In this supplemental video tutorial for Chapter #16 of the ENCORv8 curriculum we take a fresh look at configuring Site-to-Site IPsec VPNs, but this time we leverage the Static Virtual Tunnel Interface (SVTI) and with a custom ISAMKP/IPsec configuration leveraging the combined-mode cipher esp-gcm (combining BOTH Confidentiality and Integrity) with IKEv2. We walk through the configuration of the IKEv2 proposal, policy, keyring, profile, the IPsec transform set and the all important IPsec profile that we apply to our SVTI! Enjoy!
***This video is an in-depth tutorial and is far more than simply an answer key to the aforementioned Packet Tracer activity. This tutorial is being made to assist my UMGC CMIT-455 learners in their journey through the ENCOR v8 material so, if you are just looking for a shortcut or easy answers for the activity, this is not the video you should watch. However, if you are looking to gain a deeper understanding on inter-VLAN routing configuration and designs, my hope is that this will increase your comprehension and help you to become a better and more effective network engineer. Enjoy!
*This techtorial/Packet Tracer activity is all done running Cisco Modeling Labs (CML) v2.1.1-b19, some physical routers in my Evil Command Center Lab and/or Packet Tracer version 7.3.1.0362 (for the Mac) which was just recently released! The MINIMUM version you can use for any of the new CCNAv8 curriculum activities is Packet Tracer v7.3.0! Be sure to leave your feedback and questions below and I hope I have earned the privilege of your time!