want to configure, though, is coming down here to the

77
05:00.990 --> 05:02.000
service VPNs.

78
05:02.000 --> 05:05.000
We want to add a service VPN.

79
05:05.000 --> 05:11.120
Specifically, we want to add VPN 10, which is already created because it's

80
05:11.120 --> 05:14.000
being used in the on-prem routers.

81
05:14.000 --> 05:16.000
So we'll go ahead and click VPN 10.

82
05:16.000 --> 05:17.000
We'll add this.

83
05:17.000 --> 05:19.000
We'll hit next.

84
05:19.000 --> 05:23.000
Then we have to add a Cisco VPN interface ethernet.

85
05:23.000 --> 05:27.000
And this is going to be on the gigabit to interface.

86
05:27.000 --> 05:31.000
This, again, is going to be pulling it to address from DHCP.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

86
05:27.000 --> 05:31.000
This, again, is going to be pulling it to address from DHCP.

87
05:31.000 --> 05:33.000
So let's go ahead and hit add.

88
05:33.000 --> 05:36.000
That's everything we should have to change in this template.

89
05:36.000 --> 05:38.000
So let's hit create.

90
05:38.000 --> 05:42.000
Now that the templates created, of course, we have to apply it to our router.

91
05:42.000 --> 05:47.940
So on the Azure edge router, we'll click on the menu and we'll say to attach

92
05:47.940 --> 05:49.000
devices.

93
05:49.000 --> 05:56.000
We'll choose Azure R1, add it to the list, and hit attach.

94
05:56.000 --> 05:59.000
Here, of course, we have to fill in the appropriate information.

95
05:59.000 --> 06:04.650
Note that it's already pulled the information off of the router that we
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

95
05:59.000 --> 06:04.650
Note that it's already pulled the information off of the router that we

96
06:04.650 --> 06:07.000
configured with our initial script.

97
06:07.000 --> 06:10.000
And we're going to keep that information the same.

98
06:10.000 --> 06:14.820
So we just have to put it in again so it understands what to do when it applies

99
06:14.820 --> 06:16.000
the template.

100
06:16.000 --> 06:21.000
New piece of information, though, we do have to put it in Site 30.

101
06:21.000 --> 06:25.130
Once we've filled in the correct information, our status goes to the green

102
06:25.130 --> 06:28.000
check mark, and we hit next.

103
06:28.000 --> 06:35.000
Configure devices, and it'll push that template out to Azure R1.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

103
06:28.000 --> 06:35.000
Configure devices, and it'll push that template out to Azure R1.

104
06:35.000 --> 06:41.710
After a few moments, we see that the template has been successfully attached to

105
06:41.710 --> 06:43.000
Azure R1.

106
06:43.000 --> 06:49.000
In this video, we created and applied our template to Azure R1.

107
06:49.000 --> 06:53.560
Part of that template, of course, is configuring our VPN zero interface, and

108
06:53.560 --> 06:59.000
then the other part was configuring the service VPN, VPN 10.

109
06:59.000 --> 07:04.530
Next up, let's jump in and make sure that VPN 10 is working the way we want it
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

109
06:59.000 --> 07:04.530
Next up, let's jump in and make sure that VPN 10 is working the way we want it

110
07:04.530 --> 07:05.000
to.