For our game plan for implementing our layer 2 VPNs,
I know we currently have a couple different IPsec VPN tunnels currently in
place.
So I recommend our first step is,
let's go ahead and do a little bit of cleanup so that everything we're going to
configure
is going to be directly related to the layer 2 VPNs,
and we're not leveraging or using some existing configuration.
So for our first step, it'll be some cleanup and verify our current existing
topology, including the reachability for each of the sites using the virtual
IP address associated with the T0 gateway. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
IP address associated with the T0 gateway.
And for this set of videos, let's go ahead and use site 3 as the server for the
LTV
PM and we'll use site 4 as our client for the LTV PM.
And then once we've done a single client, you simply repeat that process as you
add
another LTV PM session to get another client and another client, etc.
So for the demo, we'll go ahead and use site 3 as our LTV PM server and site 4
and a T0 gateway there as our LTV PM client.
So as far as our game plan goes for our T0 at site 3, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So as far as our game plan goes for our T0 at site 3,
we want to go ahead and create two VPN services and associate them with the T0
router here.
And the question might come up, well, why are we going to create VPN services?
If we're only implementing layer two VPNs, the answer is because behind the
scenes,
we're still using IPsec.
So we're going to set up and enable IPsec VPN services here on the T0 gateway
and also
L2 VPN services and specifically server.
So it'll last that when we enable the L2 VPN service.
Do we want to go ahead and set this up as a server or a client?
And so we'll enable those two services, one for IPsec and one for LTV PM here WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And so we'll enable those two services, one for IPsec and one for LTV PM here
on the
red site three tier zero gateway.
And then once we add the VPN services enabled, we'll then go ahead and create
our L2 VPN
session over to site four.
And if we were going to bring in additional clients, we could repeat that
process
and create another LTV PM session to site five and site six, etc, etc.
So once we've set up our site three as an L2 VPN server, we can then go ahead
and
start working on our clients.
So we'll say our next step is going to be the T zero gateway in our topology
here at WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
here at
site four and over here at site four, we'll also need to enable VPN services,
one
for IPsec and one for L2 VPN, except this time at site four, we're going to go
ahead
and set it up as a client when we enable that service.
And then once we have the VPN services enabled here at this T zero gateway,
just
like we did on the server, we're going to create an L2 VPN session to S three,
which
is our server.
Now, part of the cool thing about setting up the client is that we can copy and
paste
a lot of the configuration information directly off of the L2 VPN server and WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
a lot of the configuration information directly off of the L2 VPN server and
paste
it in at the L2 VPN client and it makes the configuration go a lot quicker.
And then once we have our server in place and we have at least one client in
place,
we didn't want to go ahead and create our segments and link them and associate
them with the L2 VPN service.
So let me go ahead and put some dividing lines here to make it a little bit
more
clean and I'll also add some color.
So this is going to be site three, which is my red site here in my topology.
And our client is at site four, so I'll put a little color code there as well. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And our client is at site four, so I'll put a little color code there as well.
And then for the three segments, I'm going to go ahead and put a little yellow
mark
there to represent the individual segment.
So we'll at site three, create a segment and associate it with the VPN service
at
site four, create a segment.
And as far as a big picture view, let's also use this addressing space of 1099
zero for the segments that are all linked and associated with that L2 VPN
service.
And that way, if we had clients here or here or at additional sites that are
connected to a segment that's associated with the layer two VPN service, all WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
connected to a segment that's associated with the layer two VPN service, all
those
VMs would then be connected to that same layer two broadcast domain and a same
logical layer three IP addressing space.
So with that game plan in mind, in the next video, let's go ahead and do a
quick
cleanup of our current existing IP sectionals.
So we'll remove all the VPN configuration.
We'll verify our apology.
Then after we've done the cleanup and verified our apology, we'll then proceed
to configuring the server over here at site three.
So I'll see you in the next video as we continue this process together.