WEBVTT

1
00:00.000 --> 00:06.960
Now that we've seen how we can use our feature templates to configure these

2
00:06.960 --> 00:08.360
tunnels out to

3
00:08.360 --> 00:14.910
a secure internet gateway such as either Umbrella or Zscaler or maybe another

4
00:14.910 --> 00:16.580
option, what happens

5
00:16.580 --> 00:20.120
if we want to provide some sort of load sharing here?

6
00:20.120 --> 00:24.190
What if we have a connection to both and we would like our applications to

7
00:24.190 --> 00:24.920
choose the

8
00:24.920 --> 00:28.240
best path to get out to that particular provider?

9
00:28.240 --> 00:33.510
Well, the good news is, in a previous skill, we've already looked at a feature
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

9
00:28.240 --> 00:33.510
Well, the good news is, in a previous skill, we've already looked at a feature

10
00:33.510 --> 00:34.280
that does

11
00:34.280 --> 00:36.000
exactly that.

12
00:36.000 --> 00:39.800
Cloud on RAM for SaaS.

13
00:39.800 --> 00:45.200
And we can use that here to also choose the best path to go out to the internet

14
00:45.200 --> 00:45.960
through

15
00:45.960 --> 00:48.000
a secure internet gateway.

16
00:48.000 --> 00:51.200
There's just one little thing we have to change and that's what we're going to

17
00:51.200 --> 00:51.480
talk

18
00:51.480 --> 00:54.000
about in this video.

19
00:54.000 --> 00:58.380
So let's go ahead and take a look at how we can combine these two features of

20
00:58.380 --> 00:58.920
connecting

21
00:58.920 --> 01:07.680
doors to secure internet gateway and still using Cloud on RAM for SaaS.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

21
00:58.920 --> 01:07.680
doors to secure internet gateway and still using Cloud on RAM for SaaS.

22
01:07.680 --> 01:11.150
So let's just get a couple things out of the way before we get into combining

23
01:11.150 --> 01:11.480
these

24
01:11.480 --> 01:12.680
services.

25
01:12.680 --> 01:17.600
One of the requirements for this to really work properly is the STWAN edge

26
01:17.600 --> 01:18.480
routers should

27
01:18.480 --> 01:23.730
be configured to send all of the user traffic over to the secure internet

28
01:23.730 --> 01:24.720
gateway.

29
01:24.720 --> 01:31.720
Now when you do that, that's of course going to include all that SaaS traffic.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

29
01:24.720 --> 01:31.720
Now when you do that, that's of course going to include all that SaaS traffic.

30
01:31.720 --> 01:38.280
This is why we want to get Cloud on RAM for SaaS involved in the process.

31
01:38.280 --> 01:43.770
When we get it involved, we can then use that automatic path selection that we

32
01:43.770 --> 01:44.280
've talked

33
01:44.280 --> 01:49.940
about previously to be able to choose the best gateway tunnel to forward that

34
01:49.940 --> 01:51.000
application

35
01:51.000 --> 01:52.560
traffic on.

36
01:52.560 --> 01:54.420
That's our goal here.

37
01:54.420 --> 02:00.750
And another advantage is these tunnels could then also be used by our branch
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

37
01:54.420 --> 02:00.750
And another advantage is these tunnels could then also be used by our branch

38
02:00.750 --> 02:01.920
offices if

39
02:01.920 --> 02:04.800
that turns out to be their best path.

40
02:04.800 --> 02:11.400
So again, the overall idea behind this design is first we're still using the

41
02:11.400 --> 02:12.960
secure internet

42
02:12.960 --> 02:18.960
gateway, so we're going to be getting secure access to our applications.

43
02:18.960 --> 02:24.680
So we're still getting all the advantages of using something like umbrella.

44
02:24.680 --> 02:30.760
But then we're going to get the best path performance because we're using Cloud
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

44
02:24.680 --> 02:30.760
But then we're going to get the best path performance because we're using Cloud

45
02:30.760 --> 02:31.400
on RAM

46
02:31.400 --> 02:33.520
for SaaS.

47
02:33.520 --> 02:38.370
So essentially what we're saying is we're going to get all of the benefits of

48
02:38.370 --> 02:38.880
Cloud

49
02:38.880 --> 02:45.840
on RAM for SaaS while still using our secure internet gateway providers.

50
02:45.840 --> 02:52.360
And again, that could be umbrella or Zscaler or one of the generic solutions.

51
02:52.360 --> 02:56.180
And there's really only one caveat to this because we've been over this

52
02:56.180 --> 02:57.040
conversation

53
02:57.040 --> 03:02.320
before talking about Cloud on RAM for SaaS.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

53
02:57.040 --> 03:02.320
before talking about Cloud on RAM for SaaS.

54
03:02.320 --> 03:07.400
The caveat is how we're actually going to monitor this tunnel.

55
03:07.400 --> 03:13.600
In order for this to work, you're going to have to enable layer seven health

56
03:13.600 --> 03:14.520
checks on

57
03:14.520 --> 03:16.440
this tunnel.

58
03:16.440 --> 03:23.180
And the way we do that is to simply configure the tracker source address and a

59
03:23.180 --> 03:24.840
tunnel tracker.

60
03:24.840 --> 03:29.450
And where we configure that is in the security template or the feature template

61
03:29.450 --> 03:29.840
that we're

62
03:29.840 --> 03:33.080
using for our secure internet gateway.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

62
03:29.840 --> 03:33.080
using for our secure internet gateway.

63
03:33.080 --> 03:37.910
So let's just jump back over to SDWAN and take a look at where that actually

64
03:37.910 --> 03:39.080
gets configured

65
03:39.080 --> 03:41.300
in our feature template.

66
03:41.300 --> 03:46.720
So here we are in our feature template for the Cisco secure internet gateway.

67
03:46.720 --> 03:52.030
And what we need to do to complete this is first we need to put in a source IP

68
03:52.030 --> 03:52.960
address.

69
03:52.960 --> 03:57.050
So here in the source address, we'll put in one of our inside addresses that we

70
03:57.050 --> 03:57.400
want

71
03:57.400 --> 03:59.720
to use for the source.

72
03:59.720 --> 04:04.440
Then we click new tracker and here we have to provide some information.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

72
03:59.720 --> 04:04.440
Then we click new tracker and here we have to provide some information.

73
04:04.440 --> 04:07.360
So first we have to give it some sort of a name.

74
04:07.360 --> 04:10.480
We could just call it something like tunnel one.

75
04:10.480 --> 04:14.400
And then you also have to provide some sort of an end point.

76
04:14.400 --> 04:19.370
And here is where you would put the API URL of the end point that you're trying

77
04:19.370 --> 04:20.160
to check

78
04:20.160 --> 04:22.320
with this tracker.

79
04:22.320 --> 04:27.880
So this is how we would enable those layer seven health checks.

80
04:27.880 --> 04:33.160
In this video, we talked about combining two of our really cool features.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

80
04:27.880 --> 04:33.160
In this video, we talked about combining two of our really cool features.

81
04:33.160 --> 04:37.280
First using a secure internet gateway such as umbrella.

82
04:37.280 --> 04:43.850
And second using that together with cloud on ramp for SaaS to then dynamically

83
04:43.850 --> 04:44.320
choose

84
04:44.320 --> 04:46.560
the best path exit.

85
04:46.560 --> 04:51.600
Just remember, in order to do that, you do have to enable the layer seven

86
04:51.600 --> 04:52.720
health checks

87
04:52.720 --> 04:57.200
for the tunnel, which we do here with a tunnel tracker.

88
04:57.200 --> 05:02.560
So that covers everything that we need to discuss in this skill that leaves us
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

88
04:57.200 --> 05:02.560
So that covers everything that we need to discuss in this skill that leaves us

89
05:02.560 --> 05:03.280
with just

90
05:03.280 --> 05:04.560
the challenge.

91
05:04.560 --> 05:07.120
So go ahead and tackle that challenge.

92
05:07.120 --> 05:10.880
I'll see you in the solution video on the other side.

93
05:10.880 --> 05:20.880
[BLANK_AUDIO]