Controller Deployment

8. vManage VPN & Static Route Configuration

In this section I am going to show you how you can configure the Vmanage VPN config. Remember when we were talking about vanage? I have Vmanage hosted over ESXi and I have two interfaces, say one. Is it zero one? Is it a net one? Now ETH zero I want to configure, say, inside VPNfive one two, and that will be my management VPN. And I want to configure this ETH one inside my VPN zero, which is used to transport or control traffic. So let me go and let me check my V Manage configuration. Because by default we have some other configuration which is not exactly what we have here in the diagram. You can go to visual, you can type clear, you can exit. Okay, vshel is the excel line, and from there you can do a lot of things in V Edge or Viptela cloud devices. Okay, so let me check here to show interfacedescription what the available VPNs are. Here you can see the VPN. Now it has added a system interface. Inside VPN. I have ETH. Zero. I have ETH one, and if zero is getting IP addresses, I can check by going to show run and then saying VPN zero. And VPN shows that I have an ETHzero that is obtaining the IPV4 address from which I am connecting to this device. This is incorrect because we want to move ETH 0 inside VPN 5 1 2. So what I can do is go first to VPN zero and I can type 0 to say interface 80 and then what I can do is type VPN five one two and here I want to attach interface, say E zero. So you have to give the full name, otherwise it will not understand between Et zero and E t is zero. I need to do it no shut.Despite the fact that there is no shutdown. And then I can do IP address IPD HCP client. Even in Cisco, we have something IP address and then some DHCP. That's also correct. We can validate it. Okay, now what I want to do before exiting is go inside my VPN zero and VPN zero to add an interface called one. Here I want to give an IP address, say 2272 slash 24, very much similar to the Juniper operating system or even in Nexus. We have this format of IP address, and I believe ISR does as well. This also means I won't be able to shutdown. Let me validate it before exiting from here. So it's correct. Now you can see that I am inside this interface. If I type a question mark, then we have so many options, okay? Now, if I exit from here and type a question mark, I have these options inside VPN. So what I want is I actually want to let me press the up arrow like in Cisco devices. We are doing up and down arrows. So what I want is to go inside it, and inside that I want to enable tunnel interfaces. Okay? Just enable.

9. vSmart & vBond VPN & Static Route Configuration

In this section I am going to configure the VPN interfaces for V-Bond and V-Smart. Now here is one thing I want to point out. Whenever you are configuring the V bond, at that time you are giving the V bond IP. It is important to understand here that you have to use a keyword called local here. So according to the document, the OVA file for sayV edge and V bond are the same until you convert that OVA, or you can convert that particular appliance to VH to V bond, and to convert that, you have to use the keyword called local. So that's very important. I need to edit this and I need to make this as we want IP and thenlocal and then I'll do the rest of the configuration. So let me clean this stuff. Let me go back. Let's do this. We want two six two and then use a keyword called local commit. Now here you can see that I have this interface where I'm getting the IP address from the ISP or via DHCP. I need to change that. I need to give a manual IP address here. That will be 2262. You know that IP and then address. So let me type my IP address, and then obviously no shut down. It is already shut down. Let's validate this first and then commit and quit. Now I can check the description. This is okay. VPN has gig and it's zero in VPNfive one two that are shared by all devices. If zero is inside the VPN, show the interface description five one two correct. Now, what I want to do here now is let me create the static route as well. So that is my IP route zero zero towards the gateway and later on I will do the pin test. So let me type two to six and finally commit and quit. Likewise, Let's configure vs. Smart. If I go to Vsmart, if I check the showinterface description, you'll find that each zero is an insideVPN zero that I need to correct. And I have to give manual IP to the ETH one. So I can access VPN zero. I can go inside the interface of ETH zero. I have to remove this. So let's do it like this. First go inside this, then type interface e to zero. That is correct. Then what interface do you want that ETH zero will be part of? It should be part of VPN 502 with an Ipdscp client. Obviously, no shutdown is already there. Then I can go inside VPN zero because here I want to add interface ETH one where the IP address is something like 2252 and then the subnetmask. So let me type that. It is my channel interface correctly. And here I want to allow service to validate this. First, proceed to the top. Check the configurations that you are going to push. Here you can see that VPN five one two. I have allowed or assigned zero calories to this location. So what will happen once I commit to this? This will also become offline. because it will try to get the address from the ISP through this particular management interface. So let's do that. Now you can see that it is going offline. So all of these things, such as the DHCP discover offer process, will take place behind the scenes, and then it will obtain the address. show interface description check now it is obtaining this specific address Everything is okay. Everything is up and fine. Let me go inside the VPN and create an IP route towards the gateway. The gateway will be two-two-say five-one. What do I want to do now? I want to do the pin test from all the servers. So if I pin to the bemanageit, it should reach because we have IP reachability. We have the IP route to reach that particular VSSMART and VONE here also. It is a chain. Okay, so now what we have done is the system wide configuration. Then we have to do the VPN configuration. And then we have to create the IP route or the static route. So all my controllers have intercontroller reachability.

10. Add Controllers to vManage Dashboard

In this section, I'm going to show you how you can add different controllers to the V-Manage dashboard. Let me log in to the Vanish dashboard first. The default username and password are admin and admin. Once you log in to this dashboard,then you need to add the devices. Suppose we are logging in for the first time to the dashboard. Let me show you the other components we have. In this we manage the dashboard. Here you can see we have a menu where we have the monitor configured. So let me highlight all these things, say monitor configure,tools, maintenance, administration, and vanalytics. Because this particular banana dashboard is a centralised engine or centralised managed dashboard from where you can manage the entire Vipela fabric. So you have all the configurational options related to all the components inside the Vipela fabric. Here at the moment, you can see the counters are showing zero because we haven't added the components or thecontrollers and V edges to this particular dashboard. Or, to be more specific, we manage controller with this particular. So for that we need to go inside,say configuration and then devices. Here go insidecontrollers, add controllers, V bond. We need to give the IP address of the V-Bond username and password. Here you can see the generated CSR check. Okay, it will generate a CSR and we'll wait till it will add.You can see it has added V one instantly. Likewise, we'll go and we'll add the Vs mark. So let's go ahead and add fivetwo with the username and password. Now here you can see we have the option for protocols like DTLs. And if I click here, you'll find the option for TLS as well. So what does it mean? It means that we are talking about these controllers,say via smart, V manage, and V bond. This V bond has the option of doingDTLs, which is a UDP type of tunnel layer security. But this V is smart and we managed, so they have options. They can either use TLS or DTLs. It's either TCP or UDP. So let me make this a DTL. And here again, we have the generated CSR. Suppose you are not generating the CSR. Again, we have an option for that. You can go here to learn more and from here you can also generate the CSR. For example, our view management hasn't generated the CSR for vanage. So what I can do here, I can go to the mainland from here. You can't do this. What you can do here Okay, no problem. Let's see what options we have here in the configuration and device options. So we have options related to local configuration, running configuration template, log and edit. Now to the certificate option where you have to let me show you that as well. Here you don't have the certificate option, you have to go inside certificates, controllers, same type of page you will find here as well, but here you'll find the status of the CSR. So we had no trouble generating certificates for V bond and V smart. But for Vanish, we need to generate one. So for that, what can you do? Go ahead to the mode and here you can have this generate the CSR option. Click there and once you click there, you can see that we have this CSR generated over here. So this is how you add the controllers to the V Manage dashboard and, obviously, how you generate the CSR.

11. Add CSR to Root CA Server

Let me show you. That's how you can add the CaSR to the root CA. I have a root CA here. What can I do here? I will go and move to super user and then I can go to sayhome where I want to store my CSR, say CSR folder. So in this particular CSR folder, I want to store the CA or the CSRs actually. So for that, what can I do here? First of all, I need the CSR. So I'll go here to my dashboard. First of all, let me copy the CSR from my Vmanage control A and control Z, then let me move back here. Here I can go to my VI editor, savemanageCSR, type I to move to insert mode, sip, insert, skip, and then write and quit. So likewise, I will generate or I will copy the CSR for say, the V bond. This time, saybond CSR, I'll go back this time, I'll take the CSR from the V bond. So let me view the CSR. It is coming. Say control A, control C here in I for insert mode,then insert, skip, quit with writing. Likewise, I say VsmartCSR again. Go back, open the CSR for VA smart. So the same process I'm going to do, then I'll go back, say iPhone insert, then shift insert skip. Okay, now if you go and check the view manage dashboard, let me close this first. Now here you can see the steps. So first of all, we have added the devices. Now we are generating the CSR. Then we must upload the certificate, followed by whatever we desire. So these are the steps. Let us say the error counter is also increasing or the alert messages are increasing. Now it's six, no problem. So this is step number one. Now let me finish. So what do I do now from the list of CSRs Here, I will generate the permanent key. For that, I'm going to use a Linux service called OpenSSL. So let me move one step back. I'm in the root directory and here I can type OpenSSL CA. This is the big command that you can copy into the notepad. As a result, you will reduce error or any type of CSR. Now let me check the order for this. The general order is to do this: first add the certificate for Vsmart, then V bond, then we manage like that. So we have one certificate. Let me add here, that is Vsmart CSR and the output I want to store in new certs, say newcerts, and then via smart dot permanent, things will come, just do yes, yes. Then repeat the process for yes. And finally, you can do it for the view manage.Thank you. If you make any type of mistake,then it will throw an ank you. IfSo this is the way that we can generate the CSR, add it to the root CA, and from there we can generate the permanent key. Suppose you want to check or see this permanent key, you can go to New Certs, and then you can do LS minus La. So you can see these three permanent keys. If you want to verify this, you can do so. And this way, you can check the certificate. Okay, so let me stop here. The next section will continue from here.

12. Permanent certificates & install certificates to controllers

In this section, I'm going to show you how you can install these public certificates on all the controllers, and then we'll see how we can install the certificates over the controllers. Okay? So let me copy this. Let me go to the controllers. I can type vishell to go to the shell from here. I can go to home, say admin, and then type root CA to type in okay. Similarly, I will load this to all this say home; we must first enter the visual, then I will say home admin rootc I for insert okay. And then finally, via Smart, v forshell, then we can go to admin rootca. So once we do this copy, then what we can do is, I can exit, I can request the root search chain,say install, and let me clear the screen, say from where? As you can see, it was a success. Likewise, I can copy this command and then exit, paste it successfully, and exit successfully, so all these things are successful. Now the next step is to install the certificate. So for that, what I can do here. First of all, I will install the certificate for Vanage, so I can do this inside the new set folder cat vmanage PIM. and then I will copy the entire certificate. Okay, let me scroll and copy this, "up to here, up to end certificate copy." Now I'll go to my dashboard and here I want to add the certificate. So what we can do here is let me show this. First of all, we'll add a certificate to install a certificate for say we manage. So let me do that first. I'll install the certificate, the same certificate that I have copied. I will paste it here. We have this option of selecting file as well, but no problem. We can paste, we can install. So the installation is in progress and let us see what the messages are we are getting installed on this system contacting vbond contacting we manage the V bond file So first of all, it tried to authenticate with V bond.Now it is clear that it was successful again. I go to configuration and certificates and the controllers. So here you can see we bond, we update, we manage. Okay, and at the bottom you can see upload certificate rebound certificate in this particular section. Let me highlight that. Okay, So likewise, we'll install the certificate via Smart and Von as well. So let me go back up to my property and from there this time I will copy the certificate, saying forvsmart, so let us copy that. Oftentimes, you'll find that these processes are repetitive and a bit boring. But this is the way that we can bring up our control plane or the controllers. As a result, you can copy all the way to the end of the certificate. This time I want to install for VA Smart Installer. Put it here to install, then we'll check the message again. In the progress bar, two to five to Admin contacting,we manage contacting, we manage, then we manage. So now it is contacting the management. We manage, everything is successful. Try to push that then if everything is successful. If we go to our certificate section in the controller, you will find that V bond updated via Smart like that, so you'll get that sync message here. Let me show you that alert there are some file issues. Let's close this. Continue with our installation, so finally I have to do this for V bond and for that also I'll go back and I'll upload that I'll type "not VI actually." Otherwise, it will go to that file, so catwebonePIM and let's copy this quickly once copy it.Go to your dashboard. Install this certificate, and then we'll wait until we can see the messages 2262 certificate device installation Okay, started by Admin So this is in progress. We'll wait. It will take a minute or two, but finally we'll get this success. So if you go back to your certificates in the controller section now, you can see that the adddevice unit CSR V bond update is showing that it is done. So these are the steps that you can add all your controllers I have shown you from beginning to end, and this is the way that you can bring up your controllers, or you can say that you can bring up your control plane.

ExamSnap's Cisco 300-415 Practice Test Questions and Exam Dumps, study guide, and video training course are complicated in premium bundle. The Exam Updated are monitored by Industry Leading IT Trainers with over 15 years of experience, Cisco 300-415 Exam Dumps and Practice Test Questions cover all the Exam Objectives to make sure you pass your exam easily.