{"id":2255,"date":"2022-03-30T00:50:10","date_gmt":"2022-03-30T00:50:10","guid":{"rendered":"https:\/\/tungle.ca\/?p=2255"},"modified":"2022-03-30T20:24:17","modified_gmt":"2022-03-30T20:24:17","slug":"deploy-vpn-site-to-site-between-palo-alto-on-prem-and-aws-vpn-setup-openvpn-and-additional-domain-controller-on-aws","status":"publish","type":"post","link":"https:\/\/tungle.ca\/?p=2255","title":{"rendered":"Deploy VPN site-to-site between Palo Alto on-prem and AWS. Setup OpenVPN and additional Domain Controller on AWS"},"content":{"rendered":"\n<p>This is the diagram is used to deploy this lab.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"397\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-291-1024x397.png\" alt=\"\" class=\"wp-image-2256\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-291-1024x397.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-291-300x116.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-291-768x297.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-291-200x77.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-291.png 1123w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>In this lab.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Configure VPN site to site IKEv2 between Palo Alto and Virtual Private Gateway on AWS.<\/li><li>Implementing multi-master domain controllers on-prem and AWS.<\/li><li>Authenticating OpenVPN tunnel via LDAP to support people working from home to access corporate servers on AWS.<\/li><li>Disconnect the domain controller on-prem to simulate migrating corporate servers to AWS in the near future.<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"674\" height=\"475\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-398.png\" alt=\"\" class=\"wp-image-2366\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-398.png 674w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-398-300x211.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-398-200x141.png 200w\" sizes=\"auto, (max-width: 674px) 100vw, 674px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"694\" height=\"491\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-347.png\" alt=\"\" class=\"wp-image-2312\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-347.png 694w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-347-300x212.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-347-200x141.png 200w\" sizes=\"auto, (max-width: 694px) 100vw, 694px\" \/><\/figure>\n\n\n\n<p>Core Switch configuration.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>CoreSW\nconf t\nhostname CoreSW\nip routing\nip dhcp excluded-address 172.16.10.1 172.16.10.10\n!\nip dhcp pool VLAN10\n network 172.16.10.0 255.255.255.0\n default-router 172.16.10.1\n dns-server 172.16.20.12\n\ninterface GigabitEthernet0\/0\n no switchport\n ip address 172.16.1.1 255.255.255.0\n!\ninterface GigabitEthernet0\/1\n switchport trunk allowed vlan 10,20,99\n switchport trunk encapsulation dot1q\n switchport trunk native vlan 99\n switchport mode trunk\n negotiation auto\n!\ninterface GigabitEthernet0\/2\n switchport trunk allowed vlan 10,20,99\n switchport trunk encapsulation dot1q\n switchport trunk native vlan 99\n switchport mode trunk\n\ninterface Vlan10\n ip address 172.16.10.1 255.255.255.0\n!\ninterface Vlan20\n ip address 172.16.20.1 255.255.255.0\n!\nrouter ospf 1\n router-id 1.1.1.1\n network 172.16.0.0 0.0.255.255 area 0\n!\nip route 0.0.0.0 0.0.0.0 172.16.1.254\n\n--- \nSWCore#sh vlan brief\n\nVLAN Name                             Status    Ports\n---- -------------------------------- --------- -------------------------------\n1    default                          active    Gi0\/3, Gi1\/0, Gi1\/1, Gi1\/2\n                                                Gi1\/3, Gi2\/0, Gi2\/1, Gi2\/2\n                                                Gi2\/3, Gi3\/0, Gi3\/1, Gi3\/2\n                                                Gi3\/3\n10   End users                        active\n20   Servers                          active\n99   Native VLAN                      active<\/code><\/pre>\n\n\n\n<p>Check Kali VM., start SSH and Apache service on this machine.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"602\" height=\"456\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-292.png\" alt=\"\" class=\"wp-image-2257\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-292.png 602w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-292-300x227.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-292-200x151.png 200w\" sizes=\"auto, (max-width: 602px) 100vw, 602px\" \/><\/figure>\n\n\n\n<p>On Palo Alto.<\/p>\n\n\n\n<p>LAN interface.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"755\" height=\"573\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-397.png\" alt=\"\" class=\"wp-image-2365\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-397.png 755w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-397-300x228.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-397-200x152.png 200w\" sizes=\"auto, (max-width: 755px) 100vw, 755px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"938\" height=\"466\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-293.png\" alt=\"\" class=\"wp-image-2258\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-293.png 938w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-293-300x149.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-293-768x382.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-293-200x99.png 200w\" sizes=\"auto, (max-width: 938px) 100vw, 938px\" \/><\/figure>\n\n\n\n<p>e1\/1 belongs to the VPN zone, and e1\/2 belongs to the LAN zone, respectively.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"720\" height=\"447\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-294.png\" alt=\"\" class=\"wp-image-2259\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-294.png 720w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-294-300x186.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-294-200x124.png 200w\" sizes=\"auto, (max-width: 720px) 100vw, 720px\" \/><\/figure>\n\n\n\n<p>Create a new network object for the PA LAN subnet.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"936\" height=\"339\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-295.png\" alt=\"\" class=\"wp-image-2260\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-295.png 936w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-295-300x109.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-295-768x278.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-295-200x72.png 200w\" sizes=\"auto, (max-width: 936px) 100vw, 936px\" \/><\/figure>\n\n\n\n<p>Configure SNAT to allow traffic from the PA LAN subnet to access the Internet.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"936\" height=\"339\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-296.png\" alt=\"\" class=\"wp-image-2261\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-296.png 936w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-296-300x109.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-296-768x278.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-296-200x72.png 200w\" sizes=\"auto, (max-width: 936px) 100vw, 936px\" \/><figcaption>Configure a default route.<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"795\" height=\"514\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-297.png\" alt=\"\" class=\"wp-image-2262\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-297.png 795w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-297-300x194.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-297-768x497.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-297-200x129.png 200w\" sizes=\"auto, (max-width: 795px) 100vw, 795px\" \/><\/figure>\n\n\n\n<p>Configure OSPF on PA.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"796\" height=\"577\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-298.png\" alt=\"\" class=\"wp-image-2263\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-298.png 796w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-298-300x217.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-298-768x557.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-298-200x145.png 200w\" sizes=\"auto, (max-width: 796px) 100vw, 796px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"787\" height=\"588\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-299.png\" alt=\"\" class=\"wp-image-2264\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-299.png 787w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-299-300x224.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-299-768x574.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-299-200x149.png 200w\" sizes=\"auto, (max-width: 787px) 100vw, 787px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"559\" height=\"366\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-301.png\" alt=\"\" class=\"wp-image-2266\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-301.png 559w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-301-300x196.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-301-200x131.png 200w\" sizes=\"auto, (max-width: 559px) 100vw, 559px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"568\" height=\"361\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-302.png\" alt=\"\" class=\"wp-image-2267\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-302.png 568w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-302-300x191.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-302-200x127.png 200w\" sizes=\"auto, (max-width: 568px) 100vw, 568px\" \/><\/figure>\n\n\n\n<p>Allow ICMP on the Mgmt interface to troubleshoot.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"713\" height=\"579\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-304.png\" alt=\"\" class=\"wp-image-2269\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-304.png 713w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-304-300x244.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-304-200x162.png 200w\" sizes=\"auto, (max-width: 713px) 100vw, 713px\" \/><\/figure>\n\n\n\n<p>Ping from PA.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"655\" height=\"322\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-303.png\" alt=\"\" class=\"wp-image-2268\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-303.png 655w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-303-300x147.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-303-200x98.png 200w\" sizes=\"auto, (max-width: 655px) 100vw, 655px\" \/><\/figure>\n\n\n\n<p>Ping from a VM on the PA LAN subnet.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"492\" height=\"213\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-305.png\" alt=\"\" class=\"wp-image-2270\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-305.png 492w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-305-300x130.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-305-200x87.png 200w\" sizes=\"auto, (max-width: 492px) 100vw, 492px\" \/><\/figure>\n\n\n\n<p>+ Create a new VPC.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"705\" height=\"751\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-306.png\" alt=\"\" class=\"wp-image-2271\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-306.png 705w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-306-282x300.png 282w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-306-188x200.png 188w\" sizes=\"auto, (max-width: 705px) 100vw, 705px\" \/><\/figure>\n\n\n\n<p>Create a private subnet.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"726\" height=\"894\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-307.png\" alt=\"\" class=\"wp-image-2272\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-307.png 726w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-307-244x300.png 244w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-307-162x200.png 162w\" sizes=\"auto, (max-width: 726px) 100vw, 726px\" \/><\/figure>\n\n\n\n<p>Create and attach Internet gateway to your VPC.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"473\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-308-1024x473.png\" alt=\"\" class=\"wp-image-2273\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-308-1024x473.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-308-300x139.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-308-768x355.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-308-200x92.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-308.png 1205w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Route table.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"599\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-309-1024x599.png\" alt=\"\" class=\"wp-image-2274\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-309-1024x599.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-309-300x176.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-309-768x449.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-309-200x117.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-309.png 1326w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Add a new route to your Internet Gateway.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"390\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-310-1024x390.png\" alt=\"\" class=\"wp-image-2275\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-310-1024x390.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-310-300x114.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-310-768x293.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-310-200x76.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-310.png 1139w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Go to VPN, create a customer gateway.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"736\" height=\"887\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-311.png\" alt=\"\" class=\"wp-image-2276\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-311.png 736w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-311-249x300.png 249w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-311-166x200.png 166w\" sizes=\"auto, (max-width: 736px) 100vw, 736px\" \/><\/figure>\n\n\n\n<p>Create a new VPN gateway.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"721\" height=\"806\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-312.png\" alt=\"\" class=\"wp-image-2277\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-312.png 721w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-312-268x300.png 268w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-312-179x200.png 179w\" sizes=\"auto, (max-width: 721px) 100vw, 721px\" \/><\/figure>\n\n\n\n<p>Attach it to your VPC.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"725\" height=\"479\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-313.png\" alt=\"\" class=\"wp-image-2278\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-313.png 725w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-313-300x198.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-313-200x132.png 200w\" sizes=\"auto, (max-width: 725px) 100vw, 725px\" \/><\/figure>\n\n\n\n<p>Create a VPN site to site.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"696\" height=\"587\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-314.png\" alt=\"\" class=\"wp-image-2279\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-314.png 696w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-314-300x253.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-314-200x169.png 200w\" sizes=\"auto, (max-width: 696px) 100vw, 696px\" \/><\/figure>\n\n\n\n<p> <\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"695\" height=\"903\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-315.png\" alt=\"\" class=\"wp-image-2280\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-315.png 695w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-315-231x300.png 231w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-315-154x200.png 154w\" sizes=\"auto, (max-width: 695px) 100vw, 695px\" \/><\/figure>\n\n\n\n<p>Go to the Route table and add a new route to PA LAN subnet.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"366\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-316-1024x366.png\" alt=\"\" class=\"wp-image-2281\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-316-1024x366.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-316-300x107.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-316-768x274.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-316-200x71.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-316.png 1411w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Click Download Configuration and select information as the following screenshot.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"447\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-317-1024x447.png\" alt=\"\" class=\"wp-image-2282\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-317-1024x447.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-317-300x131.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-317-768x336.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-317-200x87.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-317.png 1254w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"520\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-321-1024x520.png\" alt=\"\" class=\"wp-image-2286\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-321-1024x520.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-321-300x152.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-321-768x390.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-321-200x101.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-321.png 1352w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Open the file to use for configuring PA.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"757\" height=\"758\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-318.png\" alt=\"\" class=\"wp-image-2283\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-318.png 757w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-318-300x300.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-318-150x150.png 150w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-318-200x200.png 200w\" sizes=\"auto, (max-width: 757px) 100vw, 757px\" \/><\/figure>\n\n\n\n<p>Configure IKECrypto.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"496\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-319-1024x496.png\" alt=\"\" class=\"wp-image-2284\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-319-1024x496.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-319-300x145.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-319-768x372.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-319-200x97.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-319.png 1301w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Configure IPSECCrypto.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"506\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-320-1024x506.png\" alt=\"\" class=\"wp-image-2285\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-320-1024x506.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-320-300x148.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-320-768x380.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-320-200x99.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-320.png 1281w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Configure IKE Gateway.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"545\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-322-1024x545.png\" alt=\"\" class=\"wp-image-2287\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-322-1024x545.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-322-300x160.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-322-768x409.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-322-200x107.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-322.png 1198w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"461\" height=\"290\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-323.png\" alt=\"\" class=\"wp-image-2288\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-323.png 461w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-323-300x189.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-323-200x126.png 200w\" sizes=\"auto, (max-width: 461px) 100vw, 461px\" \/><\/figure>\n\n\n\n<p>Create a new interface tunnel 1 for VPN IPSEC site to site between FG on AWS and PA.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"855\" height=\"422\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-324.png\" alt=\"\" class=\"wp-image-2289\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-324.png 855w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-324-300x148.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-324-768x379.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-324-200x99.png 200w\" sizes=\"auto, (max-width: 855px) 100vw, 855px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"504\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-325-1024x504.png\" alt=\"\" class=\"wp-image-2290\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-325-1024x504.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-325-300x148.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-325-768x378.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-325-200x98.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-325.png 1230w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Configure IPSEC Tunnel.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"848\" height=\"492\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-326.png\" alt=\"\" class=\"wp-image-2291\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-326.png 848w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-326-300x174.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-326-768x446.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-326-200x116.png 200w\" sizes=\"auto, (max-width: 848px) 100vw, 848px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"597\" height=\"355\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-327.png\" alt=\"\" class=\"wp-image-2292\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-327.png 597w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-327-300x178.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-327-200x119.png 200w\" sizes=\"auto, (max-width: 597px) 100vw, 597px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"777\" height=\"543\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-329.png\" alt=\"\" class=\"wp-image-2294\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-329.png 777w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-329-300x210.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-329-768x537.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-329-200x140.png 200w\" sizes=\"auto, (max-width: 777px) 100vw, 777px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"928\" height=\"328\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-328.png\" alt=\"\" class=\"wp-image-2293\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-328.png 928w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-328-300x106.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-328-768x271.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-328-200x71.png 200w\" sizes=\"auto, (max-width: 928px) 100vw, 928px\" \/><\/figure>\n\n\n\n<p>On Virtual Routers, add an interface tunnel 1 on the router settings.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"773\" height=\"581\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-330.png\" alt=\"\" class=\"wp-image-2295\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-330.png 773w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-330-300x225.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-330-768x577.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-330-200x150.png 200w\" sizes=\"auto, (max-width: 773px) 100vw, 773px\" \/><\/figure>\n\n\n\n<p>Create a new static route to the AWS LAN subnet.<\/p>\n\n\n\n<p>New address object.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"609\" height=\"319\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-331.png\" alt=\"\" class=\"wp-image-2296\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-331.png 609w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-331-300x157.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-331-200x105.png 200w\" sizes=\"auto, (max-width: 609px) 100vw, 609px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"622\" height=\"423\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-332.png\" alt=\"\" class=\"wp-image-2297\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-332.png 622w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-332-300x204.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-332-200x136.png 200w\" sizes=\"auto, (max-width: 622px) 100vw, 622px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"941\" height=\"690\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-333.png\" alt=\"\" class=\"wp-image-2298\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-333.png 941w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-333-300x220.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-333-768x563.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-333-200x147.png 200w\" sizes=\"auto, (max-width: 941px) 100vw, 941px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"791\" height=\"573\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-334.png\" alt=\"\" class=\"wp-image-2299\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-334.png 791w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-334-300x217.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-334-768x556.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-334-200x145.png 200w\" sizes=\"auto, (max-width: 791px) 100vw, 791px\" \/><\/figure>\n\n\n\n<p>Create both Security policies to allow traffic from LAN to VPN.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"912\" height=\"392\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-335.png\" alt=\"\" class=\"wp-image-2300\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-335.png 912w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-335-300x129.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-335-768x330.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-335-200x86.png 200w\" sizes=\"auto, (max-width: 912px) 100vw, 912px\" \/><\/figure>\n\n\n\n<p>+ Back to AWS, create a new Linux and Windows instance on AWS.<\/p>\n\n\n\n<p>Create a new key pair on AWS.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"796\" height=\"706\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-337.png\" alt=\"\" class=\"wp-image-2302\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-337.png 796w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-337-300x266.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-337-768x681.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-337-200x177.png 200w\" sizes=\"auto, (max-width: 796px) 100vw, 796px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"739\" height=\"692\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-336.png\" alt=\"\" class=\"wp-image-2301\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-336.png 739w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-336-300x281.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-336-200x187.png 200w\" sizes=\"auto, (max-width: 739px) 100vw, 739px\" \/><\/figure>\n\n\n\n<p>Allow HTTP, SSH, and ICMP on Security Group.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"391\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-338-1024x391.png\" alt=\"\" class=\"wp-image-2303\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-338-1024x391.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-338-300x114.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-338-768x293.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-338-200x76.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-338.png 1491w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"761\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-339-1024x761.png\" alt=\"\" class=\"wp-image-2304\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-339-1024x761.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-339-300x223.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-339-768x571.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-339-200x149.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-339.png 1045w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Back to GNS3, configure a new Windows 2016 server VM.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"603\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-340-1024x603.png\" alt=\"\" class=\"wp-image-2305\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-340-1024x603.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-340-300x177.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-340-768x452.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-340-200x118.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-340.png 1268w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Takes notes of IP address of Linux instance on AWS.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"554\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-341-1024x554.png\" alt=\"\" class=\"wp-image-2306\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-341-1024x554.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-341-300x162.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-341-768x416.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-341-1536x832.png 1536w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-341-200x108.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-341.png 1592w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Ping the Linux instance on AWS LAN subnet from PA LAN subnet.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"729\" height=\"484\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-342.png\" alt=\"\" class=\"wp-image-2307\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-342.png 729w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-342-300x199.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-342-200x133.png 200w\" sizes=\"auto, (max-width: 729px) 100vw, 729px\" \/><\/figure>\n\n\n\n<p>The tunnel is up on PA<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"990\" height=\"389\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-343.png\" alt=\"\" class=\"wp-image-2308\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-343.png 990w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-343-300x118.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-343-768x302.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-343-200x79.png 200w\" sizes=\"auto, (max-width: 990px) 100vw, 990px\" \/><\/figure>\n\n\n\n<p>On AWS, the tunnel is up as well.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"542\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-345-1024x542.png\" alt=\"\" class=\"wp-image-2310\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-345-1024x542.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-345-300x159.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-345-768x406.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-345-200x106.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-345.png 1418w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Configure Windows 2016 on GNS3.<\/p>\n\n\n\n<p>Install Windows 2016.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"833\" height=\"490\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-346.png\" alt=\"\" class=\"wp-image-2311\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-346.png 833w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-346-300x176.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-346-768x452.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-346-200x118.png 200w\" sizes=\"auto, (max-width: 833px) 100vw, 833px\" \/><\/figure>\n\n\n\n<p>On Kali, access SSH to Linux VM instance on AWS&gt;<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"856\" height=\"577\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-348.png\" alt=\"\" class=\"wp-image-2313\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-348.png 856w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-348-300x202.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-348-768x518.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-348-200x135.png 200w\" sizes=\"auto, (max-width: 856px) 100vw, 856px\" \/><\/figure>\n\n\n\n<p>Website on-prem.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-350.png\" alt=\"\" class=\"wp-image-2315\" width=\"350\" height=\"282\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-350.png 640w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-350-300x242.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-350-200x161.png 200w\" sizes=\"auto, (max-width: 350px) 100vw, 350px\" \/><\/figure>\n\n\n\n<p>Website on AWS.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-351.png\" alt=\"\" class=\"wp-image-2316\" width=\"364\" height=\"270\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-351.png 716w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-351-300x223.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-351-200x149.png 200w\" sizes=\"auto, (max-width: 364px) 100vw, 364px\" \/><\/figure>\n\n\n\n<p>Change computer name to DC1 and promote it to a domain controller.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"456\" height=\"552\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-352.png\" alt=\"\" class=\"wp-image-2317\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-352.png 456w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-352-248x300.png 248w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-352-165x200.png 165w\" sizes=\"auto, (max-width: 456px) 100vw, 456px\" \/><\/figure>\n\n\n\n<p>Create a new Windows VM on AWS.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"572\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-353-1024x572.png\" alt=\"\" class=\"wp-image-2318\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-353-1024x572.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-353-300x168.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-353-768x429.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-353-200x112.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-353.png 1246w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"521\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-354-1024x521.png\" alt=\"\" class=\"wp-image-2319\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-354-1024x521.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-354-300x153.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-354-768x390.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-354-1536x781.png 1536w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-354-200x102.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-354.png 1560w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Create a new OpenVPN server instance on AWS.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"895\" height=\"572\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-356.png\" alt=\"\" class=\"wp-image-2321\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-356.png 895w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-356-300x192.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-356-768x491.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-356-200x128.png 200w\" sizes=\"auto, (max-width: 895px) 100vw, 895px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"484\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-357-1024x484.png\" alt=\"\" class=\"wp-image-2322\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-357-1024x484.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-357-300x142.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-357-768x363.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-357-200x95.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-357.png 1329w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"599\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-358-1024x599.png\" alt=\"\" class=\"wp-image-2323\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-358-1024x599.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-358-300x176.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-358-768x449.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-358-1536x899.png 1536w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-358-200x117.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-358.png 1610w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Access the OpenVPN server via SSH. Use openvpnas as a user to log in.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"555\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-359-1024x555.png\" alt=\"\" class=\"wp-image-2324\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-359-1024x555.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-359-300x163.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-359-768x416.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-359-200x108.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-359.png 1326w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Check the private subnet on OpenVPN is matching with the private subnet on AWS.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"633\" height=\"422\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-360.png\" alt=\"\" class=\"wp-image-2325\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-360.png 633w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-360-300x200.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-360-200x133.png 200w\" sizes=\"auto, (max-width: 633px) 100vw, 633px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"711\" height=\"520\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-361.png\" alt=\"\" class=\"wp-image-2326\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-361.png 711w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-361-300x219.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-361-200x146.png 200w\" sizes=\"auto, (max-width: 711px) 100vw, 711px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"693\" height=\"519\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-362.png\" alt=\"\" class=\"wp-image-2327\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-362.png 693w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-362-300x225.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-362-200x150.png 200w\" sizes=\"auto, (max-width: 693px) 100vw, 693px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"564\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-363-1024x564.png\" alt=\"\" class=\"wp-image-2328\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-363-1024x564.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-363-300x165.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-363-768x423.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-363-200x110.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-363.png 1299w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Change the password of openvpn.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"476\" height=\"170\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-364.png\" alt=\"\" class=\"wp-image-2329\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-364.png 476w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-364-300x107.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-364-200x71.png 200w\" sizes=\"auto, (max-width: 476px) 100vw, 476px\" \/><\/figure>\n\n\n\n<p>From Windows 2016 VM on GNS3, access RDP to Windows instance on AWS. Change DNS setting to DC1 on-prem. <\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1011\" height=\"793\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-365.png\" alt=\"\" class=\"wp-image-2330\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-365.png 1011w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-365-300x235.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-365-768x602.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-365-200x157.png 200w\" sizes=\"auto, (max-width: 1011px) 100vw, 1011px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"565\" height=\"515\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-366.png\" alt=\"\" class=\"wp-image-2331\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-366.png 565w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-366-300x273.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-366-200x182.png 200w\" sizes=\"auto, (max-width: 565px) 100vw, 565px\" \/><\/figure>\n\n\n\n<p>Join the machine to domain on-prem and promote it to become additional domain controller.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"847\" height=\"622\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-367.png\" alt=\"\" class=\"wp-image-2332\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-367.png 847w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-367-300x220.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-367-768x564.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-367-200x147.png 200w\" sizes=\"auto, (max-width: 847px) 100vw, 847px\" \/><\/figure>\n\n\n\n<p>Create a couple of users to test: tung, kevin, test on domain controllers.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1023\" height=\"633\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-373.png\" alt=\"\" class=\"wp-image-2338\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-373.png 1023w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-373-300x186.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-373-768x475.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-373-200x124.png 200w\" sizes=\"auto, (max-width: 1023px) 100vw, 1023px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"863\" height=\"588\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-375.png\" alt=\"\" class=\"wp-image-2340\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-375.png 863w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-375-300x204.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-375-768x523.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-375-200x136.png 200w\" sizes=\"auto, (max-width: 863px) 100vw, 863px\" \/><\/figure>\n\n\n\n<p>On OpenVPN.<\/p>\n\n\n\n<p>Change the setting to authenticate the OpenVPN tunnel via LDAP. We use both LDAP servers on AWS and on-prem.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"426\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-368-1024x426.png\" alt=\"\" class=\"wp-image-2333\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-368-1024x426.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-368-300x125.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-368-768x319.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-368-200x83.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-368.png 1440w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Configure LDAP settings to query the corresponding information on domain controllers.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"646\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-370-1024x646.png\" alt=\"\" class=\"wp-image-2335\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-370-1024x646.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-370-300x189.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-370-768x484.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-370-200x126.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-370.png 1113w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"417\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-371-1024x417.png\" alt=\"\" class=\"wp-image-2336\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-371-1024x417.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-371-300x122.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-371-768x313.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-371-1536x625.png 1536w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-371-200x81.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-371.png 1880w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"510\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-372-1024x510.png\" alt=\"\" class=\"wp-image-2337\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-372-1024x510.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-372-300x149.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-372-768x382.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-372-1536x765.png 1536w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-372-200x100.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-372.png 1874w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Access to OpenVPN mgmt interface.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-376-1024x390.png\" alt=\"\" class=\"wp-image-2341\" width=\"593\" height=\"225\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-376-1024x390.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-376-300x114.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-376-768x293.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-376-200x76.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-376.png 1160w\" sizes=\"auto, (max-width: 593px) 100vw, 593px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-374-1024x702.png\" alt=\"\" class=\"wp-image-2339\" width=\"646\" height=\"442\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-374-1024x702.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-374-300x206.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-374-768x527.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-374-200x137.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-374.png 1171w\" sizes=\"auto, (max-width: 646px) 100vw, 646px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-377.png\" alt=\"\" class=\"wp-image-2342\" width=\"343\" height=\"367\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-377.png 679w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-377-281x300.png 281w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-377-187x200.png 187w\" sizes=\"auto, (max-width: 343px) 100vw, 343px\" \/><\/figure>\n\n\n\n<p>Using a kevin user to log in.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-378.png\" alt=\"\" class=\"wp-image-2343\" width=\"517\" height=\"457\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-378.png 888w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-378-300x265.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-378-768x679.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-378-200x177.png 200w\" sizes=\"auto, (max-width: 517px) 100vw, 517px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"425\" height=\"704\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-379.png\" alt=\"\" class=\"wp-image-2344\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-379.png 425w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-379-181x300.png 181w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-379-121x200.png 121w\" sizes=\"auto, (max-width: 425px) 100vw, 425px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"428\" height=\"721\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-380.png\" alt=\"\" class=\"wp-image-2345\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-380.png 428w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-380-178x300.png 178w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-380-119x200.png 119w\" sizes=\"auto, (max-width: 428px) 100vw, 428px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"245\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-384-1024x245.png\" alt=\"\" class=\"wp-image-2349\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-384-1024x245.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-384-300x72.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-384-768x184.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-384-1536x368.png 1536w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-384-200x48.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-384.png 1556w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"456\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-386-1024x456.png\" alt=\"\" class=\"wp-image-2351\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-386-1024x456.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-386-300x134.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-386-768x342.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-386-1536x684.png 1536w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-386-200x89.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-386.png 1578w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Access a web server on a private subnet on AWS.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-381.png\" alt=\"\" class=\"wp-image-2346\" width=\"413\" height=\"283\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-381.png 654w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-381-300x206.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-381-200x137.png 200w\" sizes=\"auto, (max-width: 413px) 100vw, 413px\" \/><figcaption>RDP to a private IP address on Windows DC2 on AWS.<\/figcaption><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"698\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-382-1024x698.png\" alt=\"\" class=\"wp-image-2347\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-382-1024x698.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-382-300x205.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-382-768x524.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-382-200x136.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-382.png 1296w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-383.png\" alt=\"\" class=\"wp-image-2348\" width=\"627\" height=\"475\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-383.png 810w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-383-300x227.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-383-768x582.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-383-200x152.png 200w\" sizes=\"auto, (max-width: 627px) 100vw, 627px\" \/><\/figure>\n\n\n\n<p>Monitor Security traffic on PA.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1004\" height=\"688\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-387.png\" alt=\"\" class=\"wp-image-2352\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-387.png 1004w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-387-300x206.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-387-768x526.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-387-200x137.png 200w\" sizes=\"auto, (max-width: 1004px) 100vw, 1004px\" \/><\/figure>\n\n\n\n<p>Join Windows 10 to the domain.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-388.png\" alt=\"\" class=\"wp-image-2353\" width=\"572\" height=\"521\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-388.png 801w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-388-300x273.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-388-768x700.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-388-200x182.png 200w\" sizes=\"auto, (max-width: 572px) 100vw, 572px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-389.png\" alt=\"\" class=\"wp-image-2354\" width=\"554\" height=\"560\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-389.png 649w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-389-297x300.png 297w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-389-198x200.png 198w\" sizes=\"auto, (max-width: 554px) 100vw, 554px\" \/><\/figure>\n\n\n\n<p>Disconnect interface from DC1 to SW2 to simulate migrating servers to AWS cloud.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"431\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-390-1024x431.png\" alt=\"\" class=\"wp-image-2355\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-390-1024x431.png 1024w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-390-300x126.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-390-768x323.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-390-200x84.png 200w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-390.png 1185w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>Windows 10 is still accessible to the domain on DC2 on AWS.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-391.png\" alt=\"\" class=\"wp-image-2356\" width=\"625\" height=\"344\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-391.png 827w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-391-300x165.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-391-768x423.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-391-200x110.png 200w\" sizes=\"auto, (max-width: 625px) 100vw, 625px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-392.png\" alt=\"\" class=\"wp-image-2357\" width=\"615\" height=\"499\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-392.png 879w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-392-300x244.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-392-768x624.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-392-200x162.png 200w\" sizes=\"auto, (max-width: 615px) 100vw, 615px\" \/><\/figure>\n\n\n\n<p>Access RDP to DC2 and a web server on AWS.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-393.png\" alt=\"\" class=\"wp-image-2358\" width=\"599\" height=\"499\" srcset=\"https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-393.png 849w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-393-300x250.png 300w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-393-768x640.png 768w, https:\/\/tungle.ca\/wp-content\/uploads\/2022\/03\/image-393-200x167.png 200w\" sizes=\"auto, (max-width: 599px) 100vw, 599px\" \/><\/figure>\n\n\n\n<p>Domain users are able to access a domain controller on AWS and a web server on AWS when the domain controller on-prem was down.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This is the diagram is used to deploy this lab. In this lab. Configure VPN site to site IKEv2 between Palo Alto and Virtual Private Gateway on AWS. Implementing multi-master domain controllers on-prem and AWS. Authenticating OpenVPN tunnel via LDAP to support people working from home to access corporate servers on AWS. Disconnect the domain [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,21,11],"tags":[20,14,18],"class_list":["post-2255","post","type-post","status-publish","format-standard","hentry","category-fortigate","category-palo-alto","category-security","tag-cloud","tag-fortinet","tag-palo-alto"],"_links":{"self":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/2255","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2255"}],"version-history":[{"count":7,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/2255\/revisions"}],"predecessor-version":[{"id":2380,"href":"https:\/\/tungle.ca\/index.php?rest_route=\/wp\/v2\/posts\/2255\/revisions\/2380"}],"wp:attachment":[{"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2255"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2255"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tungle.ca\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2255"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}