I go to Cisco, EMC, Cisco Router Configuration Guide.
So basically, this is just a component, as we see with the intel component interaction, as you can
see, they are putting out his own physical interfaces like this one.
These are all the parameters.
This is the background, as you can see, from the fiscal third to the final two.
This is a diagram is actually placed in your folder from the school, from our landside 10.1, 11 or
12.
Whatever your network is, traffic will be going from the firewall to the doctor.
And this is a network will be a branch site, actually.
So that's the topology we will be using.
So the policy point of view, we will be having a land network plan network, 10.1, 11, 12, 13,
whatever you be, you have been assigned, you need to check the parameters of this.
And you can be can be seen here in our spreadsheet in the.
I'm just going to show you.
Right, for each of you will be having this spreadsheet saved in your student folder, follow up on
that diagram and spreadsheet.
And here you can see this is like this one parameter and divide.
And for the D.H group to appreciate, we are using authentication method encryption.
That's the that's minimum shock and physical one to three is the key.
This is our this is our land network.
There's no gate we're looking at.
We're going to tell 200 at eleven and local area network and remote site network.
So that's going to be the defense because we already have this is a diagram we will be using for the
IP separation of the tunnel.
And there is also a vote as well, which is side to side with the fiscal side is already committed.
But what are the first steps?
I just got very quickly here.
We will be using.
As you can see, this component of gap, that's apology.
This is between.
Yeah, this is actually I the game.
The 10.1, a network, is coming from the bottom.
Do you have the fact that this is going to happen?
And we have to wonder that the level of view in the bright side is no apology.
OK, and you can see we will come here to this party if you can, because you don't need to configure
anything on this part of the site of this site.
You will be configuring only this Palo Alto from Panorama with all the barometers already provided in
the spreadsheet.
Keep in mind, this site is configured only to configure anything on go to Cisco doctors, actually.
Do the background provided all the information?
So step one is actually just go and do the political panorama, and you need to select the template
and create a new interface for the.
Is.
We don't just do that.
So, first of all, I'm going into the template.
I'm looking at your next zoom interface, that's my interface, so I go to and I'm creating a new one.
That will be my 11:00 you need to configure to go to maybe 12, 13, 14, 15, whatever it is.
OK.
There's no need for that law, actually, and what you do is because we have to watch what we are using
the FBI and you need to create a new zone as well from Panorama that will be called Leepson.
That's the first step.
OK, so you can see we can give you a of.
I was one whatever you want to be good.
OK, let's see one more one, for example, I created this tunnel, I would normally to configure any
IP address on this turnham.
Like this one, this interposes created.
Again, just to show you, Carol, no.
But you can figure your number based on your spreadsheet.
No need for IPV, for no need for anything else, just configure the what your local and the zone.
Second step would be from the Pentagon on what we need to create the I, I, I feel.
OK, and then you can see Gupta does amplify shop, these are the configuration you need to I people
like a. piece one piece one centimeter and here my will be Maspeth one.
OK.
This is a group to.
Encryption will be minimum.
As potentially to be convicted if you've been shot and then be fined both at the same time, so whoever
will be.
Come so be so because he amplifiers and shovels are configured the default leave everything default.
And then this is the phase one we have.
The second step we can think of is to.
As part of a spreadsheet.
And.
So basically, we are doing the best to.
So either, yes, we will ESB encryption, minimum cliffords authentication should be as shall.
Group two must be selected.
And think.
These are the first two barometer's.
First up will be we need to configure a deeply, deeply.
So for your information, like you can use, you can use, you can keep using the crypto ie crypto and
crypto mining as well.
One, two, one, one is fine, like one policy for IC and one political crypto IP is fine.
You can use mine, but the gateway must be different for every of you, every student.
So I crypto an IP policies are already provided.
They can how you can configure, you can take the loan and you can configure your name for example.
Similarly IP set as well and you can using the gateway.
But these two things I will be using the identity and policy data.
So what are the.
She's going to be appointed with.
OK, leave it as it is interface, which interface you want to use.
My local my local interface will be.
One three one three 11.
Yes, and the IP address will be automatically once you start the interface between interface IP.
This is as part of our diagram.
This guy from.
OK, Philip.
It could be a good one for you, 12, 13, or whatever it is he should be called.
OK, for visibility before you have no space.
OK.
Because if he's not making with you the other night is making it, both of these two are making.
IP address leukocyte.
OK, and in the end, setting.
And you using the default one using the school, one at this one.
This is the one policy we have to think about when the kids really will be using.
This is one barometer.
And once we can think of the what we using.
These barometers and.
That DVD can figure.
Then the third step, what the next step will we will be I a skeptical.
And, you know, for the end of his final.
From here, we need to go for the.
So go to the.
This is the one we have we are using.
OK, that's my name.
One hundred two point sixty one one one.
And that's it.
Can if we can start to out.
And keep in mind, these supplies, 32.
But the family's already there, but we are waiting for the.
No need to put any IP address done.
OK, you can see that's easy for me to do, because previously the only thing, we're going to just
change it.
And doesn't seem to fit the definition we have.
That's a name, it's called Mass High School, and when I get to 160, like 32 and investments destination,
that's a double.
It was already existing, I just changed.
I think we just couldn't figure.
The next step will be we are creating a in.
So we're going to the U.S. here.
Using the same template, we need to use the.
Bastiano, CEO.
And the interface will be.
You will be using your interface, these virtual.
OK, I get it.
We just recently configured.
And then.
This is the place to profile, we have to adjust the IC, whatever the parameter we use in the eye gateway
and the IP secretary using it into the IP section of it, making sense.
These are the parameters that we need to go to the massive scale proxy war if we get a proxy, because
this is a proxy, for example, if traffic is originating from here, 10.1, that we have a network.
OK.
And that's the local network.
This is a proxy, I think, just a name.
OK, remote network should be.
But any political.
So this is the man's proxy.
We are going from source to this destination for any protocol.
And keep in mind, on the other side, from the fiscal order, it is reversed.
That will be local on the fiscal side.
For example, from here on the site, it will be 160 of the number one source and the destination will
be for any of that is because we are supporting a proxy policy based on policy based.
Let me push the changes to my first.
Pushing to the divisive constitutional 110.
OK.
So basically, what you definitely have considered just to name
something about the.
The view from the Panorama, for example, here, this interview was struggling to return the step,
one of the interpreters, if we go, we also the this one as.
I used to do as well that we could be.
If you compare that look like the remote, I used to the point.
Well, that depends on the type down the road, but, you know.
And you can watch that one vote and you can get.
The government won.
And then we also continue to accept them and we have to get our.
We can tell you that before the family tragedy happened.
You're going to have to find out exactly I this know is also
proven false information.
So
it is not going to be a quick one.
Yes, this one coming from.
Then we go to the movies and you can see the gateway as one.
And we can
also configure and you can see it now that he's been brought up when it comes to photos as well.
OK.
And now to see what what is it?
There are a few steps are required, but before that, I want to show you something else.
So let's see now how the traffic is going if we go to the IP.
You know, you can see nothing is working on the fiscal totem if you see the fiscal cliff here, when
I type show tripto, I can see there is another panelist there.
But winter wonderland mentality is not existing.
OK, and so, first of all, it's consistent with the traffic.
So, first of all, how are we going to increase the traffic we need to improve the traffic from this
source machine towards this destination?
Interesting traffic has to be completed in order to get there, will come up.
So how we can generate the traffic, go to the local machine or get into that.
So I think the rule of.
I gave you the rule.
When the fiscal agreed to rule from the because the traffic rule is still not existing, so we need
to make sure there is a rule from the north just to and also from the.
Both site.
So this role has been created from both sides.
So each side can actually initiate the traffic it and you can see these are the two sources of existing
either side can initiate the traffic.
This is my people and the people who will be saying the traffic, if you need it from any source, any
of these sources.
OK, eather from Cisco fired either from the other side.
And for any application.
Pushing this rule to a pendulum has gone.
The traffic is already going through and it's denied here because policy does not exist in.
It is not receiving on the other side.
And you can see it is not green.
It's not directly on the fiscal side.
You can see also not traffic is not to see.
No, it is one for this.
This is the end of the tunnel.
Me.
What are you doing point of view, this definition is totally deny, not existence, as you can see,
but this is the tactic is dropping.
We just created a room, but that was not exactly the security policy that is right now.
Now, you can see that rule is existing for most people sitting at home now.
Now you can see the alone is allowed, but let's just check the stage, just one example, and there
is more information to come in.
Still not coming up.
We can still see the traffic is still going on.
But nothing is coming out, so the rule is allowed, let's see what's the problem now.
Now let's go into the system again.
It is an issue.
It is feeling.
It is paying.
Everybody's getting.
Right now, if we look at this, one more problem to fix is.
We just checked the traffic court.
And you can see the traffic rolling along, the traffic is allowed, but there is another problem we
are facing.
One
definition quote of 500.
OK, so you see traffic is coming from branch to branch or the.
And I wanted to be one that you can see site.
The reason is because this is the place where you can negotiate.
I have allowed I cool, but I think over these two network between the blogsite, actually.
But these are the type of people that, look, we have not allowed any any traffic four or five five
fight because this is important without we don't we don't.
We need to allow the to that's that's a part of that.
That is one we come off.
These two will never come up.
Another look at all this.
We need to create a policy and that policy, you can create an actual device or you can use this one
as well.
And the third one, because we have more convolute.
But what I can do is I can just create another.
If you don't, come on.
That should be.
Branch to branch.
It's protocol we use, we use the IP protocol.
OK.
And that should be about.
OK, I know I.
And this is a one time job, you don't need to do anything.
Again, this is where all the VPN traffic or 500 is required in order to establish what you want is
not a big deal.
And that is what is happening even on all the perimeter.
But
the idea is to be forced to come together to each other.
Our policy saying any traffic between the zones or between the zone and between the Internet is denied
that you have a room for this, but only the rule actually between the source and destination.
We need to also make sure that it allows the network and that's it.
And you don't need to consider the evidence about everything to be fine.
Without this.
Now pushing to the devices as well.
This is our one time travel and we can see the traffic.
The competition has been pushed from the panorama, the device.
Ben Wedeman has pushed his confirmation.
It will take some time and but in the meanwhile, you will see once the food fight it is allowed in
our network, you will see our VPN will comes up.
And in the meanwhile, you can also see in the configuration a system and you can see all the North
America to some type equal to VPN.
Started and deleted everything you can see, the first is people started talking to.
This one is never complete, is one thing moved on to another one for this to of year because the Ford
500 is not allowed in the.
It has to have one rule, actually, to follow the traffic between those network.
What I have done, I have created one is between the bright side for any.
OK, so you don't need to configure this again as well as the Ford 500 is an old bike because I could
use a 500.
If you go to the application and look for the IC.
Yeah, you're the PDP 500.
And the monitor you can see in the logs.
Yeah, so this is one you can see start to meet, and he's constantly we are getting these messages
because traffic is increasing, traffic is coming from the source.
And anyway, so I'm sending the traffic.
I cannot see anything on the fiscal side.
OK, this is for another host you want to see once we push that.
OK, maybe the next second it will be also on the network side.
We do not see any green signs like this one.
And I chose to.
So you can see 99 percent just completed.
Let's keep an eye on these.
You can see this is like no red.
I'm going to check the panel right now.
This is one of them you can see on the fiscal side.
Now you can see another panel comes up, given the idol between two hundred and forty.
And one second thing is also you can just verify from this from the.
From here, 99 percent is completely.
Also, I'm just checking the traffic now, you can see previously it was not the first time out of time,
but now it start with.
The government is voting.
Even I'm trying to tell that from you what you think is fingers.
OK.
Basically, I can see that it is completed and you can see the tunnel, the green.
Got.
I one.
It is about American.
Well, you want to see.
We won't be.
And everything is working as expected, but the thing is, you need to know, is it look like are.
They do not see.
So you see, traffic is going to default on travel and between the network, the fabric network, the
public network will never show up.
OK, this public notice, this public network.
You wonder why you never saw this look like this, all of these was are directly connected to each other.
From the Libyan point of view to this network and this network, does it look like they are directly
connected to each other through a switch?
But actually they are not.
But you can see there's only one hope is coming in the.
On the fiscal side, how you can verify, first of all, the first one, Shokri, to.
Sure to see the 200 wonderful 11. to 40.
And you can see.
Local traffic is 192 and going to this network of 500, how many packets are interpreting decrypted?
No traffic and no more traffic.
This is the inbound E.S.P to the different musically.
OK.
That's how exactly you can see how many Pakistani people are in.
One another thing is you can actually you can do is.
If you look at this right now, if I'm sending a graphic here, possibly sending a graphic.
And then the of the people just saying we can do this.
And I said this time that if you start this, you will see I will get someone to control the.
But we to I wasn't negotiating a very you start at this point, is that.
We look into the Palo Alto firewall as well as your VPN.
I see, so you can see this film shows up.
As you can see, Sparerib.
IP secretary, you can see you can also see the traffic as well.
We're.
And so.
So this is the configuration task force this quarter to quarter to five one, I'm sure everything is
clear.
The steps are clear for you.
And the workbook is there, you can follow that as well for the.
And question.