Network security virtual private networks site of site IP Sager be pen Larb part two in the previous
video I showed you how to approach IP Sagarin on a Cisco router to remind you that is either it or apology.
We have two routers that are connected.
They're actually inderia words.
That is the Internet.
It does not change anything here.
And we have two local area networks.
It's 10 7 7 zieba in the wake of this network aren't 1 9 2 1 6 8.
Got two doors you know what we wanted to do one too.
Create a side to side.
P P N S E P and panel are and send some traffic.
In our case we are paying these two IP address and make shoot that everything will go across cities
at 4 p.m..
Tunnel.
I showed you a template that we are going to use.
And that's where we are going to start Route 1.
That's what we have 4 to 1.
I'm here it is for literate too.
Honest Cisco athar we type.
Com konforti or configure a terminal to go to a special configuration mode.
Thanks to Darth.
We can copy and paste everything that we can see on the screen.
I recommend you do a dardis you know five six slides at the time.
Make sure that's if a router doesn't like something is going to report that.
If you paste like I did of 60 70 two hundred lines you can miss something.
Let's start with that one.
Sorry.
And just the right click and we paste.
If we do not see any error messages that's okay.
I want to show you one thing I promised I would.
One of them is harshing.
Armed you can specify I want to use 75 for a shot.
If you don't specify Asus call a router will use a default solution a default option and the problem
is that it all depends what is what the version of the operating system you're army that's why and other
people have specify everything even though it is a default option.
Because I am using the same image and bovver at her as an I know it will in much.
I can leave it like that.
Maybe.
Let's copy these guys.
This is just a warning message saying dart's we need some more information.
A router a need some more information to make it work.
That's fine.
We are going to apply this.
P. m..
That is all we have to do on the rabta one.
Now I am going to pan heads pen it means I am going to connect to the other router remotely.
Now this one that wondered wondered too.
I will pay all commands for writter to.
Not that it's to remind you ike face one.
Our preshow T.
Group to Ma and ark's Islamists.
And the last one is to apply.
Would have to apply it.
Okay.
Let's go back to our topology.
We have 10 7 7 the one on there are 2 1 and 1 9 2 1 6 8 that to date one on the right 2.
I'll show you some basics shall command.
Again it's the command line interface you don't hever way been to faith which could show us all as a
witness.
Are this is whatever on the many devices like Cisco Ju new power check point and so on.
We have this year I really and the main command.
You want to use this show crypto.
I say Come I say this is a command that will show you I like phase one.
That's the most important command because if there is no eick face one in IP SEC.
There is no eick face to it means the VPN is not going to work.
That's why you have to see Q M I on that special mode dot identifies Yes I ike phase 1 in IP SEC has
been established and be ready to go.
Ie.
I were pipe it again.
We can not see anything.
Why where on a Cisco wise.
One St..
It's not only Cisco applies to many places generis speaking the V V P and that I am showing you at the
moment.
It is on-demand.
What I mean by that is that specifical router is not going to bring up that panel.
It will do a dot if it recognizes some traffic going from this gate at either gate or from the gate
without Yeah.
If there is no traffic going from.
Pens 7 7 1 2 1 9 to answer if they don't do that one.
This VPN is not going to be established.
That's why when you for instance send a message for the first time it can take a while because these
routers they have to negotiate everything.
Let's do it then.
I am on the rotaru tour and this guy and I am going to paying this IP address.
I will use the sorace command.
Calls are just and he and fully brief.
I had to check the air and interface paying 10 7 7 1 for as you look back on May 2.
What's.
What it means.
It starts.
This is the sorace IP address I took ping from this IP address to dot a print.
Let's do.
Show gripped the eyes a compass say please note.
Cue him either.
That's good.
It means that we have just established a site to site VPN.
There is a command.
We can pipe to verify that there is.
There there are packets going through this VPN across the VPN and they are encrypt it and decrypt it.
It is show crypto IP SEC as say here IP sec.
That's eick face.
And we should see some encrypted and decrypt it packets.
If high paying IT game if I send a message it Kane you should see AITs here.
It's nine o'clock.
Yeah.
But yeah because the first one there was.
The first one did they arrive.
Yeah.
Please note here.
Yeah and he's going to have sent five they see empey messages.
And don't do it again.
Verify.
You can you can do can do repeats 100 times and then you would send 100 messages.
Now we should see like one hundred and nine.
Right.
Show quit.
Do I succumb.
Yeah.
It's really important to see em grouped it down decrypt it.
It means that I send her message and I received a message.
I send the message and they received a message.
His reimport that you see sent errors here for us is it means that well I appreciate I should send something
across this VPN panel but something is wrong.
I can't really tell you what but something is wrong.
I'm here.
Below you can see IP sake protocols.
Protocols dots.
Are in use at the moment.
We use a yes answer Shah for IP sake Ike Phase 2.
India's really here we talked about a site to site IP SEC VPN on a Cisco device.
I appreciate it might be pretty advanced for some of you see there.
It is really important to see.
How you can apply it.
As you know.
P N..
Protocol and everything that you have learned so far.
If there is a word I hold up where shall you aren't.
You would have a very good idea what you have to learn to apply a site to site.
He said VPN on every device.
If you have a web interface it is easier then you have to go through all these stages you have to understand
what the eick face one is what I like faith do is you will have to understand which sayings have to
much on both ends.
To make it work.
Thank you very much.