The last thing that I want to do is bore you with slides that talk about RFCs.
They're typically very useful resources for information
regarding protocols and technologies, but let's face it,
they can be a very dry read.
So instead of talking about them and what they can provide,
I'm just listing one here.
You can look through them at your leisure if you want
any more information regarding IPsec.
Listed under RFC 6071, which is the roadmap for IPsec and IKE,
are all of the current RFCs that have to do with IPsec
and its corresponding protocols.
Let's hop into our lab environment really quickly to get the lay of
the land and show you how the network is set up,
as well as how we'll be conducting the remainder of the course demos.
For the most part, we'll be utilizing a system of configure,
debug, and analyze to figure out how IPsec works.
I mentioned earlier in the module that I'll be utilizing Cisco's VIRL to
demonstrate the IPsec protocol suite and its functionality.
Here, as you can see, we have a relatively simple topology with the Globo_HQ,
Globo_Site1, and the internet connecting them.
Of course, in a real-world environment,
there would be several devices between the two sites that make up the internet,
but for brevity, we're going to go with this.
We can more easily see the packets going back and
forth from a single internet router.
So these configurations are being provided to you in the course download files.
They're relatively simple.
We're running OSPF between the WAN links for HQ and
Site 1 connecting to the internet,
and we have a little bit of redistribution going on in here.
Most large enterprise organizations run BGP or OSPF to their ISP,
and I chose OSPF for this simulation for simplification.
Really,
all we need is to be able to have these WAN links connected to each other.
So thinking about the configurations, the WAN link for HQ is 45.45 .45 .2,
and the Site1 WAN link is 90.90 .90 .2.
Their private IP networks are the 172.16 address space,
but different subnets on them.
Looking at the interfaces with the HQ router,
we have the 45 network connected to the ISP.
Doing a show ip route,
the ISP is giving us all of the network information for the Site1 router,
so we have IP connectivity to be able to establish our IPsec
VPN links to learn about the protocol suite.
Doing a ping, this is verified.
We're going to be using our Wireshark program to capture the packets on
the routers to see what is going on with the protocols and verify the
configuration and information that we need to.
We'll use the Packet Captures option that's built natively into
VIRL to capture on the interfaces that we need to,
and that will open directly into our Wireshark application on our machine.
From there,
we'll be able to analyze the traffic and dig into the
packets to see what's going on.
Like shown here, in VIRL, we'll start with the offline capture,
then let it run as we send some traffic over the link.
As an example, I used pings just to show you how this is going to work for us.
We'll be able to see the requests and replies going back and forth,
and this will be way different once we get the IPsec protocols set up.
Going into the VM Maestro application that we used
to access the viral simulation, I can see the packet capture,
then download it, and view it automagically.
Pretty cool, huh?
As you can see,
we can see just about anything with regards to the
communication between the sites.
We see the internet traffic too, but that's okay.
What we're going to focus on is the VPN connections
between the two WAN links for the sites.
Alright, enough playing around in the lab for now.
Let's get our learn on and move into the next module after we do a quick review.
Getting into the review of what we covered here so that we
can get moving on to the fun modules and learn all about the
IPsec protocol and how it works,
we started off with the course introduction and overview and
took care of some of the housekeeping tasks.
After that, we had a discussion about IPsec and what it is.
Then,
we talked about why organizations use IPsec and some
of the benefits that it provides.
After,
I shared the RFCs for IPsec and hopped into the lab
to show you around a little bit.
Coming up,
we'll be starting the descent into the world of the IPsec suite and
getting to know the building blocks and components of it. Join me in the next module.