Hey everybody and welcome to the next video.
So in this video I am going over how to configure a VPN tunnel an IP SEC VPN tunnel on P.F. sense.
Now in previous about modules and the networking modules specifically we talked about a little bit about
VPN and VPN had its own modules as well about how the IKB tunnel works.
Now what we're going to do in this video is we're gonna be configuring this and I'm purposely configuring
only one side of the tunnel because that's what you guys are going to do in the hands on video at the
end the module but we'll go over that a little bit at the end of this video.
So we've loaded up RPF sense module which is what we were using before right.
So what we're gonna do what I'm going to do real quick is I've reset my VM so I'm going to go ahead
and rebuild our DMC that we had before because we're going to use our DMC network as our internal network
that we're going to be pointing to.
We'll just go ahead and turn this on
so and deployed perfect.
So we go in here we've got our DMZ network.
So the first thing we really want to do is go to VPN IP.
So in here we can see ad P1.
P1 stands for phase 1.
So if we go ahead and click add you're going to see quite a quite a few options here.
Right.
So the first one is going to leave Iki default.
This is an IP for protocol the interface that we are leaving from is our way an interface which is our
external interface the remote.
Gateway is what's important here because you need to have this is the endpoint that you're going to
be connecting to on the other side of the tunnel that has a tunnel configured for it that matches the
tunnel built on this side.
So in this case we'll do one in two and succeed at 1 14.
Right now what to call this site to site.
Now what's important here is that we're doing mutual PSA.
We're not gonna worry about that for now.
We've talked about aggressive and main mode before but we're going to leave it as main.
Now an important part here is the identifying peers.
So when you have built up a tunnel you can identify by a few things such as the user name distinguish
name IP address.
So what I want to do is identify this host on this machine on this person's machine by my IP address
in the pier.
I want to identify based on the pier.
Now it's important that these match on the other end of the tunnel.
Otherwise you're not going.
It's not going to work.
Now I appreciate key.
Those are the key that gets passed between both in the essays.
Now we're just gonna randomly generate a key here but you're gonna be able to copy this out later because
you'll need it on the other side of the tunnel.
We'll leave the algorithm as a yes 128.
That's completely fine and we'll leave the rest as default symbol in it safe.
Right.
And apply so that's been phase one we set up how we identify the remote host how what remote hosts we
need to identify it as and what options we want to use for encryption.
Now if we click on that that symbol right there we now have ADD P2 which is going to be phase two of
the tunnel which can be like where where on the network it's actually going where things need to be
routed.
Gwen at B too.
So we have a few options here.
We have transport and tunnels we're going to use tunnel for now the local network that we want the other
traffic to be able to reach is our DMC network in this case we can't put anything else we if we want
a specific IP address on its own or another network that maybe we don't have a name for.
So we'll call it DMC.
We're going to leave the net and behind that alone.
Another remote network.
We need to know where we're going.
So in this case we're just going to use an address we're gonna use the same address 1 9 2 1 6 8 8 1
14.
This is just whatever the endpoint is that I'm going to be using.
And in most cases you're going to want this to be a network so we could do actually this return to zero
to do that.
One slash for
so this is this is our end network.
So the network that we want to go to.
So when the router sees traffic or receives traffic with this network on its destination as the destination
IP it knows that it needs to go over the tunnel not out to the Internet.
And we'll call the site to site as well.
Now this is where we can pick ESPN H.
We're going to leave ISP or ISP for now leave all the defaults alone.
What's important here is the automatically ping if you leave this blank.
It doesn't do anything.
However if you want to keep the tunnel alive consistently it needs traffic through it.
So what you can do is you can set this to whatever the endpoint is on the other end and say and apply
now.
Right now we have both phases running where we have both phases unable to actually start the client.
When you go to status IP sec and then click connect.
Now in my case I don't have the other end set up at this point in time.
But what would happen is this connecting would say connected and then it would show you the tunnel right
here.
But what I'm going to do is leave this video here.
This is how you configure the tunnel.
We'll do a quick one more look at the settings here.
So we've set the remote Gateway which in our case was a 10 networks of 10 0 0 dot 1 1.
We set the description which is completely fine neutral GSK cable left all these default.
We generated a new share key.
Make sure you note this down somewhere and we left everything default then for our Phase to go and apply
actually and then for phase two.
This is where we talked about where we want to send everything.
So everything that's coming from the remote side of the VPN the other end of the site not this one but
the other one is going to be going to our DMC network and then we're going to win on our side we're
going to go to the remote network which in this case is 10 dot 0 0 about one such 24 and we'll leave
ISP alone.
And we've set the automatic ping coast to the gateway on the other side.
So that's been setting up the tunnel in P.F. sense.
Now what I want you guys to do is run through this on this single P.F. sense no now because we're gonna
have more instructions on how to actually build this and what the hands on part is.
In the last video the module.