FlexVPN - Dynamic Tunnels & Certificate Auth

[@NullRoute-f2v]

Thank you very much for this video! Help me understand much better how certificate terminology relates to cisco. This video explains it even better than pluralsight or cbtnuggets, since you covered every possible step including self-signing with own root CA which is in my opinion needed if someone wants to fully understand PKI! Thanks!

[@JonMajorCCIE47884]

Thank you!

[@gmoise98]

This is so much better than what's on Cisco's Site. It's 2019 and relevant still. Thanks for the video.

[@AlexeyTsapaev]

Hey, I am from VPN SEC team and love your video! this really is a quality! Hey, may I ask you if you plan on shooting any video on PKI on windows server? Could you please elaborate on templates? not sure if I 100% understood the point! great video one more time! Subscribed to your channel and look forward ;)

[@michaelstromberg1827]

Very nice and clean videos here on your channel, thank you for your work. Maybe if you searching for the next video subject you could review DoubleHub FlexVPN with EIGRP setup. I think it's well known topology in case of DMVPN, so it would be great if you review FlexVPN in this angle.

[@JonMajorCCIE47884]

Mikhail Klyavlin That'd be an awesome video! That'll definitely be my next one. With luck I'll have it out before end of year.

[@geoffgriffin8919]

Mate, that was amazing. Great info. Great video.Cheers

[@JonMajorCCIE47884]

Thank you sir!

[@geoffgriffin8919]

Cisco has loads and loads of information, a lot of which is outdated and non specific. You have summed up the process rather well, importantly, you explained why and why not certain commands were used, as well as an explanation on some new flex commands. I find this invaluable. Furthermore, you have good on-screen personality (rare for a tech field), having created training videos in a similar (albeit a lot smaller) fashion at my work, you clearly thought out and planned what and how you wanted to explain this topic. The only polish you missed out on was a config dump for the lazy and a hyper-link to your Knerd website ;) Thanks again

[@JonMajorCCIE47884]

Geoff Griffin Thanks for the notes sir and I'm glad you found this valuable! I'll try to keep them coming for sure.

[@geoffgriffin8919]

Hi Jon, I've finally had a chance to run with this one, I've run into a few snags, is there any chance you have saved a copy of this environment and could post the config files? BTW, any word on your next vid? My inner-knerd is jonesing. ;)

[@JonMajorCCIE47884]

I don't believe I still have those configs, but maybe you could me yours? I wouldn't mind doing a little debugging. As for the next video, I really want to do one soon. I too have the itch. Need to make it through the recert process first though.

[@visorescolector]

if I use FlexVPN between 5 cisco spoke routers and one hub router using Internet, do I need to request a static valid IP address (routable) or can be dynamic IP that could change in the spoke routers?

[@JonMajorCCIE47884]

The Hub can have a dynamic IP. You'll want a DynDNS solution, and to have the hub router configured to update that when its IP changes.

[@JonMajorCCIE47884]

Just make sure to use fqdn and dynamic keywords when defining your hub on the spokes. I.E. 'peer 1 hub.networkknerd.com dynamic'.

[@SteveOcchiogrosso]

Awesome video! Flexvpn FTW!

[@JonMajorCCIE47884]

Thanks brotha!!

[@fleskfan100]

good stuff, great help

[@JonMajorCCIE47884]

Thank you sir! Thanks for watching what's possibly my longest video ever lol.

[@benyicl92]

14:13

[@hossammostafa6854]

Thanks

[@JonMajorCCIE47884]

You're very welcome!