In this video, I'd like to chat with you
about the concept of FlexVPN, what it means,
and where we might find it.
So let's imagine we find ourselves in a situation where
we need to build remote access VPNs for external users coming
in, we also need to do site to site tunnels
and if we have multiple sites and we want to do
spoke to spoke connections between here and here,
how do we make all that happen?
And the answer is likely going to be
on a Cisco iOS environment this is going to be FlexVPN.
Now when we see the word FlexVPN think of OK, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Now when we see the word FlexVPN think of OK,
what can I do as far as IPSEC is concerned with FlexVPN?
The answer is everything.
Remote access VPN, spoke to spoke,
site to site you name it.
And now one of the key elements that
makes this possible with FlexVPN is that it uses IKEv2.
Now IKEv2 has more moving parts.
Because R1 can differentiate based
on a whole bunch of different clients or devices connecting.
OK, who are you and then based on who you are,
what methods do I want to use for the IPSEC?
Do I want to use this encryption, or that encryption, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Do I want to use this encryption, or that encryption,
or this authentication, or that authentication?
So FlexVPN is what we're going to use again, it uses IKEv2
primarily and there are a bunch of defaults that are in place.
So there are defaults for the proposals that'll be used
and the policies that are going to use.
So if you can use some of those defaults
that can save you configuration time
or you can even modify some of those defaults.
The goal was even though there's more moving parts
in the configuration of FlexVPN they gave us
the option of using some defaults to make it easier
to configure. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
to configure.
So it's just a heads up regarding FlexVPN.
Because it does support IKEv2 and IKEv2 alone
there's more moving parts and because it can be configured
in so many different ways, that configuration for FlexVPN
does take more commands at the CLI to get it done.
However, I've got a separate set of videos
on a remote access that leverage FlexVPN.
I've also got a set of videos with site
to site tunnels using FlexVPN and IKEv2 so you have a chance
to see it in detail of the configuration
and the verification in those sets of videos.
And then the next video, I'd like
to chat with you about yet another option for implementing WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
to chat with you about yet another option for implementing
IPSEC and that's referred to as group encrypted transport
or as his friends call him get VPN.
See you in that next video in just a moment.
Meanwhile, I hope this has been informative for you
and I'd like to thank you for viewing.