Hello and welcome to this lecture in this lecture we continue with the branch for the great firewall
configuration.
So now let's dig in and say a console I will again increase the funds or change settings and appearance
to let's say 18 and apply just minimize a little bit and let's just start the configuration.
So again add mean no password and let's start with port one.
So configure system interface and let's say edit port 1 let's send the IP address or set IP.
And this is 90 dot 90 dot 90 that 90 and slash 30 again set mode of static and then apply the IP address.
Now let's move on to actually.
Yeah let's move on to the second one.
So set next edit port 2 and port 2.
It's the land port just have it a little bit like this so we can also see the diagram.
So again said IP and this time is one end to that one say that to that one.
And this is a slash 24.
We will also said allow access to ping this in this way we will be able to ping the the branch for the
gate firewall from the test BCE from our land user.
So set allow access pink.
Now we will also say next and edit port number three our management port let's say set IP 172 the sixteen
not two hundred one.
And this is a slash 24 said allow access to HDTV and HDTV is good.
Now let's say and we will also have to add static route from I mean on the firewall pointing to the
Internet router and we will do this by doing this configure rather and static.
And if you hit the question mark you have the option to say edit and again question mark sequence number.
So let's say again sequence number one and let's say.
Question mark okay said and again device and destination so set destination.
This is anything.
So default route also set device.
So what is the interface that the traffic will will go out said device and we will say Port 1 and said
Gateway although it doesn't have an asterisk asterisks it says said Gateway nineteen ninety ninety that
eighty nine so alone.
Now let's say end and this shouldn't be it.
When.
When we will configure also the Internet rather we will do some ICMP testing just to make sure before
starting the IP sic IP VPN site to site configuration that we have basic IP connectivity in place.
This is a must must know and must do to say so in any network implementation.
So first verify simple things like ICMP connectivity between your or your firewalls or your network
devices and then go to the more advanced configuration because otherwise you may end up in a situation
where your setup is not working and you have configured a bunch of things doing a couple of hours of
configuration and you will say that okay I don't know where to start.
So what should be wrong is it is my site to site VPN configuration wrong or is it something else.
So doing that configuration and verifying step by step as you progress through your through your setup
it's it's a best practice and I highly advise you to do so.
So this concludes this lecture configuration on the branch for the Great Firewall its is done so see
you in the next lecture to continue our setup.
Thanks again.