WEBVTT

1
00:00.000 --> 00:04.320
So our first step right here is to do some cleanup and also verify our existing

2
00:04.320 --> 00:05.000
topology.

3
00:05.000 --> 00:09.840
So let's head over to the NSX manager over at site 3 and begin.

4
00:09.840 --> 00:14.900
So here is the light mode for the NSX manager also for site 3.

5
00:14.900 --> 00:19.340
So let's go to networking and with networking selected on the left, let's go

6
00:19.340 --> 00:20.200
down to network

7
00:20.200 --> 00:22.600
services and click here on VPN.

8
00:22.600 --> 00:25.400
So currently let me go ahead and collapse the left hand side there.

9
00:25.400 --> 00:27.280
So currently we have two IP successions.

10
00:27.280 --> 00:30.880
One's going to an external Cisco router, the other is going over to site 4.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

10
00:27.280 --> 00:30.880
One's going to an external Cisco router, the other is going over to site 4.

11
00:30.880 --> 00:33.880
And what we want to do is go ahead and delete those.

12
00:33.880 --> 00:38.040
So I'll grab site 4, click on the three dots, click on delete and click on

13
00:38.040 --> 00:38.680
delete.

14
00:38.680 --> 00:42.040
It says here I can't delete it because it has children or is being referenced

15
00:42.040 --> 00:42.480
by other

16
00:42.480 --> 00:43.480
objects.

17
00:43.480 --> 00:44.720
So let's do this.

18
00:44.720 --> 00:49.860
Let's go to our tier 0 gateway here at site 3 and for the tier 0 gateway, let's

19
00:49.860 --> 00:50.880
edit it

20
00:50.880 --> 00:52.560
and then we remove some static routes.

21
00:52.560 --> 00:56.840
Let me go ahead and go to routing and go to static routes.

22
00:56.840 --> 01:00.110
And let's remove any of the static routes that we are no longer going to need
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

22
00:56.840 --> 01:00.110
And let's remove any of the static routes that we are no longer going to need

23
01:00.110 --> 01:00.840
after we delete

24
01:00.840 --> 01:01.840
the IP successions.

25
01:01.840 --> 01:03.080
So we'll do a full cleanup here.

26
01:03.080 --> 01:07.600
So here's our route to our Cisco subnet for the external VPN.

27
01:07.600 --> 01:11.880
Here is the route for the site to site VPN between site 3 and site 4.

28
01:11.880 --> 01:13.320
We'll delete that as well.

29
01:13.320 --> 01:16.380
We'll go ahead and click on refresh and we'll leave the one default route which

30
01:16.380 --> 01:16.800
is going

31
01:16.800 --> 01:20.600
through our service provider at the next top address of 23.1.2.1.

32
01:20.600 --> 01:21.600
Fantastic.

33
01:21.600 --> 01:24.250
So we'll close that and close that and then we'll go ahead and we'll click on

34
01:24.250 --> 01:25.600
close editing

35
01:25.600 --> 01:28.450
and then still with networking selected, we'll go on the left down on the

36
01:28.450 --> 01:29.280
network services

37
01:29.280 --> 01:30.640
to VPN right there.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

37
01:29.280 --> 01:30.640
to VPN right there.

38
01:30.640 --> 01:34.880
And then with VPN selected, we're going to go to our IP successions right here.

39
01:34.880 --> 01:39.110
So we'll delete the IP succession to site 4 by clicking on three dots clicking

40
01:39.110 --> 01:39.760
delete,

41
01:39.760 --> 01:43.790
clicking delete and survey says that looks good and we'll also delete our IP

42
01:43.790 --> 01:44.480
succession

43
01:44.480 --> 01:46.320
to the external Cisco router.

44
01:46.320 --> 01:49.960
So we'll click on the three dots for that session, click on delete, click on

45
01:49.960 --> 01:50.600
delete.

46
01:50.600 --> 01:51.600
That looks great.

47
01:51.600 --> 01:52.760
We'll do a refresh there.

48
01:52.760 --> 01:53.760
Fantastic.

49
01:53.760 --> 01:55.560
We know IP successions also.

50
01:55.560 --> 01:59.560
Let's go ahead and let's clean up any custom profiles we may have made.

51
01:59.560 --> 02:02.320
So there's an Ike profile that we're not going to be using anymore.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

51
01:59.560 --> 02:02.320
So there's an Ike profile that we're not going to be using anymore.

52
02:02.320 --> 02:07.030
So we'll delete that, delete, click on refresh and I think that looks good from

53
02:07.030 --> 02:07.560
here.

54
02:07.560 --> 02:10.850
Then if we go to local endpoints, we have a couple local endpoints that we set

55
02:10.850 --> 02:11.160
up.

56
02:11.160 --> 02:13.640
We'll be recreating one of those as part of our LTVPN.

57
02:13.640 --> 02:16.160
So we'll go ahead and delete our current ones here.

58
02:16.160 --> 02:17.600
That way we're going to start from scratch.

59
02:17.600 --> 02:19.760
You can see every single step along the way.

60
02:19.760 --> 02:20.760
All right.

61
02:20.760 --> 02:23.320
So we have no local endpoints configured anymore.

62
02:23.320 --> 02:26.240
We have no LTVPN sessions because we haven't done that yet.

63
02:26.240 --> 02:28.960
We have no IPsec sessions because we deleted those.

64
02:28.960 --> 02:31.910
And last but not least, let me go ahead and delete the parent VPN service here
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

64
02:28.960 --> 02:31.910
And last but not least, let me go ahead and delete the parent VPN service here

65
02:31.910 --> 02:32.400
for IP

66
02:32.400 --> 02:33.400
sec.

67
02:33.400 --> 02:36.320
So we'll click on the three dots, click on delete and click on delete.

68
02:36.320 --> 02:37.320
And then we'll refresh that.

69
02:37.320 --> 02:40.760
And it looks like site three is cleared up and ready to go.

70
02:40.760 --> 02:42.480
So we go to network topology.

71
02:42.480 --> 02:44.160
Here is our site three.

72
02:44.160 --> 02:48.960
Currently, if we hover on services, it has no VPN services enabled whatsoever

73
02:48.960 --> 02:49.400
yet.

74
02:49.400 --> 02:52.740
Also here in our tier zero gateway, let's just confirm for a moment our virtual

75
02:52.740 --> 02:52.920
IP

76
02:52.920 --> 02:53.920
address.

77
02:53.920 --> 02:57.560
And here's our virtual IP address for the service provider, a, which is 231230.

78
02:57.560 --> 03:00.890
Just want to verify that was still in place because we're going to use that IP
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

78
02:57.560 --> 03:00.890
Just want to verify that was still in place because we're going to use that IP

79
03:00.890 --> 03:01.400
address

80
03:01.400 --> 03:06.170
was who are appearing from site three, which will be the L2 VPN server over to

81
03:06.170 --> 03:06.800
site four,

82
03:06.800 --> 03:08.560
which will be our L2 VPN client.

83
03:08.560 --> 03:12.690
So let me click on close here and collapse that and just confirm once more that

84
03:12.690 --> 03:13.160
on site

85
03:13.160 --> 03:17.160
three, we have absolutely no VPN services whatsoever configured.

86
03:17.160 --> 03:19.720
Now let's do this similar treatment over at site four.

87
03:19.720 --> 03:23.560
So here's site four in dark mode and we'll go to networking and let's start off

88
03:23.560 --> 03:23.840
with

89
03:23.840 --> 03:28.480
the tier zero gateway and we'll edit our existing tier zero gateway there and

90
03:28.480 --> 03:28.800
we'll

91
03:28.800 --> 03:32.670
remove the static route that we configured in a previous set of videos for the
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

91
03:28.800 --> 03:32.670
remove the static route that we configured in a previous set of videos for the

92
03:32.670 --> 03:33.120
benefit

93
03:33.120 --> 03:35.440
of our site to site tunnel over to site three.

94
03:35.440 --> 03:38.640
So we'll go to routing and then we'll click on the hyperlink here for the count

95
03:38.640 --> 03:39.000
next to

96
03:39.000 --> 03:40.360
static routes.

97
03:40.360 --> 03:43.490
And then we'll leave our default route, but we'll remove the static route down

98
03:43.490 --> 03:45.040
to 1033

99
03:45.040 --> 03:48.390
by clicking on the three dots, clicking on delete and clicking on delete and

100
03:48.390 --> 03:49.160
refresh.

101
03:49.160 --> 03:50.160
That looks great.

102
03:50.160 --> 03:54.380
So we'll click on close and then we'll go down to our VPN section here and

103
03:54.380 --> 03:55.120
click on yes to

104
03:55.120 --> 03:56.120
continue.

105
03:56.120 --> 04:00.180
And then here with VPN selected, we'll go ahead to IP successions and let's
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

105
03:56.120 --> 04:00.180
And then here with VPN selected, we'll go ahead to IP successions and let's

106
04:00.180 --> 04:00.760
delete the

107
04:00.760 --> 04:05.080
IP succession that goes over to site three and click on delete again.

108
04:05.080 --> 04:06.080
That looks good.

109
04:06.080 --> 04:08.990
Let's also make sure we don't have any profiles or anything else that we

110
04:08.990 --> 04:10.000
created customized.

111
04:10.000 --> 04:12.000
So that all looks like the defaults.

112
04:12.000 --> 04:16.020
Fantastic local endpoints will delete the one we created earlier by clicking on

113
04:16.020 --> 04:16.560
delete.

114
04:16.560 --> 04:21.770
So that's gone ltvpn sessions, nothing there IP [garbled] sessions, nothing there and

115
04:21.770 --> 04:22.320
then VPN

116
04:22.320 --> 04:24.680
services just for a nice fresh start.

117
04:24.680 --> 04:27.920
We'll delete that as well by clicking on delete and delete.

118
04:27.920 --> 04:28.920
That looks great.

119
04:28.920 --> 04:29.920
So I'll refresh that.

120
04:29.920 --> 04:34.100
Let's also just confirm the virtual IP address that we're using on our tier
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

120
04:29.920 --> 04:34.100
Let's also just confirm the virtual IP address that we're using on our tier

121
04:34.100 --> 04:35.160
zero gateway here

122
04:35.160 --> 04:38.240
at site four, which is my T zero violet site for.

123
04:38.240 --> 04:42.080
So we'll expand our T zero gateway here and then for the HAVAP, we'll click on

124
04:42.080 --> 04:42.840
the hyperlink

125
04:42.840 --> 04:46.560
just to confirm it's at 24.1.2.40 fantastic.

126
04:46.560 --> 04:51.150
So click on close and we've now confirmed the virtual IP addresses here at site

127
04:51.150 --> 04:51.600
three

128
04:51.600 --> 04:52.800
and site four.

129
04:52.800 --> 04:58.730
We also cleaned up any existing VPN services and or IP [garbled] sessions that we had

130
04:58.730 --> 04:59.440
in place

131
04:59.440 --> 05:02.320
and between site three and the external Cisco router.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

131
04:59.440 --> 05:02.320
and between site three and the external Cisco router.

132
05:02.320 --> 05:07.380
And that puts us into perfect striking position to implement from scratch our

133
05:07.380 --> 05:08.320
layer to VPNs

134
05:08.320 --> 05:14.600
without any existing VPN services or IP sec or L2 VPN sessions in place.

135
05:14.600 --> 05:18.780
And that way we have the opportunity to see every single step in the process

136
05:18.780 --> 05:19.680
and not build

137
05:19.680 --> 05:24.680
upon or use some other object or configuration that was previously in place.

138
05:24.680 --> 05:29.170
So with that in mind in our next video, let's begin the configuration of layer

139
05:29.170 --> 05:29.720
two VPNs

140
05:29.720 --> 05:32.440
starting here at the server, which is site three.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

140
05:29.720 --> 05:32.440
starting here at the server, which is site three.

141
05:32.440 --> 05:35.440
So I'll see you in that next video in just a moment.