All right, we're going to take the time to make sure we've got all this
information locked
down.
What we're going to do is we're going to draw the following information onto
this diagram.
So I'd encourage you to pause the video, sketch out this diagram and go through
drawing the
tunnels and the tunnel types.
So for both data plane and control plane, where it says the word VPN create an
identifier,
either use one that you're allowed to use or use one that you have to use
depending on
the situation, identify the OMP peering, which devices in here form OMP peering
and
then also the route advertisements.
How does a route get advertised?
You know, hide my head there, but the route advertisements are how do we
advertise a
route through this network?
So again, go ahead and pause the video and then unpause it and we'll go through
the
solution together.
So drawing out the tunnels here.
There's quite a few tunnels to draw.
And so we can start with our IP sec or GRE tunnels.
I'll just label them as IP sec tunnels.
This is in the data plane.
And then we also have a full mesh of tunnels over here.
These are going to be DTLS connections because the validator must use DTLS and
the control
and management can use DTLS or TLS.
And then also keep in mind that the controller and manager are going to
maintain whoops, I
missed.
There we go.
So we maintain DTLS or TLS connections to all of the edge devices.
Now what about the validator to the edge?
Yeah, we're going to run DTLS connections here and here, but those are
temporary and
they get torn down.
So if you marked them, great.
If you didn't mark them because you understood that, then either way, that's
fine.
Again, our focus here is on making sure we have an understanding of where the
tunnels
are and where they belong as far as VPN IDs are concerned.
So we have a few that are reserved specifically VPN zero is going to be the
underlay, the
out of band management VPN is going to be 512.
And then I am allowed to pick a VPN ID that is eligible.
So I could go with something like VPN 10 or 100 or 1000 something along those
lines.
Remember, we can go all the way up to 65,530 as of the time of this video.
So I'd put VPN 100 on both sides, which would allow these two layer three
segments to be
able to communicate with one another.
Next up, OMP peering.
OMP is going to leverage the controller as the route reflector.
And therefore, we're going to form peering across this DTLS or TLS tunnel
between the
edge device and the controller.
And then that ties into the route advertisements here.
The route advertisements are going to I'm going to take this these subnets.
I'm going to advertise them up to the controller this way.
Same thing here.
I'm going to advertise them up to the controller this way.
And so I end up hearing about it thanks to the route reflecting nature.
And now I know if subnet A is up here and subnet B is down here, we're able to
communicate
not this way, not according to the control plane, but directly across those
tunnels and
will leverage the T locks in order to figure out where we're going and how that
all works.
So we're able to diagram all of that out.
And those are the primary takeaways from the skill.
And again, we're going to continue to build and build and build on these
concepts, especially
as we start to really see them come to life when we're doing configuration in
the lab.
I hope there's been informative for you and I'd like to thank you for viewing.