Hello and welcome to this lecture.
It is lecture we verify the whole set up the whole site to site VPN set up between the 40 gate firewall
in the headquarter to the Cisco NSA in the branch to as we named it earlier.
So now let's go and connect to the firewall and let's say again later and later
and remember that in order for the VPN to trigger so to be established we have to have interesting traffic
in the tunnel.
So we have to generate some traffic between the two remote private lands.
In this case between 1 and 2 1 6 8 1 0 and between 1 and 2 1 6 8 3 0 slash 24 for both of them.
Now also in the previous lecture when I initiated an ICMP session a ping from VPC as one I was not wrong
but I was saying some other thing.
When when I was pinging basically this lan I was saying that I was pinging the VPC has too.
But anyway I was pinging not one.
So the inside the inside IP on the branch for the gate which is not wrong.
But anyway you have to have connectivity between any IP is in the private lands.
So that was that's why the IP sic VPN triggered and we have seen it in the upstate Another option would
be.
So let's go to if you don't want to ping if you go to the IP SEC tunnels Another option is to say right
click or not here.
Let's see.
We think we know in the in the monitor one.
So a basic monitor.
Yeah.
Here is right click and say bring up.
But before we do that let's go in the log and report and let's go to VPN events and let's see if we
can delete the everything we have here.
So let's search for what download log do we have any clear log so I don't see any clear log here for
disk details details if I want to see for a specific log OK.
So we don't have any log but we have a timestamp here so a thirty three.
Good.
So let's try now to initiate the VPN and if it doesn't work we will see what what logs are generated
here.
So monitor.
Let's go to IP monitor right click and say bring up good.
So the VPN is up which means that the configuration was applied correctly.
Let's go on.
As you can see as you can see we have no incoming and outgoing data which means obviously no traffic
no VPN traffic is traversing this side to side side by side tunnel.
Now if you go in the log and report and go again to VPN events so it was a three So starting from here.
We have we have some logs generated by by the by the gate firewall so date time stamp duration local
IP received data.
So something that was generated by the by the firewall so that the tunnel is triggered security.
What else.
Let's see negotiate progress.
IP saying Phase 2 then I'd be sick I say install.
So basically the parameters have been exchanged here.
And because of them.
Because we have we have had a match and I refer here to both Phase 1 and Phase 2.
We have seen that ABC connection status changed it has changed meaning that it was it it changed it's
changed to to upstate.
So with each it triggered to action here tunnel up.
So anyway no not necessarily by here not necessary.
Well obviously most of us know the debugging process as a debug but you as you will see in the 40 gate
world and 40 net world in general that the buying process it started with the diagnose command.
But this is something we will do in the next section where we where we will break the configuration
and see what the logs look like so that we we get accustomed to what to do in order to fix the configuration
when is broken.
So this is all for this section.
Thanks a lot.
See you in the upcoming section.