1 00:00:08,390 --> 00:00:10,640 All right so we're progressing now. 2 00:00:10,650 --> 00:00:20,430 Let's create a firewall address object for the remote local area network that we want to establish a 3 00:00:20,430 --> 00:00:21,660 tunnel to. 4 00:00:22,470 --> 00:00:39,700 So let's create one let's name it remote IP set lan that's a subnet at the tender 0 that one that is 5 00:00:39,780 --> 00:00:49,250 zero slash 24 and let's use this static crowd configuration so we can use it later on in our static 6 00:00:49,250 --> 00:00:52,070 round configuration. 7 00:00:52,110 --> 00:01:04,430 All right now let's move over to VPN IP SEC tunnels create new customer and let's name or tunnels since 8 00:01:04,430 --> 00:01:06,990 we are the initiator. 9 00:01:07,010 --> 00:01:10,880 Let's name our tunnel to branch 10 00:01:13,270 --> 00:01:15,360 next. 11 00:01:15,600 --> 00:01:26,560 No we will look over at the different parameters the one that are really important and I'll try to explain 12 00:01:27,090 --> 00:01:27,770 each. 13 00:01:27,850 --> 00:01:39,860 Now the remote gateway that's our remote Gateway IP address we will reach to it through our 1 1 interface. 14 00:01:40,270 --> 00:01:47,120 Now we will not use the net since we are not doing any network address translation. 15 00:01:47,290 --> 00:01:52,750 Both gateways have their public IP. 16 00:01:52,900 --> 00:01:58,910 They do not need to translate the IP address. 17 00:01:58,970 --> 00:02:02,740 It's a tunnel between both gateways. 18 00:02:02,750 --> 00:02:11,630 Now we can use that pure detection that will check for any issues in our tunnel. 19 00:02:12,860 --> 00:02:19,680 Let's use a pretty sure key for the authentication between the two piers. 20 00:02:19,670 --> 00:02:24,460 Let's use the one two three four five six eight. 21 00:02:24,490 --> 00:02:30,430 That will be the password that we will use now. 22 00:02:30,490 --> 00:02:34,190 There are two modes at phase one. 23 00:02:34,330 --> 00:02:35,830 The first one is aggressive. 24 00:02:35,830 --> 00:02:40,130 The second one is mean using the main mode. 25 00:02:40,330 --> 00:02:46,120 Actually uses six packets to establish the first phase. 26 00:02:46,270 --> 00:02:54,670 The aggressive mode is much more quicker it only uses treat packets but we will remain with the main 27 00:02:55,450 --> 00:02:57,700 IP protection mode. 28 00:02:57,970 --> 00:03:05,170 These are the encryption algorithms and the hash functions that are used. 29 00:03:05,170 --> 00:03:07,900 We can keep them as they are. 30 00:03:07,900 --> 00:03:12,350 We can eliminate some of them. 31 00:03:12,490 --> 00:03:17,380 Let's use a yes 1 92 and Char. 32 00:03:18,130 --> 00:03:19,950 Let's use shell 1. 33 00:03:20,020 --> 00:03:31,300 Now the defeat Hellman group is the method or the way to initiate a secret key that both parties can 34 00:03:31,300 --> 00:03:34,710 use during the setup. 35 00:03:34,780 --> 00:03:39,340 We will keep the groups as 14 to 5. 36 00:03:39,340 --> 00:03:40,230 This is the key. 37 00:03:40,230 --> 00:03:43,040 Lifetime 86 400. 38 00:03:43,240 --> 00:03:48,730 We will not use local I.D. since we're only establishing one IP SEC tunnel 39 00:03:51,510 --> 00:04:02,670 and now let's move over to our face to face to we will configure the remote and the local private networks 40 00:04:05,510 --> 00:04:08,600 now all local network 41 00:04:19,080 --> 00:04:33,220 and the remote address is the intended zero that 1.0. 42 00:04:33,560 --> 00:04:43,820 Right now we can move over to the advanced configuration where we can determine the encryption algorithms 43 00:04:43,850 --> 00:04:46,520 and the hash functions. 44 00:04:46,520 --> 00:04:50,460 We will keep it as they are. 45 00:04:50,690 --> 00:04:58,040 We will enable replay detection and perfect forward secrecy that is a mechanism that initiates a new 46 00:04:58,050 --> 00:05:01,360 key each time this session ends. 47 00:05:01,880 --> 00:05:04,340 It's much more secure that way. 48 00:05:04,880 --> 00:05:05,600 And there it is. 49 00:05:05,600 --> 00:05:07,520 That's our tunnel. 50 00:05:07,520 --> 00:05:09,700 Step one is completed.