To reinforce the concepts of using and working with the identity services as
part of our distributed firewall rules,
here is a scenario I'd like you to walk through with me.
And here's the scenario.
People who are in the Domain Admins Active Directory group, for example, let's
say that a user is logged in right here,
and that user is a member of that group, they should be able to get access with
the SSH to this IP address right here.
Unfortunately, there's a user named Carmine, and when Carmine is logged into
this VM, this VM is called VM-11-client. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
this VM, this VM is called VM-11-client.
When Carmine is logged in and attempts to access SSH to that IP address of 23.1
.2.1, it is not working.
In fact, let's take just a moment. Let's go to this VM, we'll log in this Carm
ine, and we'll verify that we cannot access this IP address with SSH.
So here we are at that VM, we'll go ahead and log in this Carmine, let's also
make sure we're logged into the right domain.
So we're logging on to NSX demo, we're going to log in as Carmine, and we'll
put in the password, and click on the arrow to log in.
And that looks like it's working, so we're logging in as Carmine. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And that looks like it's working, so we're logging in as Carmine.
So from a command line, let's verify we can ping 23.1.2.1, and that is working.
So we have IP connectivity, but if we try to use SSH, we'll do a dash L to log
in as a user of iOS to the IP address 23.1.2.1,
and Survey says that is being rejected. So connection refused right there.
So what I would like you to do is right below this video, there are a series of
screenshots showing some configurations done in NSX. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
screenshots showing some configurations done in NSX.
We're getting group membership, there's also configuration in Active Directory,
we're getting group membership.
And what I'd like you to do is take a look at the screenshots, and based on
those, identify what you think the problem is regarding the white Carmine
logged into this client VM right here,
is unable to access this IP address using SSH.
And then also, in addition to it, just identifying the problem, I would love
for you to take a moment and think about what we would do to solve the problem.
So that, my friend, is our troubleshooting scenario. I would encourage you to
give this a few minutes of thought. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
give this a few minutes of thought.
And then when you're ready, join me in the next video, and we'll walk through
this troubleshooting scenario together.
[BLANK_AUDIO]