All right, let's go ahead and dive into this challenge.
Now, hopefully you've taken a few moments
to sketch out this topology maybe a couple of times
in order to make sure we understand
how the overlays are going to be built out.
But we're gonna start off by taking a look
at a plug and play connect question,
which specifically is asking about the DNS entry
that we have to be able to reach.
So what do we have to be able to resolve?
Well, if we're using Cisco's solution,
plug and play connect,
remember this is going to be device helper.cisco.com.
And as we said, this is a URL that's used
in other parts of the Cisco portfolio as well.
Meanwhile, if we happen to be onboarding a legacy
Vedge device and we're using Viptela's ZTP,
well, that's going to be ztp.viptela.com.
So we might see both of those out there in the real world.
We just need to make sure that these are resolvable,
either via DNS or potentially hard coded entries.
Now, from here, let's go ahead and dive into
the situations here with the colors and with the T-locks.
So our first question is pretty straightforward.
What is wrong with the color configuration?
If I look at things, it looks like silver
is supposed to be tied to this one internet circuit
and gold is tied to the other internet circuit.
But over here in router three, we see a problem.
We see that gold is assigned to both of these.
This has two errors involved.
First of all, we want to be matching everybody else
in the network and that's fairly straightforward.
This should actually be using the silver color
rather than gold.
But the other problem to keep in mind
is that we cannot in any circumstance
assign the same color to two different T-locks
or two different interfaces in the end.
So that is going to be a quick fix for this
is to make that link on router three a silver connection.
So next we're going to draw the IP tech tunnels
that will be formed by default in this environment.
Now that might feel like a fairly straightforward question
but it might trip us up a little bit too
if we're not careful.
So first of all, let's start with silver connections.
We're forming tunnels as a full mesh
among our different devices across the silver T-lock.
And furthermore, we're going to do the same thing
with the gold.
We're going to see that our golds are forming a full mesh
across them.
But this is where we might get tripped up a little bit.
We have to be sure to remember that these are both internet
circuits which means that there's an implied connection
between them.
This allows router one to be able to go out the silver T-lock
and connect to the gold T-lock here on router three.
And for that matter to the gold T-lock on router two.
And so we're forming not just a full mesh
across each individual internet circuit
but we are actually forming full meshes
across the many different T-lock combinations.
So I'm going to be able to connect
into the silver T-lock this way from the gold on router one
and gold to silver.
We just kind of keep going here.
Where this silver on router two
is connecting to gold down on router three.
And then router three's silver connection
is connecting out.
I believe we still need to get to the gold here
and we need to get to the gold over here.
So what we should see is two connections
coming in on each color for each T-lock.
Kind of crazy how many tunnels end up forming
but again because of the implied connection
between internet circuits this is a very, very full mesh type
of deployment.
And so that might not be what we want to do.
So that would be a real world conversation
but let's go ahead and go to number four
which is what happens if the gold color is set to restricted.
Well, if the gold color gets set to restricted
all that ends up happening is we remove all of those connections
that we just deployed.
The reason for that is because if it's restricted
that means that silver can not communicate to gold
and gold cannot communicate to silver.
Even though there's IP reachability
a restricted color can only connect to T-locks
of the same color.
And so now we're back to silvers connecting to silvers
and golds connecting to golds
even though again there is IP connectivity among them.
So that is certainly one way that we can resolve
the super full mesh conversation
but we still have to decide should router two
and router three have connections to one another.
And so we continue down that topology path
of making sure that we have the overlay built out.
Again, the network that we want
it should be very, very intentionally created.
So that brings us to the end of this challenge.
It kind of connects a lot of the dots as far as
again thinking about plug and play connect and ZTP
but also understanding the colors
making sure we remember what the difference is
between private and public colors
and generally speaking how colors on the T-locks
impact our overlay creation.
I hope this has been informative for you,
and I'd like to thank you for viewing.