Network security virtual private networks site of site IP SEC V an alarm on it Cisco router.
That would be a pretty advanced alarm.
I would try and keep it simple.
There would be two that is dedicated to this club in the first one.
I will talk about IP SEC P pins on Cisco devising Gener I show you.
What to expect how to implement that.
Again this is a virtual private networks for beginners.
I appreciate you might want to see something more advanced maybe you.
You've been working with Cisco for a while you know this year and if not then I encourage you to watchdogged
it's well and give it a very good idea how you can apply.
IP sake.
Prodder colds and everything that we have covered cover it in every word situation.
It will be here.
Very good idea because it will show you if you want to move on.
Training like bots might be a good idea.
If you want to start your career in security maybe I just managed to to encourage you to do that that's
great.
I hope that this video will give you.
A very good avf about IP savy P.
On a Cisco right.
That is a weird topology.
There are two routers that we are going to use there.
Connect the dots directly with a crossover cable.
In their world of course you will have the internets over here.
Right.
I want to keep it simple.
That's why we're connected directly it does not change anything.
It's you know it's much easier to do it that way in a lab.
Wrote all one.
Has a public IP address one that one that one that one under a door to has a public IP address.
1 1 1 to 1 in by public it means it is an IP address starts you know it is facing the Internet at the
moment.
In our case that's how it's how it's done yeah there.
Connect it to each other and others like our having the Internet clout.
Behinder a true one.
There is a local area network right.
It means that this router I would zoom in in a moment.
What they mean by that is that there's a router.
There are two ports of here and one port is connected to it are two and one poor it is for your local
devices like printers laptops scanners and so on.
Of course in most cases will use switch because this the router has got two ports only.
This luhn the local phone network is 10 7 7 1 and this one is one mind to one succeed to a good one.
Let me zoom in in.
It will be easier to understand.
There are two parents that is f.
This one is EF 0 1 and this one is 0 0.
When we go back.
You would see that.
There's this one link and this link is here.
Anything like that.
I hope it makes sense.
Well I'll show you that when they connect to 2D routers.
If you have never worked with siskel before.
In most cases we manage a Cisco router or siskel device you are seeing this here like month line interface.
It means that we do not have a web interface where we do.
But it's not good.
People who don't use the did not reliable arent It can break the other thing.
Thats why we pipe all commands.
Its like going into Windows you type C D E R yeah.
Show you that.
You type see in the.
Yeah arent you can type for instance a very popular command.
I pick config to see you and verify your IP address.
Thats how you manage arent configure Cisco at all as well.
We'll go to this year I asked Will he make it happen.
In a video I will talk about IP sake VPN on a Cisco retain general.
Again it is pretty advanced But I would try and keep it as simple as possible.
I am connected to to one using a console cable.
What do you mean by DOT.
Is that on this router.
There is a dedicated port which is over here.
The other two they were at the console.
It means that you can manage it to using a dedicated cable a dedicated port and Swarth I connect it.
Because when you know when you when you buy it as a router or a Cisco firewall Cisco switch in most
cases there is no configuration on these devices on the console.
Poor It is the only way.
In most cases to connect to a root tar aren't set it up.
Let's go back.
That is right or.
Here I have a template.
That's how we create.
Side to side.
BP ends on a Cisco device.
We don't really pipe everything.
As you can see here we have I don't know 15 lines.
These lines are four to one.
I would talk about them in a moment and it is for a day or two.
You don't repipe everything.
The main reason for that is that you can miss something you can make a mistake.
That's why in most cases you will have a template.
You would have something that you can use and you will change if your things for ASUS IP addresses passwords
maybe and creation harshing things like Darte everything else well stays the same you want to have a
pen split something that you can use every time you go on.
Set up a new site of site VPN.
The same applies to setting up a Cisco retained general we dont really pipe everything we use a template.
Of course you have to know all these commands because thats how how we manage Cisco devices have to
know them anyway because if you want to change something even in endace into the document the note but
you have done this than what's inside.
Right that doesn't change anything.
Well I'm trying to tell you is that you don't worry.
Hi group Denmark v p n pan IP sake.
I said kamath cursing.
I'm reading at this line here.
We gundry do that in most cases you have a template you copy and paste and change a few things.
As you of you remember a whole I.
You have watched my previous feed airs and what is it perec with it.
I encourage you to lay it out in i.p sake.
We have eick faith one aunt Ike faith too.
Here we have Ike face one.
Aunt.
Below it is Ike face too.
Chris one.
We have a policy with pacify ward that these rooters are going to use for Ike face one for the first
face to exchange depreciate keys to authenticate on so on.
Everything that happens.
Art.
Stage one.
I decided to use encryption three days.
I am going to use pressure to keys.
Another option it sir it never gets under their feet.
Hanneman group 5 not with full key exchange.
Group 5.
This.
JUST HOW.
How many bits are going to be used in there.
He Hamman.
Then the next line specifies my P Your IP address.
It's a sophisticated name and it just means the other router.
Right.
For instance you if you want to set up a site of Site me an you will have two routers rider at all firewalls
and you were.
You have to know your IP address is on ball van and that's where you specify your IP address.
Aren't you appreciate.
Key.
In my case the pass or is it siskos the worst password you can come up with.
This line specifies your eick FAITH 2 or IP sake face to remind you is there's this uist to actually
x change your traffic you redate right.
In my case I use a yes Aunt Shah for my harshing.
Please note there is no harshing here because if you don't specify the default one will be used if you
want.
You can specify harshing here.
I show you that later on.
Then I will skip this one for a while and we move to an arc senseless and access is on as is corrupt
are allows you to identify what should be matched aren't.
This line is important because you have to pair Cisco at tar.
What is this source and destination IP address for your site of side VPN.
When they go by here you will see that we are going we are coming from 10 7 7.
1 under we are going to one line to and 6 they got to dot one.
That is an IP address network is 0 idea.
That's why when we go back to this guy we can't see sorace 10 7 7 0 and destination is one I need to
ask.
They did put 2.0 that is on the route to a one on the router two on this guy.
Source will be here and destination would be here.
I would scroll down and show you up here on the router too.
We are coming from one line to advocate to and we are going to tend that 7.
That 7. 0.
Now.
Will have to put all these pieces together.
Have to tell you Cisco router.
Oh this is your pure IP address.
The other side we are going to use these protocols for IP sake and this is something we call it interesting
traffic it means traffic that will be sent across to the VPN the last line is to imply this.
Crypt them up under an interface.
In my case a D F is 0 0.
So hey listen to this.
OK.
That's not a template.
Let's.
Check.
Retractor.
These guys they have too much.
This number is locally significant.
You can have more than one policy that isn't important to much.
The policies on ball when of course I changed the AP address this one 1 1 1 instead of 1 1 1 2.
This guy has too much here.
Everything has to match of course to his IP address.
It's 1 1 1 1 instead of 1 1 1 2.
Answer my answer solist.
Interesting traffic.
I am coming from one lane to answer fate.
If do you do it.
Zero.
And I'm going to pen that 7.
That 7. zira.
Again that last line the last command is to apply.
It's under an interface darts in my case facing the Internet.
It's facing the Internet up dead woman.
Kate Ritter one.
That's what we have here.
To router too.
Let's go back to.
Oh a diagram.
That's over 0 0 0 0 0.
They connect it like that aren't from ever 0 1.
There is a cable going to the first low growing network aren't on the router it.
The same there is the cable that goes over there.
The idea is that I have a laptop over here.
I have it locked up over here.
I have.
Well in a way a up I simulate set OK.
It's not important.
I have a device behind this right there as well.
What I want to do I want to.
Paying send a message.
Between these two guys armed dots should be sent using my VPN right because it will be.
It will be encrypted aunts.
It should go across my be pin tunnel.
There are some show commands that you can use on honest as go device.
I show you that thanks to that you can verify dart's you re p n Pana is up.
Ah and you're actually sending all information across your VPN.
This is beyond our discussion but these IP address is this one and that one they are private they puru's
it means that we vote every P n or at least line or something that you buy from your ISP.
You will not be able to access these networks directly anyway.
That's why you need a VPN is not like an option for you you need done because these are private IP addresses
aren't game.
It is beyond our discussion but there are firewalls there are not Network Address Translation things
in place.
Well you know when make sure that you can not access it directly and that makes sense because anyone
could do that.
That's where I want to leave.
Internet of video we are going to apply these commands.
Aunts send it paying message.
Should this V penis up and running.
Thank you very much.