1
00:00:07,700 --> 00:00:11,250
All right so we have finished the first setup.

2
00:00:11,260 --> 00:00:17,170
We have created Phase 1 Phase 2 in our IP SEC tunnel.

3
00:00:17,170 --> 00:00:22,030
And we have also created a firewall address object of the remote locale.

4
00:00:22,030 --> 00:00:32,940
Now let's create a static crowd that will tell our 48 how to reach the remote local area network.

5
00:00:33,010 --> 00:00:36,150
So we will move over to network static crowd

6
00:00:39,240 --> 00:00:41,780
and let's create a new standard crowd.

7
00:00:41,790 --> 00:00:49,680
We'll use the name to address since we have configured the remote IP seq land address object and our

8
00:00:49,680 --> 00:00:51,690
interface is the

9
00:00:56,780 --> 00:01:01,670
two branch IP set tunnel interface.

10
00:01:01,670 --> 00:01:08,660
We're not using the web interface we're using the new virtual interface that was created once we have

11
00:01:08,880 --> 00:01:12,410
setup our tunnel.

12
00:01:12,440 --> 00:01:18,750
All right so we also have a static crowd.

13
00:01:18,750 --> 00:01:28,680
And now let's configure the policy the policy that will allow our local area network to reach the remote

14
00:01:28,680 --> 00:01:30,050
local area network.

15
00:01:30,930 --> 00:01:37,500
So we we'll name it to remote IP Sec.

16
00:01:37,770 --> 00:01:48,360
The incoming interface is our new virtual adapter which is the two branch channel interface.

17
00:01:48,450 --> 00:01:57,580
The outgoing is our well interface source can be all we can also set up a user group or a specific users.

18
00:01:57,600 --> 00:02:05,870
But for now we will use the whole destination all service all.

19
00:02:06,390 --> 00:02:09,730
We do not need.

20
00:02:10,400 --> 00:02:19,640
In our policy and that's our first policy to remote IP sec.

21
00:02:19,830 --> 00:02:22,320
Now let's create this second policy

22
00:02:28,750 --> 00:02:36,310
from a remote IP sac and this policy will be the opposite.

23
00:02:36,340 --> 00:02:59,640
That's the policy that will allow traffic coming from our or when reaching our new VPN.

24
00:02:59,840 --> 00:03:00,390
All right.

25
00:03:00,400 --> 00:03:15,050
So we have to two policies in place to allow traffic between our remote local area network and our local

26
00:03:15,050 --> 00:03:20,500
area network using IP SEC VPN.

27
00:03:20,900 --> 00:03:29,240
No we have actually finished setting up our VPN tunnel from our site.

28
00:03:29,270 --> 00:03:37,700
The next thing to do is to setup the remote for the gate the remote 48 it will be setup exactly the

29
00:03:37,700 --> 00:03:45,500
same using the same pressure key the same encryption algorithm the same in different phases the same

30
00:03:45,500 --> 00:03:47,540
hash values.

31
00:03:47,600 --> 00:03:56,660
The only difference is the IP addresses of the remote Gateway and the remote local area network which

32
00:03:56,660 --> 00:04:03,830
should be configured in the Phase 1 and Phase 2 configuration.

33
00:04:03,830 --> 00:04:12,110
Another thing to do is to setup the policies the security policies and the static route.