WEBVTT

00:07.700 --> 00:11.250
All right so we have finished the first setup.

00:11.260 --> 00:17.170
We have created Phase 1 Phase 2 in our IP SEC tunnel.

00:17.170 --> 00:22.030
And we have also created a firewall address object of the remote locale.

00:22.030 --> 00:32.940
Now let's create a static crowd that will tell our 48 how to reach the remote local area network.

00:33.010 --> 00:36.150
So we will move over to network static crowd

00:39.240 --> 00:41.780
and let's create a new standard crowd.

00:41.790 --> 00:49.680
We'll use the name to address since we have configured the remote IP seq land address object and our

00:49.680 --> 00:51.690
interface is the

00:56.780 --> 01:01.670
two branch IP set tunnel interface.

01:01.670 --> 01:08.660
We're not using the web interface we're using the new virtual interface that was created once we have

01:08.880 --> 01:12.410
setup our tunnel.

01:12.440 --> 01:18.750
All right so we also have a static crowd.

01:18.750 --> 01:28.680
And now let's configure the policy the policy that will allow our local area network to reach the remote

01:28.680 --> 01:30.050
local area network.

01:30.930 --> 01:37.500
So we we'll name it to remote IP Sec.

01:37.770 --> 01:48.360
The incoming interface is our new virtual adapter which is the two branch channel interface.

01:48.450 --> 01:57.580
The outgoing is our well interface source can be all we can also set up a user group or a specific users.

01:57.600 --> 02:05.870
But for now we will use the whole destination all service all.

02:06.390 --> 02:09.730
We do not need.

02:10.400 --> 02:19.640
In our policy and that's our first policy to remote IP sec.

02:19.830 --> 02:22.320
Now let's create this second policy

02:28.750 --> 02:36.310
from a remote IP sac and this policy will be the opposite.

02:36.340 --> 02:59.640
That's the policy that will allow traffic coming from our or when reaching our new VPN.

02:59.840 --> 03:00.390
All right.

03:00.400 --> 03:15.050
So we have to two policies in place to allow traffic between our remote local area network and our local

03:15.050 --> 03:20.500
area network using IP SEC VPN.

03:20.900 --> 03:29.240
No we have actually finished setting up our VPN tunnel from our site.

03:29.270 --> 03:37.700
The next thing to do is to setup the remote for the gate the remote 48 it will be setup exactly the

03:37.700 --> 03:45.500
same using the same pressure key the same encryption algorithm the same in different phases the same

03:45.500 --> 03:47.540
hash values.

03:47.600 --> 03:56.660
The only difference is the IP addresses of the remote Gateway and the remote local area network which

03:56.660 --> 04:03.830
should be configured in the Phase 1 and Phase 2 configuration.

04:03.830 --> 04:12.110
Another thing to do is to setup the policies the security policies and the static route.