Skip to main content

Posts

Showing posts with the label IPsec Protocol

What is Zero Touch Provisioning (ZTP)?

Zero touch provisioning or so called ZTP is the way to automatic configuration on Cisco vEdge devices for which almost zero manual intervention required. If we talk about the Zero touch provisioning, Networking traditionally has been a complex and manual for IT. The advent of SDN changed it all. Out of all benefits of SD-WAN, ZTP is among the top three. With ZTP, networking is automated and an intent driven process. Zero touch provisioning is a switch, that simplifies provisioning and configuration of devices automatically without any manual intervention. The switch (ZTP) downloads and runs the centrally stored configuration, which it acquires by sending a request through DHCP or TFTP. ZTP seamlessly allows IT to update OSs, deploy patches and bug fixes and embed additional features prior to connection. Using Scripts, ZTP can also connect to configuration management platforms or a custom tool. ZTP relies on below service which are: A license file provided ...

How to configure IPSEC static route?

Secure data traffic flow between vEdges, IPSEC is the mode of transport for data traffic to flow from one vEdge to another vEdge as overlay network. IPsec tunnels that run the Internet Key Exchange (IKE) protocol provide authentication and encryption to ensure secure packet transport. Internet Protocol Security is a secure network protocol suite that authenticates and encrypts the packets of data to provide secure encrypted communication between two computers over an Internet Protocol network. It is used in virtual private networks. Tunnel Redundancy: The interface is the IPsec tunnel interface in VPN 0. You can configure one or two IPsec tunnel interfaces. If you configure two, the first is the primary IPsec tunnel, and the second is the backup. With two interfaces, all packets are sent only to the primary tunnel. If that tunnel fails, all packets are then sent to the secondary tunnel. If the primary tunnel comes back up, all traffic is moved back to the primary IPsec tunnel...