OK, so in this election, we are going to consider part of the parliament to start with previously,
we already can figure out what the fiscal configuration as well, and we can see the title came up.
So what we are going to discuss side IP, VPN, fezzes, we not going to any practical bocian.
We already discussed that we are how we are going to configure people to do parallel to what is a site
site environment verification Leapster.
So basically we know the power to any, any, any IP sex hypothetical.
There are two phases like this one and phase two in the first one, we need to verify the identity addresses
and many other items.
Like what?
What are the key parameters, the authentication parameter we are using?
What is the encryption key?
What is encryption material using?
What is the hashing material using the IS group, all those sort of things.
Once the phase one is up, it goes through the phase two and interface to what happened, you know,
whatever the first one is, what is up?
Based on the previous one, we can figure out what network it should be protected.
That's a piece to and appears to also provide those information, IP, sectoral, more asymmetric,
asymmetric keys and all those things we configure as well.
So with respect to the latter, we already have our site to site upon wildlife conservation, we have
also along with that, we also have a spreadsheet which is giving us our barometer for our total portfolio
IP set parameters.
But for example, the phase one parameter, as far as you can see, encryption hedging, for example,
these is the group also for the phase two.
For example, you can see encryption, short hashing, PFS authentication, Key, Palo Alto, one,
two, three.
Looking at us is to ten to fifty four is the remote address the technology we will be using here.
It will be we will be using this technology here as well.
I can show you the technology of using.
So basically, this is the apology we will be using here.
So we don't all of a network is behind this, this network and portal to outside network for to under
one part of it before the other is existing in a data center as part of a topology.
We have.
One hour and five vote, and this will get us into final.
As you can see, we have a large network, 170 to 60 people, one part one, and we have a massive network,
one 10.1, that they should be communicating over the tunnel between the firewall and data center and
the in the head of it.
This is the diagrams we have.
This is the end of the dialogue.
This is the distraction is only showing you the configuration.
So part of the information between these two ends.
So there is a doctor in the middle, you can see there is one network here in that wonderful network
of people network.
This is one of the gateway.
And the second gateway is to 775 11. Zero Network.
So there are a lot of steps involved, actually, because we need to prepare our infrastructure for
this site.
But this site firewall is actually accessible on to underground to the point that wonderful wall and
this wide one is two hundred one of them.
But we will be configuring everything from the bedroom.
That's the challenge we have.
OK, now it's going to over.
Guide in the guide, actually, these are the steps we can see.
This is the spreadsheet we also provided here, our land addresses and Bullycide and the other side
as well.
These are the steps you can see so of the steps.
So first of all, we are going to log into our our one one four five one.
So one one four five one is exactly who exactly is the.
So I'm looking at the for the first up, I'm going to configure one Internet using the Internet interface
one, two, and I'm going to configure a sub interface six one one with an idea of six one one.
That should be delayed reentries what, Jonathan?
Libyan audio, for example, and we are to make sure you can get the beep, beep and tap that human
interface company protocol to be considering everything from Panorama.
We are not considering locally.
So I'm just going into the local file in the of the panorama here.
I'm going to select the weapons tap that will tap into the interface.
That is my template.
So you can see my interface is already created.
Let me check on the five winners, Will, what is configured as well.
Already created.
Let me just check the interface actually is the interface.
When you said someone actually suggested, let's go into the interface, actually.
The firewall itself we have and this is the IP that we have already assigned.
It's.
And you can see this is the IP address we have on the inside of this interface.
Six, six, six, one one, you should be using your legs like six one, two, six, one three, whatever
it is, we assign it to the virtual doctor and they presume this is the security is only three.
OK.
That is how we can configure.
IP address is already configured.
We also consider tipping management so we can bring as well.
OK, this is the evidence in the next step will be.
And also the management profile, if you want to.
The subject of is testing, testing, I think.
And being HTP.
But this is only going to get.
Let's go to the next step, the next step would be.
We need to take a look back at this, why we need to continue to look back at this.
The reason is on our own, our technology here.
On this apology.
We want to simulate this external network for the last time, 116 people on that one.
It should be communicated with this decided already existing on your testimony.
This machine is existing in your network.
It does not exist anywhere here.
OK?
We do not have any machines provided here.
What we need to do is.
You need to actually make sure that you can actually create a back for the simulation of the one of
the death machine.
We are taking a look back at this here.
Look back at this on the panel itself.
And we this idea that.
That's why everybody need to because the new governess.
OK, that's this will be should be the first time.
That is a look back at this number 11.
Let me check now.
We do not have a look back at this.
That's number 11.
IPV for second.
There is a truth.
OK, then the second thing is we need to also make sure we want them to do 16 people want IP.
That is the same IP address over here.
So I started to.
OK, Michelle, you've been and all this ever.
Otherwise, your team may not be working.
That's why.
But it also can figure.
After that, we need to create the three interventions, we need to remember one.
We need to configure three of our guys, basically one for this network, one for this network and one
for the tunnel.
This tunnel interface.
OK, I September.
The know is going to be one.
Now we're going into the existing keeping, using the same template that we are using for the hour,
we will tap.
And I'm going to give you a little interface now that should be done one one.
That should be part of the ritual.
It should be Vivian.
That we should be using the newsroom.
Person'.
And we need to assign an IP address as well, guys standards as part of a spreadsheet.
These are a spreadsheet you can see.
Not to do.
Tom.
Again.
It was like before the end of the Iraq the to.
And in order for management, for the.
Basically, we can of three interfaces, one Internet interface, so it can connect to the other physical
interface, a logical interface with the interface, then we need to configure our Lubeck to simulate
our network behind the landside.
But it also configure whatever interfaces what?
OK, then going forward, we need to configure crypto policy, IP policy and Gateway as well.
Now, this is the Parramatta's we have already provided provided.
You know, spreadsheet.
I will be using the.
And the aid group should be using 19, I believe, here.
Which is fine and using the encryption.
Eighty one, ninety one to 120.
And that should be Shah.
As for those paintings.
I can see the second step we need to configure a second phase transmitter IP barometer.
We will be using E.S.P.
Encryption, we will be using one of the eight.
Authentication we're using SHA.
And no, like.
Looking at.
One.
We need to figure out a better way to reuse so far, like I krypto, I feel is one barometer.
I mean, I'd be happy to parameter we need to configure the gateway and that we will be showing the
masticate, for example.
OK.
And we will be using the side interface.
This interface, the local IP address will be using this automatically want to select the interface,
the IP that will be picked up as well.
Bill Gates made two hundred one point fifty four dollars to ten.
That is as one hour diagonal.
It's 200, 150 fold up to 10.
He will be I'm saying be a little one, two, three.
So that's appreciated.
OK, then.
And in the last option, we could use.
OK, in the advanced option of using Benmore, for example, on auto, depends upon whatever you want
to configure, that's a main mode.
I think we need to also use the IC phase one, which we just created a barometer.
So we saying if you want to establish this gateway that make sure you use the IP as one parameter,
which we just configured here.
So you similar barometers we are using, third step, next step would be we have to be figuring out
what your.
But the old.
We need to consider a static road here as a stepping stone when I look at your landside 101, using
a tunnel interface and using the next one.
And interface, we are using the outgoing interface.
But that should be done.
And unique perspective is the idea that should be.
And them.
One.
But that's a static, OK, so if you see the Bagram here.
This dragging on on standard 101, that's at the to its ability to decide from here and from why it
was all decided.
Again, just very fine.
The next pope should be one or two.
One.
The second the next step will be.
Now, we need to configure one more thing.
This is what we need now, configure the head office to configuring the head office firewall.
But just hang on, there is one more step from here on this wide one on the top line.
All we need to add the IP and information as well.
Here, I cannot interface information.
And we should select your outgoing.
OK, me just recently did we hear?
And the IP six centimeters reconfiguring into phase one.
So we need to also consider the proximity.
Our local interface will be our local network, the 172.
Which is approximately which will be one of the 16 different.
And it will be ten dollars, one point twenty four for any political.
OK.
We just need to check one policy side for VP and tap devices.
We only have one policy here.
Goodnight and long as well.
OK, on this final.
Also need policy from our panorama in our device group.
This is just for the gap, actually, but now we need to configured one more.
So this will be.
So between these two.
And definition again.
Trust and VPN.
All the application, and these are the most 350.
So this is the policy also required.
So know the traffic between the trust and the VPN.
One.
So up to here, we have configured this device configuration.
We have configured the interfaces.
Well, this device we have configured the interfaces, Internet interface, Lobach interface interface,
I think is one crypto IP service to get there as well.
We also configure the IP, so many steps involved and then we also configure the static routing as well
for the channel interface.
Right.
So we also can forget the details that we are talking because the policy as well in the weapon tap,
so we can figure that if the trustee to keep that should be allowed, we put what we actually saw if
anybody initiated the traffic between them.
Now, let's go in and configure the in the meanwhile, let me push the configuration to the one one
four and see what is happening.
Turning to the bedroom, A..
Also pushing the devices, but this time we need to push only two one one for all and not one for 10.
Dimi.
The configuration for went forward is going to be pushed now you can see.
Well, let's start going to the do with the confirmation for the other hour, one more time on it.
You'll find one.
In order to do that, we need to make sure that we do this configuration in our template code at your
neck.
It is the template we are mostly using for the our headquarter firewall.
So we are we are going to configure the same steps here as well.
No need to configure.
So let's go into the again the steps for the our Huo device.
Starting from basically from an interface, we need to create a separate tunnel interface for.
Yeah, so this is the steps we are going to configure.
Our interface for the H0.
This interface is already configured, the traffic is going through the our Internet site, we don't
need any lubezki and we just need an interface, separate and interface we are going to configure.
That will be 11.
No net blow that should be part of the.
Security zone and also should be part of the.
Keep in mind, that should be part of the.
And we need to consider an IP address as well.
I believe it should be turned out to not one.
Level that wants nationally for.
OK, that's a weapon we have created after that, the second stage will be we are going to configuring
the IC phase one barometer's and that can be configured from IC.
Previously done, this was his call.
I'm taking the balloon now, for example, and I'm doing this for the seasonal.
That should be.
19, that should be.
Yes, I believe.
Have a look of the areas and that should be short one only.
OK.
Then for the IP gateway, taking the clone from the previous one.
That should be a yes one twenty eight, I believe.
No TV, no BVA previous and the short one.
Don.
Now we need to configure the gateway configuration I can get me.
I'm just going to add No.
Mansbach.
The interface should be.
We're using one, three, two fifty four.
You've been in the same interface to undermine the 250 four, that's the iPad, us all going over this,
we will be using the remote side will be two seven seventy five.
And I will talk to you before you should be 12 to 24, 13, 14 days before, for example.
This.
There would be five dollars and that one dollar fifty for.
To two hundred point seventy five billion undocumented for 25 to 50.
OK.
Thank.
Local identifier, IP address will be.
Priority should be to zero seven seventy five dollars one one one two five four.
That's what I want to punish you, but just one more thing, I think.
We need to also make sure you set the main mode, for example.
And swaption.
And more and using this piece, one barometer.
OK.
We need to go into the creative difficult.
What you know, and here we need to create a spectacle for them and we are watching Dr..
172.
16.
Should be done on this one, the previous one is used with this called.
It does, and that should be for Dandachi.
But there are a lot of steps involved, guys.
Make sure you complete all the steps if anything is missed on, it's very hard to troubleshoot for the.
VPN, especially.
Not just pushing the configuration and then configuring the same thing which we already done.
Now we need to configure the VPN down IP now.
That is for Cisco.
We need to create this for the.
I get me.
Now, got to get where we need to use this.
I profile, we have used for the following.
This time, the proximity will be reversed, so previously this was this was this was a destination
and from here, this was this will be the source and that will be the destination.
We also need to configure our policy as a.
And that policy should be in our nature.
That is my VPN rule.
That is where Mr. Scott.
Taking the crown of this policy.
Both is tough to.
Yeah, that's fine.
This one should be.
Let me see what is configured now decide.
We have configured our interfaces, we have computer interfaces.
OK, that's the only interface we have.
Could we have a look back as well?
We have configured the Internet as well.
And these are what policy on the run for.
One more thing we need to do is just for the insight, we need to make sure that we can also do the.
What, 500?
You can also know that about 500 on the.
Internet site.
OK, from Internet to Internet here.
That should be applicable to one one four as well.
Tragedy, the end for the 40.
Four for five hundred, which is a traffic, and that is our scheduled.
Now, these are the steps that we have done that will push the Panorama configuration.
Something is missing.
Give me an idea.
I think that tunnel interface is missing.
We shall be using this interface, right?
Yeah, that's what the Palo Alto Navan and Cisco, what people want.
Let me push the company into the bottle now.
What happened?
No, this is verification.
It's confidential, is fine.
Panorama compression is done to the computer, pushing the completion to all the devices now, which
have the devices, one in four and one one can all of them.
OK.
The confusion is crucial to the nuclear arsenal.
This is one windfall, for example, and this is the gist of the head office Bible.
You can see the competition for you to give a couple of minutes, we're getting one error message for
the failing.
The configuration on our blog got us into five shows that the branch is not allowed to keep quoting
the rule, but look like 10 is going well so far as you can see.
Ninety nine percent.
Let me just quickly check that we created our share policy.
No, let me move that.
And the.
I mean, all four of this and three.
Example from here.
VPN.
Both.
Just three only.
Between pistoles and.
We be.
I guess that's what be.
We would vote for only and hopefully we should look.
Is creating a separate.
But.
And, you know.
You can see our panel is up, so we can see previously it was not working and now you can see traffic
is going through.
Previously it was not working, as you can see the clock.
So I'm just looking into my machine, into test machine, and my test machine is indeed this is my test
machine can do a 5.0 network and I can see that my diagram as part of a diagram.
If I follow the diagram here, this diagram from here, I can begin up to 116 people, one on one.
OK.
I'm constantly thinking a.
It's working, and if I pay some.
The is the city.
But.
But you see, it's just just looking like connecting directly to each other.
OK.
That's going into the demo and you can easily see this, all the configuration from here.
So first of all, you can see one one four five, all you can see is the epicenter of this information.
You will not see anything in the panorama.
In the panorama.
Yes.
You have configured in the template, for example, you have configured those columns, these two tunnels.
But you can see that there is no visibility of these tunnels here.
You have to look into the fireball and then you can see the effect on them because actual traffic is
going from here.
This is the first one.
This is the eighth to.
Democrats are going on.
You can see the.
OK, here's two parameters, and this traffic is going from the front between to do these two.
Also, you can check in the monitor, for example.
You can see if my traffic is coming from.
And you will also see it's.
And another thing that you can see in the monitor tab, go to the system and you see.
If you.
You can see these web logs here as well.
But you can see now a green one for one for Cisco.
Everything is working fine as expected.
If I just click this VPN, you will see.
I installed AC.
He installed this is these are the biggest one piece to successful.
Phase one, phase two, and you can see negotiations started responding.
Everything is working, success, success, success, everything is working.
If I just do one thing, if I just click here and for example, I like this and I say we start.
Arriviste, for example.
Yes, well, the testing proposed.
But you can see.
I can see from traffic going from.
Monitor.
OK, you can see here.
That's the rule we have applied.
These notification days, knowing that everything is going inside the tunnel.
So this is how you will be seeing you can configure Palo Alto to portal VPN configuration, any question?
Thank you.