WEBVTT

1
00:00.000 --> 00:03.080
For our game plan for implementing our layer 2 VPNs,

2
00:03.080 --> 00:07.360
I know we currently have a couple different IPsec VPN tunnels currently in

3
00:07.360 --> 00:07.680
place.

4
00:07.680 --> 00:09.720
So I recommend our first step is,

5
00:09.720 --> 00:12.780
let's go ahead and do a little bit of cleanup so that everything we're going to

6
00:12.780 --> 00:13.360
configure

7
00:13.360 --> 00:16.600
is going to be directly related to the layer 2 VPNs,

8
00:16.600 --> 00:20.240
and we're not leveraging or using some existing configuration.

9
00:20.240 --> 00:24.440
So for our first step, it'll be some cleanup and verify our current existing

10
00:24.440 --> 00:28.880
topology, including the reachability for each of the sites using the virtual

11
00:28.880 --> 00:31.280
IP address associated with the T0 gateway.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

11
00:28.880 --> 00:31.280
IP address associated with the T0 gateway.

12
00:31.280 --> 00:36.000
And for this set of videos, let's go ahead and use site 3 as the server for the

13
00:36.000 --> 00:36.360
LTV

14
00:36.360 --> 00:40.880
PM and we'll use site 4 as our client for the LTV PM.

15
00:40.880 --> 00:45.360
And then once we've done a single client, you simply repeat that process as you

16
00:45.360 --> 00:45.520
add

17
00:45.520 --> 00:49.480
another LTV PM session to get another client and another client, etc.

18
00:49.480 --> 00:54.480
So for the demo, we'll go ahead and use site 3 as our LTV PM server and site 4

19
00:54.480 --> 00:57.160
and a T0 gateway there as our LTV PM client.

20
00:57.360 --> 01:01.120
So as far as our game plan goes for our T0 at site 3,
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

20
00:57.360 --> 01:01.120
So as far as our game plan goes for our T0 at site 3,

21
01:01.120 --> 01:05.720
we want to go ahead and create two VPN services and associate them with the T0

22
01:05.720 --> 01:06.360
router here.

23
01:06.360 --> 01:09.520
And the question might come up, well, why are we going to create VPN services?

24
01:09.520 --> 01:12.510
If we're only implementing layer two VPNs, the answer is because behind the

25
01:12.510 --> 01:12.960
scenes,

26
01:12.960 --> 01:14.480
we're still using IPsec.

27
01:14.480 --> 01:18.250
So we're going to set up and enable IPsec VPN services here on the T0 gateway

28
01:18.250 --> 01:19.120
and also

29
01:19.120 --> 01:23.480
L2 VPN services and specifically server.

30
01:23.480 --> 01:26.200
So it'll last that when we enable the L2 VPN service.

31
01:26.400 --> 01:28.920
Do we want to go ahead and set this up as a server or a client?

32
01:28.920 --> 01:33.730
And so we'll enable those two services, one for IPsec and one for LTV PM here
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

32
01:28.920 --> 01:33.730
And so we'll enable those two services, one for IPsec and one for LTV PM here

33
01:33.730 --> 01:34.000
on the

34
01:34.000 --> 01:35.880
red site three tier zero gateway.

35
01:35.880 --> 01:39.480
And then once we add the VPN services enabled, we'll then go ahead and create

36
01:39.480 --> 01:41.120
our L2 VPN

37
01:41.120 --> 01:43.440
session over to site four.

38
01:43.440 --> 01:46.020
And if we were going to bring in additional clients, we could repeat that

39
01:46.020 --> 01:46.520
process

40
01:46.520 --> 01:50.520
and create another LTV PM session to site five and site six, etc, etc.

41
01:50.520 --> 01:54.680
So once we've set up our site three as an L2 VPN server, we can then go ahead

42
01:54.680 --> 01:54.720
and

43
01:54.720 --> 01:55.840
start working on our clients.

44
01:55.840 --> 01:59.280
So we'll say our next step is going to be the T zero gateway in our topology

45
01:59.280 --> 02:00.200
here at
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

45
01:59.280 --> 02:00.200
here at

46
02:00.200 --> 02:04.890
site four and over here at site four, we'll also need to enable VPN services,

47
02:04.890 --> 02:05.080
one

48
02:05.080 --> 02:11.000
for IPsec and one for L2 VPN, except this time at site four, we're going to go

49
02:11.000 --> 02:11.320
ahead

50
02:11.320 --> 02:14.080
and set it up as a client when we enable that service.

51
02:14.080 --> 02:18.640
And then once we have the VPN services enabled here at this T zero gateway,

52
02:18.640 --> 02:18.840
just

53
02:19.040 --> 02:24.140
like we did on the server, we're going to create an L2 VPN session to S three,

54
02:24.140 --> 02:24.360
which

55
02:24.360 --> 02:25.280
is our server.

56
02:25.280 --> 02:28.940
Now, part of the cool thing about setting up the client is that we can copy and

57
02:28.940 --> 02:29.280
paste

58
02:29.280 --> 02:33.970
a lot of the configuration information directly off of the L2 VPN server and
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

58
02:29.280 --> 02:33.970
a lot of the configuration information directly off of the L2 VPN server and

59
02:33.970 --> 02:34.280
paste

60
02:34.280 --> 02:38.640
it in at the L2 VPN client and it makes the configuration go a lot quicker.

61
02:38.640 --> 02:41.970
And then once we have our server in place and we have at least one client in

62
02:41.970 --> 02:42.280
place,

63
02:42.280 --> 02:46.760
we didn't want to go ahead and create our segments and link them and associate

64
02:46.960 --> 02:48.800
them with the L2 VPN service.

65
02:48.800 --> 02:51.800
So let me go ahead and put some dividing lines here to make it a little bit

66
02:51.800 --> 02:52.000
more

67
02:52.000 --> 02:54.080
clean and I'll also add some color.

68
02:54.080 --> 02:59.080
So this is going to be site three, which is my red site here in my topology.

69
02:59.080 --> 03:03.400
And our client is at site four, so I'll put a little color code there as well.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

69
02:59.080 --> 03:03.400
And our client is at site four, so I'll put a little color code there as well.

70
03:03.400 --> 03:06.360
And then for the three segments, I'm going to go ahead and put a little yellow

71
03:06.360 --> 03:06.600
mark

72
03:06.600 --> 03:08.320
there to represent the individual segment.

73
03:08.320 --> 03:11.970
So we'll at site three, create a segment and associate it with the VPN service

74
03:11.970 --> 03:12.280
at

75
03:12.280 --> 03:13.600
site four, create a segment.

76
03:13.800 --> 03:18.360
And as far as a big picture view, let's also use this addressing space of 1099

77
03:18.360 --> 03:23.240
zero for the segments that are all linked and associated with that L2 VPN

78
03:23.240 --> 03:23.720
service.

79
03:23.720 --> 03:27.880
And that way, if we had clients here or here or at additional sites that are

80
03:27.880 --> 03:31.480
connected to a segment that's associated with the layer two VPN service, all
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

80
03:27.880 --> 03:31.480
connected to a segment that's associated with the layer two VPN service, all

81
03:31.480 --> 03:31.720
those

82
03:31.720 --> 03:35.880
VMs would then be connected to that same layer two broadcast domain and a same

83
03:35.880 --> 03:38.200
logical layer three IP addressing space.

84
03:38.200 --> 03:42.400
So with that game plan in mind, in the next video, let's go ahead and do a

85
03:42.400 --> 03:42.600
quick

86
03:42.800 --> 03:45.840
cleanup of our current existing IP sectionals.

87
03:45.840 --> 03:47.960
So we'll remove all the VPN configuration.

88
03:47.960 --> 03:49.520
We'll verify our apology.

89
03:49.520 --> 03:53.400
Then after we've done the cleanup and verified our apology, we'll then proceed

90
03:53.400 --> 03:56.040
to configuring the server over here at site three.

91
03:56.040 --> 03:59.680
So I'll see you in the next video as we continue this process together.