WEBVTT 00:08.390 --> 00:10.640 All right so we're progressing now. 00:10.650 --> 00:20.430 Let's create a firewall address object for the remote local area network that we want to establish a 00:20.430 --> 00:21.660 tunnel to. 00:22.470 --> 00:39.700 So let's create one let's name it remote IP set lan that's a subnet at the tender 0 that one that is 00:39.780 --> 00:49.250 zero slash 24 and let's use this static crowd configuration so we can use it later on in our static 00:49.250 --> 00:52.070 round configuration. 00:52.110 --> 01:04.430 All right now let's move over to VPN IP SEC tunnels create new customer and let's name or tunnels since 01:04.430 --> 01:06.990 we are the initiator. 01:07.010 --> 01:10.880 Let's name our tunnel to branch 01:13.270 --> 01:15.360 next. 01:15.600 --> 01:26.560 No we will look over at the different parameters the one that are really important and I'll try to explain 01:27.090 --> 01:27.770 each. 01:27.850 --> 01:39.860 Now the remote gateway that's our remote Gateway IP address we will reach to it through our 1 1 interface. 01:40.270 --> 01:47.120 Now we will not use the net since we are not doing any network address translation. 01:47.290 --> 01:52.750 Both gateways have their public IP. 01:52.900 --> 01:58.910 They do not need to translate the IP address. 01:58.970 --> 02:02.740 It's a tunnel between both gateways. 02:02.750 --> 02:11.630 Now we can use that pure detection that will check for any issues in our tunnel. 02:12.860 --> 02:19.680 Let's use a pretty sure key for the authentication between the two piers. 02:19.670 --> 02:24.460 Let's use the one two three four five six eight. 02:24.490 --> 02:30.430 That will be the password that we will use now. 02:30.490 --> 02:34.190 There are two modes at phase one. 02:34.330 --> 02:35.830 The first one is aggressive. 02:35.830 --> 02:40.130 The second one is mean using the main mode. 02:40.330 --> 02:46.120 Actually uses six packets to establish the first phase. 02:46.270 --> 02:54.670 The aggressive mode is much more quicker it only uses treat packets but we will remain with the main 02:55.450 --> 02:57.700 IP protection mode. 02:57.970 --> 03:05.170 These are the encryption algorithms and the hash functions that are used. 03:05.170 --> 03:07.900 We can keep them as they are. 03:07.900 --> 03:12.350 We can eliminate some of them. 03:12.490 --> 03:17.380 Let's use a yes 1 92 and Char. 03:18.130 --> 03:19.950 Let's use shell 1. 03:20.020 --> 03:31.300 Now the defeat Hellman group is the method or the way to initiate a secret key that both parties can 03:31.300 --> 03:34.710 use during the setup. 03:34.780 --> 03:39.340 We will keep the groups as 14 to 5. 03:39.340 --> 03:40.230 This is the key. 03:40.230 --> 03:43.040 Lifetime 86 400. 03:43.240 --> 03:48.730 We will not use local I.D. since we're only establishing one IP SEC tunnel 03:51.510 --> 04:02.670 and now let's move over to our face to face to we will configure the remote and the local private networks 04:05.510 --> 04:08.600 now all local network 04:19.080 --> 04:33.220 and the remote address is the intended zero that 1.0. 04:33.560 --> 04:43.820 Right now we can move over to the advanced configuration where we can determine the encryption algorithms 04:43.850 --> 04:46.520 and the hash functions. 04:46.520 --> 04:50.460 We will keep it as they are. 04:50.690 --> 04:58.040 We will enable replay detection and perfect forward secrecy that is a mechanism that initiates a new 04:58.050 --> 05:01.360 key each time this session ends. 05:01.880 --> 05:04.340 It's much more secure that way. 05:04.880 --> 05:05.600 And there it is. 05:05.600 --> 05:07.520 That's our tunnel. 05:07.520 --> 05:09.700 Step one is completed.