Thank you so much Bhai ☺️ aur bhi koi topic ho jisko aap chahte ho easily samajhna then please let me know. I will try my best

Thank you so much buddy 😊

Thanks buddy for your appreciation 😊

You are most welcome 🤗

Thank you Gajzy for your support 😊

Thank you so much for your appreciation ☺️

Sure Gajzy... request noted and will be fulfilled in some time

Thank you so much for your appreciation :)

Thank you 😊

Thank you so much for your appreciation ☺️. Please allow me sometime to prepare more videos as I am heavily occupied with my office work from some time. But I will soon be ready with another set of videos.

Thank you so much for your appreciation 😊. Regarding query, I would say the best option would be to discuss using the comments here, so that anyone who has the same query as yours can also get solution by seeing the comments.

can you make video on how encyption happening in initiator side and how decryption happening in responder side@@the-confused-engineer

Sure, definitely, will make one, but please give me sometime, I already have a long list of requests so far from my subscriber friends, I have to make videos on all of them. Yours will also be completed soon.

Thank you buddy, sure, will be preparing them in this month itself.

Great!!

☺️

Thank you 🙏

You are most welcome 🤗

😜

Sure buddy, request noted, will prepare it soon

Thanks brother 😊

Thank you so much Pranav for your appreciation ☺️

Hi Pratik, below is the detailed process on how it is created. Please check and let me know in case of any queries: Creating a remote site to hub IPsec VPN involves configuring both the remote site (also known as the client or branch) and the hub (the central site or gateway) to establish a secure tunnel for communication. Here’s a general outline of the process:PrerequisitesNetwork Information: Ensure you have IP addresses, subnet information, and authentication details (such as pre-shared keys or certificates).VPN Devices: Both the hub and remote sites should have compatible VPN devices or software that supports IPsec.Steps to Configure1. Configure the Hub (Central Site)Access the Hub's VPN Device:Log in to the hub's VPN device or firewall management interface.Create a VPN Gateway:Define a new IPsec VPN gateway configuration.Specify the remote site’s public IP address.Configure IPsec Parameters:Set up the IPsec settings including encryption (e.g., AES), hashing (e.g., SHA), and DH group for secure key exchange.Define the IKE (Internet Key Exchange) policy for phase 1 and phase 2.Set Up VPN Tunnel:Create an IPsec VPN tunnel by associating it with the gateway configuration.Specify the remote network (subnet) that the tunnel will access.Define Routing:Configure static routes or dynamic routing protocols if necessary to direct traffic between the hub and remote sites through the VPN tunnel.Apply Firewall Rules:Allow IPsec traffic through the firewall on the hub device.2. Configure the Remote SiteAccess the Remote Site’s VPN Device:Log in to the remote site’s VPN device or firewall management interface.Create a VPN Connection:Define a new IPsec VPN connection.Enter the hub’s public IP address as the remote gateway.Configure IPsec Parameters:Match the IPsec settings (encryption, hashing, DH group) with those of the hub.Define the IKE policies to be consistent with the hub’s configuration.Set Up VPN Tunnel:Configure the VPN tunnel to use the remote gateway settings.Define the local network (subnet) to be accessible through the tunnel.Define Routing:Configure static routes or dynamic routing protocols to direct traffic to the hub through the VPN tunnel.Apply Firewall Rules:Allow IPsec traffic through the firewall on the remote site device.3. Test the VPN ConnectionVerify Connectivity:Check the VPN status on both the hub and remote site devices to ensure the tunnel is up and running.Ping and Route Testing:Perform ping tests and traceroutes to ensure connectivity between the remote site and the hub.Monitor Logs:Review VPN logs on both devices for any errors or connection issues.

Thanks buddy for your appreciation. Will surely prepare the requested video. If there is any other concept on which you want video, then please do let me know.

Hi bro, your requested video on ikev2 has been uploaded. Please check

@@the-confused-engineer Thank you for update.

👍

Outer ip header basically defines ipsec policy to be applied and both headers combined defines how it is controlled on a granular level. Please read below for more details: The modes differ in policy application when the inner packet is an IP packet, as follows: In transport mode, the outer header determines the IPsec policy that protects the inner IP packet. In tunnel mode, the inner IP packet determines the IPsec policy that protects its contents. In transport mode, the outer header, the next header, and any ports that the next header supports, can be used to determine IPsec policy. In effect, IPsec can enforce different transport mode policies between two IP addresses to the granularity of a single port. For example, if the next header is TCP, which supports ports, then IPsec policy can be set for a TCP port of the outer IP address. Similarly, if the next header is an IP header, the outer header and the inner IP header can be used to determine IPsec policy.

Ohhh sorry Bhai, main theek karta hu, thanks for informing 😊

Thanks a lot for your appreciation and support 🙏

Hi buddy, I am really sorry for the delay, but due to some official requirements, I have been traveling from the past few days and not getting any time. Please allow me few more days, once I am back to my home, I will again start responding as before.

Sure.

Yeah buddy, here I meant encryption, because ESP does this encryption feature

Hi Anamika, main bhi poori koshish karta hu jaldi videos laane ki, par kya karu, working professional hu, upar se night shift, uspe kabhi kabhi weekend bhi shift lag jaati hai. Jitna time nikal paata hai, usme video lekar aa jaata hu.

@@the-confused-engineer Thanks for the reply are you a CISCO TAC VPN engineer right

Thanks dear, few years earlier I was in Cisco TAC but currently I am in a different TAC as a senior tech lead