So our first step right here is to do some cleanup and also verify our existing
topology.
So let's head over to the NSX manager over at site 3 and begin.
So here is the light mode for the NSX manager also for site 3.
So let's go to networking and with networking selected on the left, let's go
down to network
services and click here on VPN.
So currently let me go ahead and collapse the left hand side there.
So currently we have two IP successions.
One's going to an external Cisco router, the other is going over to site 4. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
One's going to an external Cisco router, the other is going over to site 4.
And what we want to do is go ahead and delete those.
So I'll grab site 4, click on the three dots, click on delete and click on
delete.
It says here I can't delete it because it has children or is being referenced
by other
objects.
So let's do this.
Let's go to our tier 0 gateway here at site 3 and for the tier 0 gateway, let's
edit it
and then we remove some static routes.
Let me go ahead and go to routing and go to static routes.
And let's remove any of the static routes that we are no longer going to need WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And let's remove any of the static routes that we are no longer going to need
after we delete
the IP successions.
So we'll do a full cleanup here.
So here's our route to our Cisco subnet for the external VPN.
Here is the route for the site to site VPN between site 3 and site 4.
We'll delete that as well.
We'll go ahead and click on refresh and we'll leave the one default route which
is going
through our service provider at the next top address of 23.1.2.1.
Fantastic.
So we'll close that and close that and then we'll go ahead and we'll click on
close editing
and then still with networking selected, we'll go on the left down on the
network services
to VPN right there. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
to VPN right there.
And then with VPN selected, we're going to go to our IP successions right here.
So we'll delete the IP succession to site 4 by clicking on three dots clicking
delete,
clicking delete and survey says that looks good and we'll also delete our IP
succession
to the external Cisco router.
So we'll click on the three dots for that session, click on delete, click on
delete.
That looks great.
We'll do a refresh there.
Fantastic.
We know IP successions also.
Let's go ahead and let's clean up any custom profiles we may have made.
So there's an Ike profile that we're not going to be using anymore. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
So there's an Ike profile that we're not going to be using anymore.
So we'll delete that, delete, click on refresh and I think that looks good from
here.
Then if we go to local endpoints, we have a couple local endpoints that we set
up.
We'll be recreating one of those as part of our LTVPN.
So we'll go ahead and delete our current ones here.
That way we're going to start from scratch.
You can see every single step along the way.
All right.
So we have no local endpoints configured anymore.
We have no LTVPN sessions because we haven't done that yet.
We have no IPsec sessions because we deleted those.
And last but not least, let me go ahead and delete the parent VPN service here WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And last but not least, let me go ahead and delete the parent VPN service here
for IP
sec.
So we'll click on the three dots, click on delete and click on delete.
And then we'll refresh that.
And it looks like site three is cleared up and ready to go.
So we go to network topology.
Here is our site three.
Currently, if we hover on services, it has no VPN services enabled whatsoever
yet.
Also here in our tier zero gateway, let's just confirm for a moment our virtual
IP
address.
And here's our virtual IP address for the service provider, a, which is 231230.
Just want to verify that was still in place because we're going to use that IP WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Just want to verify that was still in place because we're going to use that IP
address
was who are appearing from site three, which will be the L2 VPN server over to
site four,
which will be our L2 VPN client.
So let me click on close here and collapse that and just confirm once more that
on site
three, we have absolutely no VPN services whatsoever configured.
Now let's do this similar treatment over at site four.
So here's site four in dark mode and we'll go to networking and let's start off
with
the tier zero gateway and we'll edit our existing tier zero gateway there and
we'll
remove the static route that we configured in a previous set of videos for the WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
remove the static route that we configured in a previous set of videos for the
benefit
of our site to site tunnel over to site three.
So we'll go to routing and then we'll click on the hyperlink here for the count
next to
static routes.
And then we'll leave our default route, but we'll remove the static route down
to 1033
by clicking on the three dots, clicking on delete and clicking on delete and
refresh.
That looks great.
So we'll click on close and then we'll go down to our VPN section here and
click on yes to
continue.
And then here with VPN selected, we'll go ahead to IP successions and let's WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
And then here with VPN selected, we'll go ahead to IP successions and let's
delete the
IP succession that goes over to site three and click on delete again.
That looks good.
Let's also make sure we don't have any profiles or anything else that we
created customized.
So that all looks like the defaults.
Fantastic local endpoints will delete the one we created earlier by clicking on
delete.
So that's gone ltvpn sessions, nothing there IP [garbled] sessions, nothing there and
then VPN
services just for a nice fresh start.
We'll delete that as well by clicking on delete and delete.
That looks great.
So I'll refresh that.
Let's also just confirm the virtual IP address that we're using on our tier WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Let's also just confirm the virtual IP address that we're using on our tier
zero gateway here
at site four, which is my T zero violet site for.
So we'll expand our T zero gateway here and then for the HAVAP, we'll click on
the hyperlink
just to confirm it's at 24.1.2.40 fantastic.
So click on close and we've now confirmed the virtual IP addresses here at site
three
and site four.
We also cleaned up any existing VPN services and or IP [garbled] sessions that we had
in place
and between site three and the external Cisco router. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
and between site three and the external Cisco router.
And that puts us into perfect striking position to implement from scratch our
layer to VPNs
without any existing VPN services or IP sec or L2 VPN sessions in place.
And that way we have the opportunity to see every single step in the process
and not build
upon or use some other object or configuration that was previously in place.
So with that in mind in our next video, let's begin the configuration of layer
two VPNs
starting here at the server, which is site three. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
starting here at the server, which is site three.
So I'll see you in that next video in just a moment.