Sometimes a technology or some new widget will show
and we'll think, yeah it's all right,
until we see how it solves a problem or the application
it was built for.
And once we see the need for it we're like, oh my gosh,
where have you been hiding all my life.
So, in this video I'd like to chat with you
about some of those aha moments regarding why FlexVPN
could step in and be used as a technology
to meet a business need.
So, let's start off with two sites.
We have site 1 over here on the left and site 2 over here
on the right.
And if they want to have a secure communications WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And if they want to have a secure communications
path over this transit network, it
could be internet or something else,
we could build a site to site tunnel.
So, great we've done that several different ways.
We've used crypto maps in the past in the previous sets
of videos, we've used day a tunnel interface, VTI,
a virtual tunnel interface, fantastic.
And so, that's a pretty simple task, no big deal.
We really don't need FlexVPN for that functionality.
We can do it with traditional methods.
However, what if there is some kind of a big emergency
and all of a sudden we need all of our employees
to connect from home. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
to connect from home.
So, we have Bob, and Lois, and others who are all now
connecting from their homes and they
need to connect into our corporate network.
So, in addition to the site-to-site VPN,
we now need remote access VPNs and the remote access VPN
is going to involve authentication as well.
So, when Bob or Lois connects we're
going to have to involve AAA, a RADIUS
server, or some type of server on the back end that
can authenticate them, allow them in,
including using pools of addresses
or handing out dynamic IP addresses for their journey WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
or handing out dynamic IP addresses for their journey
on the network.
So, if we want a solution that supports
the site-to-site tunnels and the remote access VPNs,
we need something-- something more than just
our traditional options.
Also, what if we have similar sites and these sites
all have a hub and spoke configuration
with IPsec tunnels and we said, oh we
need these two spokes, these two sites,
to be able to talk directly to each other including this guy
right here.
Now, one of the solutions that we can do for that
is DMVPN, dynamic multipoint VPNs,
and we've got a whole separate set of videos based on that. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and we've got a whole separate set of videos based on that.
And the big part there is that it
uses multipoint sharing tunnel interfaces and uses an HRP.
But what if we need to do all these at the same time?
We need remote access, we need site-to-site,
we need spoke-to-spoke, can we do it.
And the answer is yes, if we use VPN.
And even though FlexVPN does have more modular components,
that's a good thing because then we can mix and match.
And we can train a device that, OK when
a remote user's connecting in, based on where it's coming from WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
a remote user's connecting in, based on where it's coming from
and the authentication, do this.
Or if they site-to-site tunnel do that.
Or if it's a dynamic spoke-to-spoke communication
using NHRP, it can handle that as well.
And the goal is to be able to handle
all of these types of scenarios without having
to have separate dedicated devices or appliances
for each function.
So, if we were to summarize we could say this,
can FlexVPN do this regarding IPsec communications
and security.
The answer is yes and that includes
remote access, site-to-site, AAA integration,
and a big part of FlexVPN is that it uses IKE version 2. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and a big part of FlexVPN is that it uses IKE version 2.
And that's a big deal because it's more interoperable.
So, if you have other vendors--
Check Point and Palo Alto-- and other gears and devices
that want to connect into your network
and be part of the VPNs, well if they support IKE version
2, which most of them do, Cisco's FlexVPN
is built on IKE version 2 as well.
That makes it more interoperable.
So, now that we have kind of a taste of some
of the functionality that FlexVPN can bring to the table,
in the next video I'd like to share with you some
of the individual components and building WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
of the individual components and building
blocks that are used when implementing FlexVPN solutions.
So, I'll see you there in just a moment.
Meanwhile, I hope this has been informative for you
and I'd like to thank you for viewing.