WEBVTT

1
00:00:00.100 --> 00:00:06.100
The two Cisco routers already have a working physical link.

2
00:00:18.250 --> 00:00:23.750
The second router has the matching tunnel settings prepared.

3
00:00:33.350 --> 00:00:41.200
Choose matching IKE version two encryption, integrity, and key exchange settings.

4
00:00:44.800 --> 00:00:52.300
Add a keyring for the remote peer and enter the lab-only shared key.

5
00:00:56.050 --> 00:01:03.100
Match that peer address in the IKE profile and select pre-shared authentication.

6
00:01:07.050 --> 00:01:15.200
Set the IPsec transform and attach the IKE profile to the IPsec profile.

7
00:01:21.200 --> 00:01:29.200
Apply the protection profile to the tunnel and route the remote loopback through it.

8
00:01:30.900 --> 00:01:38.900
Check that the IKE session is ready, and send traffic to the remote loopback.

9
00:01:39.900 --> 00:01:45.400
Check the IPsec counters for traffic crossing the tunnel.

10
00:02:01.800 --> 00:02:10.800
Change the shared key on one router and check that the protected route stops carrying traffic.

11
00:02:11.450 --> 00:02:16.450
The physical link still reaches the other router.

12
00:02:33.300 --> 00:02:39.800
Restore the matching key and verify that protected traffic passes again.