WEBVTT 0 00:05.300 --> 00:12.030 VPN high availability I'm going to run it says IP between Node 2 in our face right. 1 00:12.280 --> 00:13.770 If I'm running this IP. 2 00:14.020 --> 00:19.180 Both of them will not be active at the same time one will be active and he'll be responsible for this 3 00:19.180 --> 00:20.590 virtual IP. 4 00:20.740 --> 00:25.740 The default gateway from here will not be to the physical address if I will not be to the physical address 5 00:25.770 --> 00:26.430 a firefight. 6 00:26.560 --> 00:34.720 It will be to this one virtual IP and many opt out for this virtual IP out of these two devices the 7 00:34.720 --> 00:37.870 one which is active will be the one who will reply to that. 8 00:39.080 --> 00:45.870 So leave it to the package will be moved like two if I do is active I'll do the same redundancy on disabled 9 00:47.740 --> 00:53.690 little redundancy on this side also so from here also a default out will be pointing to a virtual IP 10 00:53.690 --> 01:04.860 off to 45 to 54 then I have two IP which will IP is on two different interfaces so if I do goes down 11 01:06.420 --> 01:10.530 if I to goes down I 5 should be become the active. 12 01:10.710 --> 01:16.290 The address will still be could be the same but now I 5 will respond with his mac address to decide 13 01:16.890 --> 01:26.390 to drop it is from this that is your SSN but now what do I want to do I want to create a tunnel an IP 14 01:26.390 --> 01:28.490 SEC tunnel from here. 15 01:28.490 --> 01:30.900 This will be the source what will be my destination on the tunnel 16 01:35.220 --> 01:42.240 the virtual IP I won't create the tunnel with this interface I will not created with this interface 17 01:42.510 --> 01:48.330 I created with this virtual interface who's gonna act as the virtual interface the one who is active 18 01:49.130 --> 01:55.380 so the active days he's applying to that interface the tunnel at that time is between this and this 19 01:57.210 --> 02:04.540 if this is the active way guide the tunnel is between this and this the tunnel is decrypted here and 20 02:04.540 --> 02:10.500 then you're actually days you're inside is here so both of them can teach you that that's not an issue 21 02:13.250 --> 02:24.370 I'm just having redundancy in Second It's called High Availability scope I will be we will do that because 22 02:24.370 --> 02:29.770 we'll consider this guy as B as our prime so if he goes down and he comes back up again we give him 23 02:29.770 --> 02:37.500 the power up and then he comes back up again he'll become the active he'll become the active. 24 02:38.710 --> 02:39.060 Right. 25 02:39.740 --> 02:49.270 Let's do this let's configure standby at just IP is called standby I have done the IP already I've not 26 02:49.270 --> 02:56.860 done this just had me by now configured I do an hour cipher pinging he can reach this guy this site 27 02:57.130 --> 02:58.370 and he can also read this. 28 02:58.780 --> 03:07.730 Similarly our faith can reach this side of the network and decided that it has verified that being tendered 29 03:07.750 --> 03:13.220 one dog one twenty five the network between 1 2 and 5 not one can eat each one. 30 03:13.400 --> 03:13.770 Yes. 31 03:13.860 --> 03:19.050 You reach our fight from this which he can come to for faith. 32 03:19.090 --> 03:20.740 Can you reach ah for. 33 03:21.190 --> 03:22.150 Yes he can. 34 03:22.150 --> 03:23.060 Can you reach our faith. 35 03:23.090 --> 03:23.460 Yes. 36 03:25.050 --> 03:31.290 So he's able to reach him and him him and that's all I have done. 37 03:31.290 --> 03:32.650 There's no default out here. 38 03:32.790 --> 03:36.500 There's no default I would get a debt for now and configure it anyway. 39 03:38.960 --> 03:41.200 OK now check this out. 40 03:41.210 --> 03:45.270 I'll do this on our first is what do I do. 41 03:48.860 --> 03:55.790 I want to do redundancy on which interface have zero ones that on this side of 0 0 that I'm saying I 42 03:55.790 --> 03:56.830 want to do it first here. 43 03:57.320 --> 04:03.810 I load on both but I want to do first here because the VPN tunnel will be between this and this. 44 04:03.950 --> 04:05.060 Basically the same. 45 04:06.110 --> 04:07.670 So let's go to that interface 46 04:11.660 --> 04:15.820 interface that 0 1 standby. 47 04:16.130 --> 04:19.250 Group number. 48 04:19.640 --> 04:24.420 The group number should be the same send by one IP address. 49 04:24.440 --> 04:28.220 What is the IP is going to respond to then. 50 04:28.310 --> 04:31.680 1 245 dot 256. 51 04:32.180 --> 04:36.390 It overlaps with aphasia. 52 04:37.100 --> 04:38.280 What does it mean by that. 53 04:39.020 --> 04:44.170 IP interface vs 245 0 0. 54 04:45.570 --> 04:51.730 Not 245 interface f 0 1 should be IP address would be 10 1 125 250 55 04:55.340 --> 04:56.290 not IP address 56 04:59.070 --> 05:06.750 stand by one IP the IP which it responds to is 125 dot 54 I was doing it wrong I was putting this address 57 05:06.750 --> 05:11.490 on this interface to the network should be the same right. 58 05:11.550 --> 05:17.220 The second of the other things are the same which I've done and I just have to stand by one the default 59 05:17.220 --> 05:23.700 priority is hundreds so I leave it as I've given the power to pre-empt what are the other options that 60 05:23.700 --> 05:30.450 I have I can have a virtual mac address so both will reply with the same address but I want that right 61 05:30.450 --> 05:41.970 now I'll do tracking you know what tracking is I'll track the other interface which is F is using this 62 05:41.970 --> 05:49.230 means if this interface goes down I'm tracking this interface if this interface goes down I lose priority 63 05:49.680 --> 05:51.730 is reduced by then. 64 05:52.080 --> 06:00.960 Right now his priority is to define his priority will be reduced by 10 so I'm making sure that if I 65 06:00.960 --> 06:07.350 do goes down obviously he'll be and he'll go to this site but even if this interface goes up his priority 66 06:07.350 --> 06:10.990 will go 90 what should be the priority on this guy. 67 06:11.450 --> 06:11.980 95. 68 06:12.000 --> 06:12.710 More than 90. 69 06:13.830 --> 06:20.260 So the moment the priority goes down on the top down there are five people. 70 06:20.900 --> 06:22.270 I don't have to ring the bell. 71 06:23.330 --> 06:25.160 I'll do it by itself. 72 06:25.290 --> 06:29.310 I'm doing box level redundancy as well as into space level. 73 06:29.910 --> 06:32.040 If not the interfaces also goes down. 74 06:32.640 --> 06:37.480 He will pre-empt and go to the other right. 75 06:37.900 --> 06:41.430 Done this standby is configured and I. 76 06:41.600 --> 06:44.090 Is there anything else. 77 06:44.700 --> 06:50.740 Name the redundancy through redundancy we didn't you. 78 06:50.900 --> 06:56.720 I'm sure you haven't done it in switching this but you should have a name for your group. 79 06:56.750 --> 06:57.870 I know it's called Group 1. 80 06:58.910 --> 07:07.190 I won't name it as a VPN high availability the standby group is VPN high inhabited by default it names 81 07:07.190 --> 07:11.620 it as bot interfaces FAA 0 0 2 0 1 or something like that. 82 07:12.050 --> 07:20.740 Right now I'm naming it as both my my choice so I can use it later for state full failure I'll only 83 07:20.740 --> 07:28.720 use it when I'm doing the states with this remember that I did this I named it VPN It's a what are the 84 07:28.750 --> 07:29.220 comments 85 07:32.860 --> 07:34.040 then anything in pardoning you 86 07:40.160 --> 07:52.820 the first thing I did is interface if a 0 1 Stand 1 I'd be used and 1 1 125 250 then apply for this 87 07:53.240 --> 08:03.260 standby one I to set the MPT I'll also say the priority as default because I want to change it on the 88 08:03.260 --> 08:17.270 other guy's priority will be the default off 100 standby one name VPN to stand by one track the other 89 08:17.280 --> 08:17.880 interface 90 08:21.000 --> 08:31.080 drag the other is this is all I'm doing on 2 on I 5 Do I need to do the same thing I do need to do the 91 08:31.080 --> 08:40.630 exact same thing except for priority on that guy should be 91 1 more than 8 you can have anything between 92 08:40.630 --> 08:43.810 90 and it should be less than hundred greater than 90 Why. 93 08:43.840 --> 08:49.990 Because when the interface goes down that guy's priority will become 92 they should make sure that I 94 08:49.990 --> 09:01.660 am more than less than a hundred because I don't want to be the extra right copy this will be I face 95 09:02.560 --> 09:10.890 to face I want is one hundred five is this the interfaces same F is 96 09:15.920 --> 09:21.250 OK so this is the family. 97 09:21.390 --> 09:21.960 No no. 98 09:22.160 --> 09:31.330 Means if if his priority is high he will take control as acting pre-empt means take control. 99 09:31.970 --> 09:36.890 Priority means you have the power to take control but to take control you need that command culprit. 100 09:38.960 --> 09:40.160 You need both. 101 09:40.160 --> 09:46.250 If your priority is less and you do apprehend it will not work because you don't have the resources 102 09:46.250 --> 09:47.000 to do it. 103 09:50.110 --> 09:53.010 Is useless. 104 09:54.830 --> 10:00.280 If you don't have the BMD command then then then the Automat. 105 10:00.290 --> 10:03.380 This is what you do with the preamble you guide him. 106 10:03.380 --> 10:08.000 If you have the higher priority you take control. 107 10:08.000 --> 10:09.050 Otherwise it will not. 108 10:09.080 --> 10:14.910 It's weird but not you need to provide him with the option of pre-empt. 109 10:15.070 --> 10:15.610 They control 110 10:20.930 --> 10:30.500 send maybe this standby means ie this group would have one will you bite off then 1 125 died 254. 111 10:30.530 --> 10:35.330 That means if you get an arc they will check right now. 112 10:35.540 --> 10:37.590 are being sent between this guy and this guy. 113 10:39.360 --> 10:42.060 You can even see those back as they call it just have two packets 114 10:44.730 --> 10:48.460 that they work on a multi class address off to Guinea for 0 0. 115 10:48.530 --> 10:53.430 And remember what is an address but it's a multiply service just like USPS routing protocols. 116 10:53.520 --> 10:55.450 These are known to many voters. 117 10:55.720 --> 11:02.010 They're sending hellos among each other making sure that data life if one goes down his hellos will 118 11:02.010 --> 11:04.280 not be received see the other guy become active. 119 11:06.250 --> 11:12.230 Right now what's happening is both of them are part of the same standby group of one. 120 11:12.340 --> 11:20.500 If you check the command show Stand by one will be active one will be. 121 11:20.500 --> 11:21.160 This guy is what 122 11:24.040 --> 11:26.310 the MAC address is. 123 11:26.740 --> 11:30.110 This is what the other guy will be. 124 11:30.280 --> 11:34.990 Stand by because his priorities low and he does not have be and he has been. 125 11:35.020 --> 11:37.190 But they are like no no. 126 11:37.360 --> 11:41.840 The MAC address is the same but he is standing. 127 11:42.220 --> 11:46.190 Both are part of which address is a virtual address. 128 11:46.710 --> 11:47.790 Both are part of the service. 129 11:47.800 --> 11:56.740 Which means if an hour comes here saying I wanted the address of then not one but one 25 to 54. 130 11:56.790 --> 11:58.250 Who's going to reply to that. 131 11:59.780 --> 12:03.010 The active guy and both of them know who is the active. 132 12:03.470 --> 12:04.520 He will get the same job. 133 12:04.520 --> 12:07.350 He will not reply because he knows I'm stand by. 134 12:09.560 --> 12:12.050 I favor no reply because he knows I'm standing by. 135 12:12.080 --> 12:14.210 I do know as he's active so he's supposed to reply. 136 12:14.480 --> 12:22.160 He will reply that he'll either one will receive the MAC address of whom I do so he will send it back 137 12:22.210 --> 12:22.370 to 138 12:26.710 --> 12:37.450 where it's a virtual Mac obviously it will not show us an indifference it's a virtual address where 139 12:37.720 --> 12:48.030 no you don't have and type it out but this guy here he has the physical address I've given it. 140 12:48.990 --> 12:53.820 You should communicate because the hello packets go from that physical interface for them to talk to 141 12:53.810 --> 12:59.780 each other they should have an IP address as Hello packets need an investor go and come back. 142 13:02.080 --> 13:02.470 Yes 143 13:06.360 --> 13:09.560 the group should be the same loop. 144 13:10.910 --> 13:15.390 It's coming out as a multicultural just have to wait for the user to have been sent out here and here. 145 13:15.390 --> 13:22.180 He's not running it just happy he's dropping it on led to someone like multicast he's dropping it too. 146 13:22.200 --> 13:24.020 He's the only one who's receiving these facts 147 13:27.000 --> 13:27.270 right. 148 13:28.020 --> 13:32.390 I one needs to be given a beef now out what is the default out here going to be 149 13:36.240 --> 13:44.520 then no one not wondering if I've got to fight for that word will I be anything get. 150 13:44.520 --> 13:54.520 First let's check if it's bringing in more than 1 25 250 does it apply to 151 13:59.500 --> 14:04.720 does it pay because he's activated. 152 14:04.750 --> 14:08.420 The only difference right now is I need to do the same thing on the other side. 153 14:08.530 --> 14:14.830 But the one difference is I will not have the name for it I do not require the name because I'm not 154 14:14.830 --> 14:17.980 running a VPN tunnel I don't require redundancy on that site. 155 14:18.200 --> 14:19.150 I would like to get a name. 156 14:19.150 --> 14:24.540 The only thing is the IP that he's going to apply to will be the same. 157 14:24.550 --> 14:28.690 The priority will be the same because this guy is going to be the actor for God sakes. 158 14:28.810 --> 14:35.510 Have a lighter quite a name so remove the name and the tracking will be of the other interface from 159 14:35.510 --> 14:39.890 this side the tracking will be on this interface from this side the tracking will be of this interface. 160 14:40.570 --> 14:41.550 OK. 161 14:41.930 --> 14:43.020 Do the same thing here. 162 14:43.040 --> 14:50.270 Copy this was the one difference regarding priorities. 163 14:50.510 --> 14:52.020 Ninety one on this site. 164 14:52.250 --> 14:54.660 So this side also goes down he will still 165 14:58.780 --> 14:58.970 right. 166 14:59.170 --> 15:04.070 So stand by will be configured on both sides to do this on our faith 167 15:09.440 --> 15:12.340 made a mistake should not be one. 168 15:19.790 --> 15:22.140 Number one the group number should be this 169 15:25.580 --> 15:28.070 is the IP is also different. 170 15:28.190 --> 15:29.190 The group number should be 171 15:37.650 --> 15:38.470 yeah. 172 15:38.980 --> 15:41.030 Let's see if this is OK. 173 15:41.890 --> 15:46.090 And I do also the same except for 174 15:58.690 --> 15:59.220 take this out. 175 15:59.220 --> 16:04.340 He became the deactivated but now he became just came in to speak. 176 16:04.340 --> 16:04.490 Why. 177 16:04.500 --> 16:05.690 Because the other guy came up. 178 16:05.790 --> 16:06.950 He will become the actor. 179 16:07.220 --> 16:11.480 I will become the time for both groups from this side. 180 16:11.700 --> 16:12.560 Even on this side. 181 16:12.590 --> 16:21.420 So he is stand by our faith for which group we look to and I do a group who is also active the group 182 16:21.420 --> 16:23.340 one is also active chosen by 183 16:26.980 --> 16:32.450 so is an active on this side replying to to 45 to 54. 184 16:32.530 --> 16:34.480 And on this side applying to 125 Dr. 185 16:37.780 --> 16:44.280 I do is active on both sides will apply for this and apply for this I've configured it in a way if this 186 16:44.290 --> 16:53.190 dies even on this site i 5 will apply for this as well as this because for a group to also this will 187 16:53.190 --> 16:55.350 become active group 1 also. 188 16:55.410 --> 17:00.230 This will become active because of the tracking again. 189 17:00.240 --> 17:05.190 If this interface goes down group 2 is done will become active. 190 17:05.650 --> 17:10.770 But since this interface goes down he's tracking which one group one to the priority will decrease. 191 17:10.810 --> 17:14.110 This guy will also become active in the apply for this as well as this 192 17:17.810 --> 17:19.900 right. 193 17:20.660 --> 17:26.990 In this you can but you have to do it separately as a different module it's a whole new thing escalate 194 17:28.330 --> 17:34.910 rapidly it and escalate then tracked that isn't it tracking like this is only one interface but using 195 17:34.910 --> 17:36.090 SLA you can do it from within. 196 17:37.820 --> 17:42.040 And the second thing is we don't know what 197 17:44.960 --> 17:50.200 for incoming for that you'll have to create the here. 198 17:50.240 --> 17:56.100 This site should be active and decide that this of will have to pre-empt this. 199 17:56.110 --> 17:58.960 The group number for me I should be this active and for the other group. 200 17:58.960 --> 18:02.180 This should be the active. 201 18:02.560 --> 18:12.050 Right now my job is not that my job is not even this My job is to create the my objective is traffic. 202 18:12.620 --> 18:21.750 Let's let's see if our fault capitalism is Manziel BP make us deal BP not an intersection. 203 18:22.150 --> 18:27.870 Right now our four should be able to bring home this and the goal was a plan will be to Australia 204 18:31.410 --> 18:38.230 10 1 2 4 5 2. 205 18:38.570 --> 18:44.520 So I'll also have a different outcome here than 1 to 45. 206 18:46.920 --> 18:52.970 He should be able to beat then 1 1 5 1 which is 1 207 18:56.440 --> 18:58.510 it's going to be like coming back to Michael's 208 19:03.430 --> 19:15.860 my job now is to configure the traffic going from this to this but the download should be from this 209 19:15.860 --> 19:16.530 point to 210 19:20.140 --> 19:21.260 this point to this point. 211 19:21.520 --> 19:28.180 Right now I do does not know about food excellent I do does not know about one dog one so I'll have 212 19:28.180 --> 19:29.300 to give him that out. 213 19:29.310 --> 19:34.890 Same for dog for his year one dog one is that when he gets a packet from there he will have to do it 214 19:34.890 --> 19:41.280 here as well as you because right now I do is to blame but if I do dice I'd say I should have that out 215 19:41.300 --> 19:41.490 those 216 19:44.460 --> 19:52.680 take this up being put off or therefore therefore not possible being one no one no one no one not much 217 19:53.340 --> 20:07.850 I'll have a I beat out Bulldogs does as you know some 10 1 1 great if I've got one not one for two forty 218 20:08.180 --> 20:11.360 five died and the other one will be 219 20:14.270 --> 20:18.470 but this will be the same with Bing Bing Bing 220 20:22.610 --> 20:23.540 one no one no one 221 20:30.560 --> 20:32.170 yeah did I create the loop icon 222 20:36.060 --> 20:46.360 I have create the new back and I think twenty five do to continue with the source food bank of 0 account 223 20:47.620 --> 20:48.730 I gave it wrong route 224 20:54.230 --> 20:57.390 Yeah and it didn't give a wrong 225 21:13.000 --> 21:13.430 okay. 226 21:13.550 --> 21:14.540 You understand the difference. 227 21:17.060 --> 21:24.210 Well done for it can also be this one that one can ask this because when I have the match access list 228 21:24.630 --> 21:25.880 I'm doing it from my do right. 229 21:26.460 --> 21:30.530 So he should at least have access to him if he's not able to provide the packet back. 230 21:30.620 --> 21:36.280 Good bulldog for you to use this same thing on our face. 231 21:36.930 --> 21:39.420 Whatever I do on I do should be replicated. 232 21:40.550 --> 21:41.250 So this 233 21:44.240 --> 21:47.710 is not a firewall. 234 21:48.280 --> 21:49.640 Not the context. 235 21:55.370 --> 21:58.770 So is it also not one 236 22:02.650 --> 22:06.310 same thing wherever it is on our food should be I think a good way of doing it. 237 22:06.330 --> 22:08.190 We don't like to copy the configuration. 238 22:08.220 --> 22:12.890 Basic is everything is the same except for that for. 239 22:15.250 --> 22:18.440 Separate so done. 240 22:18.450 --> 22:21.190 For now we have standby. 241 22:21.810 --> 22:25.710 My job right now is to create the time I do it on. 242 22:26.430 --> 22:29.890 I do this now I copy it on my face. 243 22:30.780 --> 22:39.290 If you see the difference lies OK let's create an access list first let's do the normal stuff that we 244 22:39.310 --> 22:40.310 do crypto. 245 22:40.560 --> 22:54.350 I said Can policy that encryption lead us authentication appreciate hash and design group to crypto 246 22:55.440 --> 23:00.800 say again please Cisco addresses 125. 247 23:01.080 --> 23:09.710 That one is number two but I do it will be the same ones interface because the tunnel will be created 248 23:09.710 --> 23:11.930 from that public interface that 249 23:15.310 --> 23:24.770 the IP SEC transforms said he said PSP two days USP and. 250 23:26.690 --> 23:28.830 Then access list. 251 23:29.270 --> 23:37.920 What is the storage going to be the source is going to be coming from here. 252 23:38.000 --> 23:39.790 For him it's coming from here. 253 23:39.890 --> 23:50.230 So for that for going to know if this topic comes in and match it and the so I do what I do doing it 254 23:50.230 --> 23:51.820 on that note that's a permit IP 255 23:56.330 --> 23:56.900 going to 256 24:01.400 --> 24:09.590 right then crypto map a map then I'd be safe. 257 24:10.120 --> 24:29.860 I see that there is one twenty five that one then said fast bomb that he said match the address. 258 24:30.090 --> 24:33.820 Then this is where the difference lies interface. 259 24:34.170 --> 24:47.530 If a 0 1 0 0 0 1 1 0 0 0 1 0 1 I'll do this. 260 24:47.610 --> 24:51.480 So until now everything is the same. 261 24:52.250 --> 24:54.320 Copy paste it on to 262 24:57.970 --> 24:58.970 the largest. 263 24:59.030 --> 25:01.620 The only difference lies here. 264 25:01.690 --> 25:03.350 Tip toe map a map. 265 25:03.710 --> 25:04.500 I used to say enter. 266 25:05.180 --> 25:11.120 I want to enter as it attendance and name it. 267 25:11.210 --> 25:15.870 What was the name on my stand by group. 268 25:16.110 --> 25:18.110 It was called VPN. 269 25:18.130 --> 25:23.230 It will be in Egypt. 270 25:23.510 --> 25:28.370 Basically I'm telling him hey listen you're doing crypto math at the same time and you're applying the 271 25:28.370 --> 25:31.110 crypto map check in your VPN it. 272 25:31.130 --> 25:32.240 Are you the active one. 273 25:33.350 --> 25:36.910 If you're not the active do not send the traffic. 274 25:38.270 --> 25:41.180 I do not receive any traffic. 275 25:41.510 --> 25:43.960 You have to be the active for you to work. 276 25:45.670 --> 25:47.550 That's what I'm telling him their. 277 25:47.830 --> 25:53.320 Right now I do is active so no problems with the same configuration. 278 25:53.320 --> 25:57.270 Copy paste with my face. 279 25:57.280 --> 25:58.660 Same here. 280 25:58.660 --> 26:00.460 Same here. 281 26:00.460 --> 26:05.500 Same here and even here. 282 26:05.530 --> 26:07.340 Which one VM. 283 26:07.390 --> 26:14.550 Yes it will be on both sides because priority date depends on priority I boost the is low. 284 26:15.310 --> 26:18.280 Even if he has been both I see both are pulling 285 26:21.940 --> 26:28.440 VM means you have the power to fully right now both of them are pulling to become the active say there's 286 26:28.480 --> 26:29.740 a card in the mini. 287 26:30.010 --> 26:34.660 There's a road both of them are pulling under one guy's muscular over 100. 288 26:34.750 --> 26:36.180 The other guy is 91. 289 26:36.210 --> 26:41.230 Who's going to be it is going to be the means book. 290 26:41.650 --> 26:45.280 If you don't know him the muscular guy is 100. 291 26:45.430 --> 26:50.890 The other guy is 91 but he's active and he doesn't have the pre-empt the priority hundred to get the 292 26:50.890 --> 26:51.820 muscular guy. 293 26:51.900 --> 26:56.520 You have not given him the ability to pull so it says they're standing on the. 294 26:56.860 --> 26:58.860 Obviously the active guy is going to stay active. 295 27:01.420 --> 27:07.130 And even if you have not configured him and he becomes active because when he ran down that that became 296 27:07.130 --> 27:07.940 active. 297 27:07.940 --> 27:10.080 If he comes back I mean he's not pulling. 298 27:10.340 --> 27:11.800 He's not gonna become. 299 27:13.940 --> 27:14.890 Yeah. 300 27:17.330 --> 27:18.910 That's what I'm telling you on this today. 301 27:19.470 --> 27:22.430 If both happy and both will pulled then it began. 302 27:22.430 --> 27:27.470 Depends on who has the other who is also pulling favors over. 303 27:27.650 --> 27:30.660 The only thing is when I lose one arm will die. 304 27:30.680 --> 27:32.960 One loop that will work will go down. 305 27:33.110 --> 27:34.010 His arm is down right. 306 27:34.010 --> 27:39.440 His priority will reduce a strength will not be handled it will be 90. 307 27:39.440 --> 27:45.000 The other guy will be 91 so he'll pull him. 308 27:45.410 --> 27:47.310 That made sense. 309 27:48.490 --> 27:51.880 Let's go to Isaac and policy everything is the same. 310 27:51.880 --> 27:53.900 I'm just copying it to my flight. 311 27:59.670 --> 28:01.360 Crypto map. 312 28:02.090 --> 28:02.840 A map. 313 28:02.930 --> 28:05.550 Done Nancy VPN. 314 28:05.780 --> 28:10.550 It's created the same name heroes it does. 315 28:11.110 --> 28:12.960 Right. 316 28:13.410 --> 28:19.250 I've done my first half of the done here also as well as here but this is active. 317 28:19.260 --> 28:21.290 So he's the only one who's gonna play. 318 28:23.070 --> 28:27.410 We'll go to i1 do the either side of the time. 319 28:28.400 --> 28:29.880 I'm not on the other side. 320 28:30.030 --> 28:31.710 Don't think I copy pasted itself. 321 28:32.130 --> 28:35.750 And feed our to compete. 322 28:35.870 --> 28:44.840 The only difference is some things will change which are this one this is what is this going to do the 323 28:44.840 --> 28:58.200 virtual access IP the words will IP not have I do not if I find here access this will be reversed. 324 28:59.810 --> 29:00.220 Yes. 325 29:03.060 --> 29:09.360 254 everything will be the same at 0 0 tiptoe map a map. 326 29:09.360 --> 29:10.890 There's no redundancy on this. 327 29:11.380 --> 29:12.260 I want a standalone 328 29:16.690 --> 29:17.060 based 329 29:21.420 --> 29:29.360 if map and I've noted in its tallies up they work. 330 29:37.060 --> 29:37.790 Was to blame. 331 29:38.600 --> 29:39.610 Where the traffic going. 332 29:44.810 --> 29:48.470 Going for my night. 333 29:49.070 --> 29:50.810 I'd say by doing I pay just 334 29:57.930 --> 30:01.840 might bring I'd do dumb but I won't shut it down. 335 30:01.940 --> 30:05.970 I'll just go to one of the interfaces and turn it off. 336 30:05.980 --> 30:08.090 Shut up. 337 30:08.080 --> 30:09.260 Check out what happens. 338 30:09.740 --> 30:15.450 With one group do both became the standard group one as well as group two. 339 30:15.830 --> 30:20.460 And this five became active in both groups. 340 30:20.480 --> 30:24.380 So now he's not only responding to this I say this. 341 30:24.720 --> 30:26.620 He's also responding to this. 342 30:26.720 --> 30:36.020 Now he's active in all senses but the problem is this will not work. 343 30:36.030 --> 30:36.360 Why. 344 30:36.390 --> 30:39.270 Because this tunnel was established when it was established. 345 30:39.270 --> 30:46.750 It was established to do I need to it down. 346 30:48.010 --> 30:51.740 I need your data down first then bring it back up again. 347 30:57.240 --> 30:59.020 Where's it going from. 348 31:00.310 --> 31:01.360 That's going for my friend. 349 31:03.540 --> 31:03.860 Right. 350 31:04.430 --> 31:07.980 So whoever was connected to the Internet died for them. 351 31:08.130 --> 31:14.920 What they have to do is disconnect and back up again fade away. 352 31:15.150 --> 31:18.360 Does that mean if I go to I to 353 31:22.530 --> 31:24.220 interface f 0 1. 354 31:24.360 --> 31:32.710 No -- I do this pre-empt is enable a standby to activate standby to activate on both the groups he's 355 31:32.720 --> 31:33.130 active. 356 31:34.310 --> 31:34.780 This guy 357 31:37.950 --> 31:43.090 won't go to our fight even because now even the IP has to talk. 358 31:43.440 --> 31:44.720 An not to back it. 359 31:45.210 --> 31:50.870 It seems that a message has no initialization for life because he's trying to go from now. 360 31:52.620 --> 31:53.690 But the tunnel is established. 361 31:53.700 --> 32:03.030 IP SEC also moved up IP SEC moved to I too I find he's not going to respond like SEC anymore but the 362 32:03.030 --> 32:09.370 session was established with 0 5 so I need to clear it again where I want 363 32:12.820 --> 32:18.750 clear to say and I see and again. 364 32:25.710 --> 32:26.280 Going from 365 32:32.040 --> 32:37.500 where there is between 1 and 4 I do and I find it is 366 32:42.060 --> 32:48.280 that a state full and state central and state but when the interface came up I didn't become the active 367 32:49.700 --> 32:50.380 duty. 368 32:51.230 --> 32:51.420 Yeah. 369 32:51.600 --> 32:56.150 If you don't put the end obviously faith will be the act of way they do it. 370 32:56.610 --> 32:58.180 So if you don't do prism. 371 32:58.450 --> 33:02.300 If both of those are the same both can get into the same amount of law. 372 33:04.020 --> 33:05.940 Both can get the same amount of load. 373 33:06.000 --> 33:11.170 Both are identical copies of each other and it's okay for this to be active also. 374 33:11.340 --> 33:16.680 It's good to not do the print because then you're not going to pre-empt your traffic will be going from 375 33:16.680 --> 33:16.860 here. 376 33:19.850 --> 33:20.090 Right. 377 33:20.350 --> 33:25.140 So he will stay with a will also stay here as well as you just heard the act of. 378 33:25.410 --> 33:30.700 So no problem. 379 33:30.720 --> 33:34.980 Right now he's taking the charge so that's why the town that was going through here does not work anymore 380 33:35.580 --> 33:36.720 because I could become the active 381 33:41.280 --> 33:44.640 he will always take charge if his priority is law. 382 33:44.650 --> 33:51.660 His priority is how evil always but his priority should also be a priority is lower than the other guy. 383 33:51.710 --> 33:56.110 You pre-empt he will not be and this is hundred. 384 33:57.020 --> 33:58.750 Yeah. 385 33:59.970 --> 34:03.020 Okay. 386 34:03.620 --> 34:06.540 You don't just be about 50. 387 34:06.910 --> 34:07.540 It's okay. 388 34:07.880 --> 34:08.980 I will always come back. 389 34:10.070 --> 34:11.130 I will always take charge. 390 34:11.150 --> 34:12.330 But the problem is. 391 34:12.350 --> 34:15.070 Yeah who. 392 34:15.600 --> 34:16.480 I do. 393 34:16.670 --> 34:17.090 I do. 394 34:17.100 --> 34:22.460 Situation is put out there will always be a hundred you will always have to be and I do will always 395 34:22.460 --> 34:24.090 have to. 396 34:24.740 --> 34:25.680 It will always have. 397 34:25.760 --> 34:32.000 I will always be pulling you no pre-emptive to take. 398 34:32.120 --> 34:33.090 It's not about leaving. 399 34:34.370 --> 34:36.430 Yeah definitely but e-mailed. 400 34:36.620 --> 34:38.000 Check this out. 401 34:38.030 --> 34:47.960 The face f a 0 0 standby 1 this is being spammed so our 5. 402 34:47.960 --> 35:01.050 I want to do interface f a 0 0 1 0 0 0 0 1 so 0 one no standby. 403 35:01.190 --> 35:01.580 1 404 35:05.600 --> 35:11.030 so stand by. 405 35:11.100 --> 35:12.930 Let's let's check the emission is disabled. 406 35:14.990 --> 35:17.450 The Amazon is disabled right. 407 35:18.140 --> 35:20.010 So there isn't any evil on this say. 408 35:20.360 --> 35:23.830 Then we'll set that up and bring it back up again. 409 35:23.860 --> 35:25.100 I do. 410 35:25.840 --> 35:30.890 Interface FAA 0 1 0 0 0 because of tracking 411 35:35.210 --> 35:38.070 goes right it goes down. 412 35:38.750 --> 35:41.970 It became active good to do but he didn't become active. 413 35:42.820 --> 35:43.450 Why. 414 35:44.910 --> 35:46.670 I do not take sides. 415 35:46.710 --> 35:54.370 It does not have the pre-emption enabled the priority on what went down became what. 416 35:54.730 --> 35:57.110 Ninety two is 91. 417 35:57.120 --> 36:01.980 But he does not take sides for group two. 418 36:02.070 --> 36:12.200 He didn't give out the touch even if if you want to see this also stand by to say no to this. 419 36:13.410 --> 36:23.480 But I have disable pre-empt until I interface FAA 0 1 0 0 more said 420 36:27.030 --> 36:28.550 which I set to work. 421 36:29.450 --> 36:29.860 Yeah. 422 36:29.920 --> 36:37.080 This had to interface up a little one I did this. 423 36:37.090 --> 36:39.670 Nice should none other than that. 424 36:40.130 --> 36:46.190 This one should be brilliant and this one should be preempt and would remove that the empty 425 36:53.570 --> 36:59.030 then both the beam should be disabled as it were here the invisible. 426 36:59.330 --> 37:02.940 Yes I do has not been one has been in both. 427 37:03.020 --> 37:10.430 Sorry I should have been in both chambers and able here the is enabled. 428 37:11.540 --> 37:17.990 Now when I do whatever goes down I 1 5 will take backup but when I do comes back up you should be able 429 37:17.990 --> 37:19.510 to pick charge again. 430 37:19.600 --> 37:20.340 Zero one shot 431 37:23.650 --> 37:27.810 goes down speak goes down right. 432 37:27.820 --> 37:34.650 I do has taken back if I had taken back only for that interface what was the active went down. 433 37:34.660 --> 37:37.680 He didn't take back for the interface for the tracking. 434 37:38.530 --> 37:39.010 That's OK. 435 37:39.010 --> 37:44.740 That's all I wanted to check if I do know that this comes back up and it becomes 436 37:50.340 --> 37:55.820 twisted in that initialization is listening giving them day 437 38:02.820 --> 38:03.730 interfaces down. 438 38:05.010 --> 38:06.770 Yeah. 439 38:07.410 --> 38:08.970 The interface doesn't come up. 440 38:10.030 --> 38:16.070 Yeah yeah but he is been is preempting anything from this. 441 38:17.200 --> 38:17.790 On the other side. 442 38:19.660 --> 38:20.650 He will not leave controlled 443 38:25.050 --> 38:34.820 the emotion is disabled gluten is what he is active for this and for this site is is active for both. 444 38:35.630 --> 38:44.130 So I guess the PM's and should be an evil it doesn't work for me working under one site because he's 445 38:44.130 --> 38:45.430 not taking charge. 446 38:45.900 --> 38:56.630 The interface is done as infused as administratively done. 447 38:56.780 --> 39:00.980 You didn't become active active active in both 448 39:03.960 --> 39:07.800 the happy m you can pull you don't happy yet. 449 39:07.820 --> 39:08.610 You can't. 450 39:10.040 --> 39:12.740 It's not about him not living charge. 451 39:12.770 --> 39:13.970 It's about the other guy was 452 39:16.930 --> 39:20.670 the only thing is if you give the arm from the other side both are going to pull. 453 39:22.170 --> 39:25.810 But it matters which side has more strength and the strength is for your 454 39:29.440 --> 39:30.030 right now. 455 39:30.110 --> 39:36.210 I have messed up my tunnel a lot so let's play the clip to see. 456 39:36.250 --> 39:40.480 And I say okay. 457 39:40.760 --> 39:44.150 Now the thing I want to show you it's working properly. 458 39:44.150 --> 39:45.170 This is redundancy. 459 39:45.230 --> 39:46.850 You liberty. 460 39:46.880 --> 39:56.030 The only problem is stateless the state fool does not work with 80 percent of the IRS as the GST does 461 39:56.040 --> 39:56.550 not. 462 39:56.670 --> 39:58.100 But we still configure it. 463 39:58.110 --> 39:59.640 I told you how to configure it. 464 39:59.670 --> 40:02.980 It's really really easy if you just remember the first two comments. 465 40:03.060 --> 40:06.480 After that it's only one command each with the question mark which will lead to 466 40:10.080 --> 40:12.200 the commands are really simple. 467 40:12.300 --> 40:19.850 I do it's called redundancy which redundancy in the device. 468 40:20.070 --> 40:25.420 Enter you go inside scheme not. 469 40:25.420 --> 40:31.670 You can provide security also for this using an IP sector standby because you can only provide redundancy 470 40:31.670 --> 40:32.280 to. 471 40:33.970 --> 40:39.460 OK and what is the safety group VPN into. 472 40:40.120 --> 40:43.920 So provide redundancy to this group of. 473 40:46.030 --> 40:48.050 OK done. 474 40:48.400 --> 40:54.860 Yeah the command is IPC zone APC zone defined in here. 475 40:54.860 --> 40:55.560 Then you do that. 476 40:55.640 --> 41:01.640 Ask of the staff association any IP question mark protocol. 477 41:01.730 --> 41:03.520 This protocol do you want. 478 41:04.460 --> 41:09.800 So that I do an hour five talk and exchange their IP sic information. 479 41:09.890 --> 41:13.390 The one protocol that does that is gone SDP. 480 41:13.520 --> 41:19.910 The only one reason why this protocol is there is to enable that state change between the two. 481 41:20.280 --> 41:26.720 So I'll give you one my state you give me my your state of the connections it's not a good thing to 482 41:26.720 --> 41:28.880 keep this as open. 483 41:28.910 --> 41:32.920 That's why you have that security because it defeats the whole purpose. 484 41:32.940 --> 41:35.380 All your IP traffic is going to be open. 485 41:35.390 --> 41:42.790 If you don't secure this on that redundant link it's a good thing to do a secure security there but 486 41:42.790 --> 41:49.620 it doesn't work this way so you decide not to do security on Saturday if it works. 487 41:50.080 --> 41:51.460 Okay done. 488 41:51.550 --> 41:58.350 Protocol is a city to go inside this mall also I have a local port and the remote would have to configure 489 41:58.350 --> 42:04.890 both as GDP does not have its own board members you'll have to specify which port you want to work on 490 42:06.400 --> 42:07.930 as a local port. 491 42:07.930 --> 42:13.670 Anything anything which I want does it for 4 4 4 enter. 492 42:13.780 --> 42:19.180 I would also have to provide some more options out of these options I could provide a local IP. 493 42:19.180 --> 42:23.010 What is my local IP twenty five. 494 42:23.090 --> 42:25.580 Got two. 495 42:25.680 --> 42:26.620 It's confusing right now. 496 42:26.620 --> 42:29.650 Once you do it it's Philly's exit. 497 42:29.980 --> 42:34.260 The other one is the motorboat for 444 for same. 498 42:34.260 --> 42:38.400 The more I use it on the same source port and Destiny support. 499 42:38.760 --> 42:39.930 The Maldives is what 500 42:42.810 --> 42:45.300 safe because I'm talking about it. 501 42:45.490 --> 42:48.370 That is all I have to do for now. 502 42:50.520 --> 42:54.520 One thing I have to do which is to face it apply my craft on my phone. 503 42:54.950 --> 42:57.340 0 0 0 1. 504 42:58.560 --> 43:04.990 I'll remove it I'll put it back up again. 505 43:05.430 --> 43:08.750 I said redundancy with VPN. 506 43:09.300 --> 43:10.760 I also have one more command card. 507 43:13.140 --> 43:21.950 State for state full uses this zone IPC zone but high availability so state. 508 43:23.340 --> 43:27.520 He says it will not work if this is not the active which is OK. 509 43:27.520 --> 43:32.060 It just gives you a message saying you will not work if you are not active. 510 43:32.100 --> 43:33.590 That's all right. 511 43:34.620 --> 43:40.290 I look the same steps again I could have copy pasted but I want to show you the steps again. 512 43:40.860 --> 43:41.700 What is the first step. 513 43:42.480 --> 43:50.090 Redundancy in the device then scheme. 514 43:50.300 --> 43:51.740 Standby. 515 43:51.780 --> 43:54.230 What is the name. 516 43:54.970 --> 43:59.460 A standby so it gives you that method takes it. 517 43:59.460 --> 44:02.520 The other thing was IPC that's all the rest. 518 44:02.520 --> 44:13.460 You'll just have to remember IPC zone defined question mark association with any idea then workable 519 44:14.110 --> 44:15.260 protocol. 520 44:15.870 --> 44:22.640 If not it's local slogan as ADP then local board. 521 44:22.710 --> 44:23.140 Same 522 44:26.310 --> 44:36.900 local IP if I died 5 on this except the more bored we are. 523 44:36.930 --> 44:38.000 This should be this. 524 44:38.300 --> 44:45.590 Then no wonder 125 that exit exit exit exit interface. 525 44:45.610 --> 44:48.320 FAA 0 1. 526 44:49.280 --> 44:51.230 No crypto maps. 527 44:52.380 --> 44:53.930 Crypto map. 528 44:54.130 --> 44:59.130 A map redundancy VPN to add 529 45:01.870 --> 45:11.450 show to its short attendance showed attendance and. 530 45:12.410 --> 45:17.450 It will not take effect until next reload. 531 45:17.470 --> 45:24.250 You need to reload for it to take effect although it will not take effect either but will still reload 532 45:24.250 --> 45:28.550 and see what it shows it shows you the configuration. 533 45:28.540 --> 45:33.280 But a lot of ISIS does not work properly. 534 45:33.400 --> 45:35.270 I've done this. 535 45:35.410 --> 45:36.250 Turn it off. 536 45:36.460 --> 45:36.940 Both of them 537 45:39.760 --> 45:42.250 bring it back a bit for some time. 538 45:43.930 --> 45:44.810 Bring it back up 539 45:47.700 --> 45:52.920 and hope that it doesn't die soon is up and God. 540 45:52.930 --> 45:53.620 This one is 541 46:01.640 --> 46:04.820 none take the same command again. 542 46:04.850 --> 46:10.140 This will be speaking so I wanted to take sure that I save everything properly. 543 46:13.570 --> 46:15.880 Anything is lost. 544 46:16.660 --> 46:17.280 So. 545 46:17.830 --> 46:20.460 Yeah it's coming back. 546 46:21.120 --> 46:22.050 All right. 547 46:22.180 --> 46:27.400 This is what he says crypto IP sic as a high availability status is 548 46:31.380 --> 46:35.270 high availability status for us at this stage will fail. 549 46:36.150 --> 46:38.000 But this guy doesn't show anything. 550 46:38.130 --> 46:40.230 He's going he's still going to be stand. 551 46:40.230 --> 46:42.150 I just hope he's a slow learner. 552 46:42.180 --> 46:47.840 Later they came up with VIP which was much faster because the yellow packets were sent very quickly. 553 46:47.850 --> 46:53.570 Three point one two seconds was the daytime and this IP was very slow as compared. 554 46:54.370 --> 46:55.690 So let's go here. 555 46:55.690 --> 46:56.300 Sure. 556 46:56.560 --> 46:59.050 Redundancy entitlements. 557 46:59.110 --> 47:00.840 The state is active. 558 47:00.840 --> 47:03.030 Security I'm not configured you can if you want. 559 47:03.070 --> 47:03.880 You're most welcome. 560 47:06.080 --> 47:15.980 From this guy also show redundancy entitlements stand by the other guys at the there's this state fellow 561 47:17.010 --> 47:18.400 right. 562 47:18.630 --> 47:24.180 The protocol that they're using is a city. 563 47:24.570 --> 47:25.380 Am I doing it on this. 564 47:25.380 --> 47:26.340 This is the only one. 565 47:30.630 --> 47:32.550 It's working on this site right. 566 47:33.150 --> 47:33.610 0 1 567 47:36.420 --> 47:38.300 is close by. 568 47:42.650 --> 47:43.090 Captioning 569 47:46.600 --> 48:05.120 advisor. 570 48:13.600 --> 48:17.470 Southampton. 571 48:17.900 --> 48:18.200 Michael 572 48:21.370 --> 48:32.110 this is a city who sends them hard beats de da acknowledgments cookie a go at there's a lot because 573 48:32.110 --> 48:33.870 it's expanding very vital information. 574 48:35.320 --> 48:42.710 Hard is the back of a sense that it's like a hand of the city say 575 48:45.730 --> 48:48.040 what is the source good. 576 48:48.190 --> 48:51.130 This isn't book and big chunk. 577 48:53.410 --> 48:54.510 This is text. 578 48:54.520 --> 48:56.110 Right now it's blatant. 579 48:57.250 --> 49:02.300 Right now it's clear that I'm not change anything in that it's getting out at 580 49:05.340 --> 49:06.230 44. 581 49:06.250 --> 49:08.230 For me that's for the heartbeat. 582 49:08.410 --> 49:14.210 I'd be the guides one for the normal day nights for four. 583 49:16.180 --> 49:20.380 OK now let's do our food medicine. 584 49:22.110 --> 49:22.870 It's great that I'm 585 49:26.980 --> 49:28.040 I foresee. 586 49:28.130 --> 49:33.080 I once I got an answer straight from my one degree in the town. 587 49:33.080 --> 49:43.690 Do everything go to one of the towns. 588 49:43.930 --> 49:44.970 It's not happening. 589 49:47.850 --> 49:49.440 They changes to something not save 590 50:26.240 --> 50:29.660 and then if I die before 591 50:34.460 --> 50:38.020 tapping 245 that for 592 50:41.060 --> 50:43.200 news again. 593 50:43.210 --> 50:48.730 So why can't I go to the source to back off. 594 50:52.370 --> 50:53.480 Those who back others you 595 51:01.790 --> 51:03.290 know you. 596 51:04.970 --> 51:09.950 I did Clay and said I got beyond that. 597 51:09.950 --> 51:11.870 Maybe that is the collective and Bhutan's 598 51:21.350 --> 51:24.180 name is going through right. 599 51:24.620 --> 51:26.850 My session is fine. 600 51:27.110 --> 51:31.830 What I do is an outlaw line. 601 51:32.140 --> 51:32.920 We divide. 602 51:32.980 --> 51:35.340 0 4 in. 603 51:35.560 --> 51:38.720 This is a clear telnet session 604 51:42.900 --> 51:47.510 with a source interface off to. 605 51:47.730 --> 51:56.080 So this is all going through my is going through the back this session and I'll go do I do the face 606 51:56.700 --> 51:58.850 interface aphasia one shot 607 52:02.240 --> 52:03.130 this is what happens 608 52:10.040 --> 52:10.660 it dies 609 52:16.760 --> 52:27.810 it dies everything just freezes up both of them are frozen because the redundancy doesn't do it properly. 610 52:28.100 --> 52:37.850 So if I 5 is alive how 5 is also a day we get they're talking using a CTP there's something wrong with 611 52:37.850 --> 52:46.680 the ACTU which works on gems we can communicate properly it elevates is very very high time they'll 612 52:46.710 --> 52:53.550 work but here it says that the hardware cannot take care of them but that's what's going to happen. 613 52:53.560 --> 52:58.390 He's going to preserve the session on the other side as a session will not break 614 53:02.520 --> 53:03.760 probably yes. 615 53:04.100 --> 53:09.900 Probably as right. 616 53:12.240 --> 53:17.490 This one not really you don't really have redundancy for IP sex don't really need it. 617 53:17.580 --> 53:22.620 Guy basically is just as unstable as maybe if you connect to disconnect and then you go back home you 618 53:22.770 --> 53:27.640 go back home you connect and you disconnect like that is not used for video streaming or telnet session 619 53:27.720 --> 53:30.800 or something like that and so you don't really use it like that. 620 53:31.470 --> 53:35.640 But yeah if you want to have something which is very critical and should always come through the tunnel 621 53:36.060 --> 53:40.740 then probably but really you don't like for real time. 622 53:40.830 --> 53:45.820 Not much to get done. 623 53:45.900 --> 53:48.100 Let them die let them stay as they are. 624 54:18.890 --> 54:22.460 Have you seen the real running configuration of adapter. 625 54:22.620 --> 54:25.890 Sure I know that Sony. 626 54:27.790 --> 54:29.210 I might show you something. 627 54:32.010 --> 54:32.910 This isn't how much. 628 54:32.920 --> 54:33.510 Why not. 629 54:35.160 --> 54:35.580 Political little 630 54:40.680 --> 54:41.570 one that is. 631 54:43.100 --> 54:56.190 Yeah. 632 54:56.580 --> 54:56.930 Still 633 55:13.360 --> 55:14.150 a good day. 634 55:23.700 --> 55:27.620 Maybe on 7 to 200 is more than right here. 635 55:27.640 --> 55:29.640 Is this something you'd wonder. 636 55:29.670 --> 55:34.880 It shows you more more features but for now these ones remember we did this. 637 55:35.070 --> 55:41.850 Most of these scenarios we did some of these and most of these they serve as proper password encryption 638 55:42.570 --> 55:44.300 timestamps. 639 55:44.320 --> 55:48.930 We did sequence numbers on the interfaces we did more stuff 640 55:56.090 --> 56:00.890 in the easy to see why it's a good thing. 641 56:01.750 --> 56:02.110 Yeah. 642 56:02.170 --> 56:10.050 The same uses apply to simply just have certain features I going to use USPTO as analogies. 643 56:10.120 --> 56:14.250 This hashing mechanism has just created automatic because he knows the source and destination. 644 56:14.290 --> 56:21.820 He knows I'm using a CTP just as truth is like SPF Blue's entry I would like describe what it was to 645 56:21.820 --> 56:25.720 be about entry is automatic. 646 56:25.760 --> 56:35.650 Haven't seen it yet and see no SPF wasn't in I believe 6 apb 6 always be available for security you 647 56:35.650 --> 56:37.460 haven't seen it. 648 56:50.330 --> 56:51.180 We have been able to 649 56:55.170 --> 56:58.620 deficiencies that because 650 57:03.650 --> 57:10.910 it was easy the HPV 6 that's HPV since 651 57:14.050 --> 57:15.560 it was 652 57:23.960 --> 57:26.700 HPV is accepting is not happy sex. 653 57:26.920 --> 57:30.870 We need that starting every year six out obviously of one. 654 57:31.070 --> 57:37.380 Then you have this option of securities since I've been to this 655 57:41.080 --> 57:42.430 SPF. 656 57:43.180 --> 57:51.170 You have authentication a basic SPF number you provide 256. 657 57:51.400 --> 57:54.890 Then you have to provide a matching mechanism. 658 57:55.210 --> 58:00.360 Sure you have to provide a key so I can send zeros the scope. 659 58:00.400 --> 58:05.370 Now the key should be exactly 40 characters. 660 58:05.780 --> 58:10.130 Not exactly for the characters but your key for this. 661 58:10.670 --> 58:11.740 So. 662 58:12.390 --> 58:14.750 So 1 2 3 4 5 6 and 9 663 58:17.260 --> 58:24.720 three times three 9 nine times 27 30 33 36 39 664 58:28.600 --> 58:29.820 was paired with me. 665 58:30.460 --> 58:39.460 That the notion down and something stole your hello packets are actually IP SEC protected actually IP 666 58:39.460 --> 58:40.090 SEC protect 667 58:42.930 --> 58:50.440 usually remember before we used to do any face action but here it's a basic protected must have these 668 58:50.440 --> 59:02.980 questions and you write an exam you have repeated authentication on me with this we finish our VPN VPN 669 59:02.980 --> 59:04.440 section on that Iris.