Hello and welcome to this lecture in this lecture.
We will build our first apology based on K VM QM images.
So now that we have everything set up and the genius 3 VM is running my B.S. is also listed in the service
summary tab here.
Let's go ahead and create a new project so file new Blank Project.
Let's say i s the labs and click Okay.
Now we'll go to the bar browse all devices and let's search for first of all the IRS V.
This is the IRS V.
I'm trying to pull one device on on the topology and here are the results so it's a rather it's running
ISV.
It's from Cisco and the K VM it's required now look what's next.
So next here server type run the appliance on the genius free VM.
It's recommended but look it's basically the only option.
So what we have done until now.
Building the Genesis 3 infrastructure to say so with the P.C. running the galley and then integrating
with the viewer workstation pro the genius 3 VM it's leading to this success so we can run QM key VM
images.
So now let's click Next the genius 3 server requirement is okay and you can continue the installation
looks good.
Click next.
Now we can see that this specific version 15 that 6 to t it's ready to install it has found this specific
image and a start up config.
And when the genius 3 is looking after these files he's basically looking in the downloads folder.
So my user downloads folder.
This is the this is the image and this is the Ayaz vs startup config.
So I'll now click next would you like to install this specific version.
Yes it is going to use this.
This QM binary and I will peak next.
And next and finish.
Now look in the left side in the all devices.
We have a new category Cisco guy v 15 6 2 t please.
Okay here and I will now try to install also the Cisco ISV layer to so for the switches next run the
appliance on the genus 3 VM Next.
Next and we have this version ready for install heat has been found again is looking in the download
folder.
This is my letter to v Virgil I s I will now click next.
Sorry cannot install Cisco as V as Vila too with missing files.
So let's see ready to install next.
Yes.
So I was previously.
Previously I was selecting the first one which has missing files.
Now I have selected the second one which is ready to install.
Yes
next.
Next and finish again.
You can see that we have a new device available now so I will click.
Okay let's see now what happens when I tried to add a Cisco SCV.
So it's a firewall as a category.
The product SCV from Cisco again K. VM it's required so all the major vendors if probably not all are
transitioning from selling boxes to selling software to say so.
And basically they're offering either free or in the case of Cisco through a contract.
No they're offering the softer versions of their appliances.
And in this case it's about the key VM QM that can be emulated.
Ingenious 3.
So let's keep next run the appliance on the genius BBM recommended next.
Next.
But now as opposed to the previous two cases we don't have anything available.
So everything says status missing files.
But if you look in the folder I have 9 8 2 version and this is not available here.
So I would just create a new version so create new version and let's say a CV 9 that aid up to and click
ok.
This is lined up eight to next.
No.
So this is not good.
This is not our image.
Never 9 that either too this is something that was previously found here somewhere.
Click import I'll go to download and select my image nine a two and open uploading the image now
and now it is ready to install.
So select my version and next.
Would you like to install this.
Of course.
Yes I I'm using this camera binary to run the image next as opposed to the IRS.
You can see that the ram.
It's a little bit more now.
So it's two gigs per person per SCV.
Next year appliance is available in the final category.
So that there is no default password default configuration is present and as a v goes through a double
would before becoming active.
So useful information yes to not panic and click finish.
Now it can see that we have also SCV present.
So imagine that there were times years ago when there was hard to to study to study technologies either
new current or really really new to say so now we have these tools available and we can study as much
as we as meek as we can and want.
And this is the very best example that I can give you.
So let's drag and drop two routers
let's drag also and say I'm not sure if it will be supported by my my P.C..
So this is one gig three gigs because this is two three gigs all.
Let's also take a switch role while creating the image is missing.
So let's see.
This is something.
This is something wrong so HDD browse downloads.
I want to use this image open
OK let's see now.
OK now it's working.
So remember what we have taught in the previous lectures.
We can now hit the Connect link.
Will use gigabit zero by zero.
Let's say this one gigabyte 0 0 0 by one year by 0 0 by 2 and 0 by 0 so now the topology is kind of
complete.
I want basically to test all these devices and see if they work if we can being from one side to the
other and so on.
So let's start one by one start
right click Start
switch start and the last one.
It's a Cisco essay SCV virtual running basically the newest Code 9 a 2 by the way something that has
been for a long time waited in the essay code in this version 9 a 2 interface tunnel it's available
in every interface tunnel it's available in the essay code.
I don't know if if it was at any moment in time useful to you but for me it was so we can run like side
to side with pins and you can just apply crypto opposite profile to the virtual tunnel that you could
do on the ice but on the essay was not available.
So that's a huge that's a huge step forward from Cisco.
And I will just demo this in an upcoming course as you will you'll see available now if we want to cancel
two to one by one we can just click to the three to the devices you can just right click and cancel
if you want to cancel to all of them at the same time remember we have this console connect all nodes
so I'm now connecting to all nodes and let's see this is the this is the C tied Vinci you remember this
was a package that was downloaded in the initial phase of the Genesis 3 installation so let's take it
one by one
this is the layer to this is the switch yes this is a broader and again a rather
so I just try to set them up real nice and let's see.
So this switch how are the interfaces looking everything it's up up perfect.
Let's go on to the to the rather now so I don't know which is which but it doesn't matter.
So I will just configure IP addressing on the interfaces and we will see if they if they see packets
coming in when the other one is going to ping.
So it does show IP interface brief.
Let's take this one and say the or you are one and the IP and not the interface but you by zero by zero
is going to receive the IP address 10 0 0 1 slash 24.
And I will just no shut the interface.
And this one will be a router to interface you by 0 by 0 IP address 10 0 0 2 and also slash 24 no shut
now look at that we have the NSA working so enable just hit enter it has no password defined in the
first place.
Show version.
Now look at that Cisco adaptive security appliance software version 9 8 2 this is really fantastic.
So show interface ip brief it's a little different.
We have connected the Gigabit Ethernet zero by zero so let's say interface with 0 by 0 IP address 10
0 0 3 2 5 5 2 5 5 2 5 5 0 and no shut show IP address.
And yes we have the first interface configured with 10 0 0 3 outlets being 10 0 0 1 from the NSA Yeah
we have to do something something else to work so let's fly from this one being 10 0 0 1 It's myself
and let's begin also.
The other one.
Now let's make sure that indeed this specific rudder which I have forgotten to say hostname to show
IP interface brief let's make let's make sure that indeed 10 0 0 2 or the packets is destined to this
IP address are reaching this rudder.
How do you do that debug IP ICMP.
Just repeat a command and yes.
So ICMP equal play send.
This is the source myself.
Destination 10 0 0 1 coming to this other road show IP interface brief.
Now let's see how this guy looks.
Show IP address we said and 0 0 3 show running config.
So let's make sure we have so put the names here as well so it invites zero by zero.
Let's see the switch how the switch looks show.
Still good.
Perfect.
Let's go on now and see the configuration.
And we have here the global policy
show run policy map.
You have points map global policy.
And we will just inspect also ICMP so comforting policy map global policy plus inspection.
Default
inspect ICMP and right.
Let's also say the configuration on on all of the devices.
Right.
And we have another one.
Right.
OK let's see now.
Why is this not no road to host show route
good
show interface ip Griff
so let's a county
road.
No interface.
By Zero by zero.
This is the problem Naomi if let's say this is outside
let's save the configuration
and think 10 0 0 1.
Perfect.
So let's enable on this side also debug IP ICMP.
And on this other one or two debug IP ICMP
so being 10 0 0 1 We've seen that the bugs coming
and also 10 0 0 2 inherently bugs.
So here we go.
We have basically installed and successfully tested the connection between an essay running the latest
code and also to Ayers routers running a new code 15 that's six through layer to ISV switch.
Let us try also just for fun configure let's say interface look back 0 IP address put that to not do
that to slash 32 and rather a Europe P 100 network by zero.
And now summary.
Let's go also on rider 1 and let's say crafted interface that one IP address 1 that 1 2 5 5 5 5 5 2
by 5.
Well yeah.
Jeremy one hundred auto summary network everything.
So we see that we have also each IP running and we're receiving the low back from the other end through
the repeat.
So if you say show IP HAARP neighbors we see that we have a neighbor on the other side and 0 0 2 we
are 10 0 0 1.
Once again this is ourselves.
We are having having a successful neighbor relationship with 10 0 0 2.
We have the cucumber zero meaning that the negotiation is complete and we have connectivity to the other
side as well to that to not do not to repeat.
Let's say I don't know 100 and the source is our self look back one yes.
So everything is working as expected.
This is basically the beginning of a long journey of a long starting journey to say so I hope that you'll
find this.
So I don't know useful and yet hopefully you'll use this this information on how to build your own lab
environment in order to practice whatever we want related to routing switching and now see security
also available.
So in the next lecture I will show you how to also add a connection to a real virtual machine.
So for example in this case I would like I don't know to have connected to this to this device a Windows
machine but I want it to be a real Windows P.C. so that I can also install software like any kind of
client or other software that's needed in a network to function.
So yeah thanks for viewing and see you in the next lecture.