So as we were talking about it
the things that we were talking about yesterday was
you said the exchange with exchange the main budget exceeds
as that again.
Let's say I have Bob again Ellis and they want to create a.
Now think about it some production environment.
Bob I notice that nothing that to doubters throughout is remotely connected to the defense.
Eventually they found a way to connect to the internet.
Between them is the Internet.
They're talking via the Internet.
I have a package that they're going to be exchanging I want to be available to everybody all of them
to me.
James Beard anyone who's there he can sniff those packets when they decide if they decide that whatever
their communication is going to take place it should be secure.
So the first packet for this to initiate this kind of communication can come from any one of them.
It doesn't really necessarily have to be from Bob Dallas or from Alice to Bob although we did see that
in certain cases and remote access regions that would be the case.
But now anyone can initiate this type of connection.
So let's say we'll start with Bob.
Let's move this because you need to create those tunnels.
So Bob will do you will send out a baguette.
Now I know it's an accident packet
type is going on UDP 500 UDP port number 500.
It's an Ice account packet.
So that's how it comes out.
And I said come back it comes out.
Destination UDP 500 serves service is also UDP 500.
What is inside that packet.
Policies.
Which policies
like encryption mesh authentication and
what kind of encryption Am I using 3D caching Sha authentication PRICHEP GSK and group maybe two.
Basically I am telling Alice this is what I've chosen.
You tell me what you have chosen because we need to agree on the same policies.
Alice gets this bag that Alice is placing.
OK.
These are my set of policies that you
troubleshooting if our policies are mismatched our policies are mismatched.
Miss Packard when we get stopped
I go number two.
So by that one you'll see in the exchange that the two will not be coming back because it will not be
accepting anything so if Exchange is getting stuck in the first and the second budget.
What does that mean.
That's why I said this is very very important.
The exchange because someone shooting the Libyans are right here.
It's getting stopped.
Can government is not coming up and there has to be a place where it gets stuck.
Either the first to back is the third fourth fifth or sixth year to debug commands which shows you which
state is getting stepped in.
If you know exactly what happens in that state you're not sure that this policy mismatch would be one
end to what happens in Baghdad no city
the number three is what
bridge public and
notes.
There's still some other stuff that.
And something like that.
We'll keep on adding it when we said.
But these are the important ones is this.
You should not do it and knows this to be it.
Publicly they publicly press the mixture of my private and the public.
But the sent word across to the other side.
I guess that applies the same set back to its public nonce but this dance is
but when I men are left to receive the third bucket it gets what it's team material because it has all
that it needs.
By the end the third bag analogy gets it by the end of fourth bucket
by the end of fourth but then Bob gets it.
Remember until now I was a camp is not protected in the first four buckets as the camp is still open
late so whatever is going on right now it's open.
Anyone can see anyone who's sniffing can see the public dig and see the nonce you can see everything
is that one of the sides of the mountains is going to be a good bet but that's fine because it's going
to be encrypted using D.H.
tough for the not what's.
Yeah David I've never comes.
It is coming but it's coming as a mixed set of something so it never seems like you building that.
The random named entity number would have more than numbers and so than I think it is I'll tell you
this.
The setting of the public eye is unique.
That is you mean the one which they have received.
Yeah they're always unique.
Scooping that bag.
Yeah but public I days you have to buy from a service provider a service where it can never give to
people the same public.
It's in these like
any question that dilemma.
Listen to this packet see when you configure the float but you can take it on with certain policies
you'll use this you use the civilians you know.
Does
that make
you want to sniff you're talking about the sniffing.
The service provider could do it.
Traffic is going through them.
He would just randomly do that.
Which can be done so service respirator safe and plus the service providers.
No.
It goes from one service provider to another service provider to another service provider.
There is a possibility internally someday provided by sniffing.
My daughter was right.
But someday who knew that an athlete is going through that but it isn't a big part of what could happen
is when you're sitting at night.
Even in your insight network when you're sitting your fact finding out that you're inside your head.
So when you send your packet outside there's a man in the middle that back in your company someone is
in your company along the way that is running out.
We'll see that too.
Why would you make it better.
Once I know on the republic where they will be privately so it will go to that first nature of Babylon
to a possibility.
We can do that too but again man in the middle that that can happen in that case whenever that happens.
The one thing is even if man in the manner of man in the middle that happens in this case doesn't get
much information he gets the public key he gets the independence he gets the policies that they're using
but these policies are for which dumb.
The first time these policies when I talk about the first tunnel is that for the first time nothing
really changes it's not really a big deal.
The encryption only happens only of 7.
The rest of the tunnel remains the same.
Let's say this address public addresses one that one not one that one and Alice's is do that do that
to go to bed number is 500 to pay for it.
Isaac was Isaac up before in the first row.
I guess it was at The Gap in Baghdad 5th and 6th.
It gets into the
starting back at 5 onwards and which gives you an encryption.
This is a session okay.
This is where the confusion lies and I don't know why.
This is really simple if you really look at it one way every kind of encryption every kind of hashing
will be done using
this Blackie called the sessions.
How do you get this lucky birds exchange.
I'm dating from now on every kind of encryption will be done automatically when will be done based on
this.
That's one other thing that I want to make clear.
What are the ingredients you need for studying the ingredients that you need for the time.
Is encryption mechanic.
What kind of encryption are we going to use.
What kind of hashing are we going to use.
And the key.
If you have these two things were done
by random.
What kind of I use it as a yes.
One of the choices that I'm using an independent chair one of the choices.
Once those choices are set you need the key.
Once you have these two things you're done.
That's what we have right now.
Does he have the set up policy that he's using.
Yes.
In the first exchange that's what he does then negotiate.
Let's say you're using 3D and shot.
He doesn't show
using this thing doesn't show.
And the key.
Now not all of the.
He will take out a small portion for advice.
Yes take out the keyboard just compatible with this one.
Listen to this case is that you created it.
Depending upon your group size is one day.
Yes.
To those is how much and 168 bits.
So it takes those 168 to get to them.
It's not random because both of the sides have to do it safely.
Removes it.
Yes.
Yes that's one and I'll tell you that timings of how long those.
But that's how he gets it.
So that's my attempt 160 bits from the other side does the same.
And then he uses it now for this.
And which part does this interrupt the second part not the data.
I'm right now I'm still on the 5th but at
the same corruption that I've seen here.
These do only apply to the Aztec empire.
Why.
Because this is done so that I can protect the actual exceeds the Good morning.
After this everything is going to be protected.
What am I going to send in the first budget.
Whiskey.
What is it used for early.
I tend to get estimates that Alice is up into about published in Dallas.
I send him my bill escape.
He will send me this
one.
No this is not.
No.
No I'm have not.
I'm not gone dry says.
There is still normal.
He escaped.
He said if you
that is the next then the next back in May.
No no we have not back down this still the first four packets was to negotiate this first tunnel.
When I say I'm talking about encryption Mr. Gibson and hashing off Isaac led the lethal exchanges that
take place are protected.
The actual exchange of key
you don't realize that this is an option and chatter site will be repeated.
It's just invigorating.
The other side that he could have said I've checked the utility again.
Yeah.
Yeah
I've seen this bikers from the middle of the year from the middle of December after 20 minutes.
That depends.
See when this aggregate sense takes place online.
Instead it seems once I was all alone.
But that said it seems he's not expecting anything you're not expecting anything as long as that session
is not broken down as long as it's not broken down the other side will not accept it.
Instead as he is as long as you don't break it you're sending more packets will you get it.
But he's not going to do much with it.
They're not NBA player that's available.
No I won't say no but there is a little different.
Said here that he sends out the open sessions some is based on SBA numbers.
I'll explain when we get there.
That happens in a sec.
He doesn't get out open it so he sends out sends it again and again and again.
So that the sessions on the other side are open late so maybe you understand this five and six five
and six is nothing but you asking if this was big guy in 5 and 6 I would have said to my certificate
not the key certificate.
Just make sure you understand that this has nothing to do with encryption or authentication same so
same key on both ends.
Let them know these six -- are known as what
turns 16 since it was running since
OK so he does not remember what were you using today as a country.
That's right.
He doesn't show in the 7th but it starts with a quick more cold is the quick more
the seventh packet.
I'm going to be sending what the actual the actually actually.
This is just the control that the actual data.
The policies that I'm going to be using for the data you have a valid security association.
We also call it transforms.
This negotiation is protected protected by whom.
By the first time when I say 10 I mean three days in a shop.
This part is protected right.
All this information is inside of this part inside.
This is the selling package.
The policies that you are exchanging which is that say essay I'll call it a security association policies
which would be let's say yes and then design.
I send it from here to the other site where the site replace with his set of policies.
And you get both of you by the end of this meeting after I get 5 onwards everything is perfect.
He sends out his set of policies back to me.
When I see this set the policies I agree on if I need to let the other guy know that I've agreed on
everything.
So in the end I just send in kind of an acknowledgement to the epicenter.
Basically telling him that the policies I managed on my own also.
Everything is fine for my sake.
Here is an acknowledgement that he receives acknowledgement.
He sees that.
Yes that's how it is okay.
I'm okay with it but time is up Mr. is up not just in the actual
rapture.
You understand this.
Yes and in detail right.
Until now.
This Saturday nineteen ninety nine.
Now Lester quick.
Somebody is a is things last is getting stopped in number 4 and 5 7 5 and 6 can be the cause
it's so easy to miss much.
So if you're stuck in 2006 he knows that if you're stuck in seven and eight
fantasy mismatch with the second.
So we've configured wrong policies for the second time to four year and every element.
But do you have control over that the element is an automated process that will never get sucked into.
So that either gets stuck and and do ordered gets stuck in five and six.
We never get stuck in that business.
That is the first budget fallacy right.
Negotiation of the policies when they negotiate and using the loopholes using the five not at the same
point as no information up to me to do so.
These were public public nonsense.
You don't say that so dramatically that I was 7 and 8 that 9 8 would not get stuck if it bears repeating
the lower prices again to make sure that everything is OK.
Negotiating timing.
But that is not contemplation.
These are comparisons.
If you miss any one of these not you have to configure each of each and every step you take.
The question is all right this is OK.
I made the deal as it is.
I chose three days shop on both ends.
Now the actual data that is going to flow through the actual data that is going to flow through is going
to flow like this
that's a public network that they're connected to.
This is connected to 150 one dog credit without zero slash 24 and there's going to be 150 one dot going
into the dark zero slash 24.
This is not one but two.
These two guys in public 150 so when they're communicating
well that one is above and below they're communicating on UDP 500 to 500 right after that.
Once that's done this fine which said the second tunnel
though what is the actual second of the day that the
plan to land in the ones is the one true to the negotiating table he negotiated about the second validate
what are the policies that I'm using on the second term.
Yes and then NDA
you have a policy that I'm using on the second time they were choosing the policies for the second panel.
You also have to choose the
they are choosing the policies he has up to the head.
There are already two types of headers available to you.
One was ESB.
The other is storage.
One is ESB whether it is.
Which one are these you thought it is or it only supports authentication setting integrity.
Well is only supports integrity so it only supports and B5 and QA it cannot do any encryption.
So if you're using your then yes you can use it if you want to but your actual data will be better but
it will be incorrect and sadly integrated which I showed you yesterday how it's done.
Remember no one can Bamford the data decide that is done but there will be no encryption everything
will be open cleared text you don't want that.
I mean earlier we used to work but now you don't work with that.
Most of the times the header that you'll be using will be what
the ISP defines.
If you're using ESB behind that you're going to that second column either you swear it in without the
tool if you see any one of those two yet that means your traffic is going to air through the
Wellington public here to public yet and eventually through the town of ESB.
And what is ESB eventually going to do.
It is going to encrypt the data authenticate the data cache that it now.
If it's doing that tell me which he doesn't use
Where does he get the key from to encrypt.
This is phase one.
Yes I do remember from that key I used to read as far away.
But for the first time I used to read as funny that I need to use what he's saying take out another
chunk out of
it take a separate centre which is the same with the same that he with 168 bits.
This he says is 126
so I can only use the same key.
So I take a separate chunk from here and a separate gem from here and use that junk to do my William
Gibson decryption on the data.
Now this encryption will likely at 70.
It starts from Layer 3 but right of ESPN we already having its the second in line in their second policy
in heavy car so why do we use these three people even when we are not USP is not used for is the ESB
is not a s are sharp.
Yes it is a protocol.
It's a protocol that defines how to do this.
E S and how to do this show.
So when a backup comes in like ESB as their ESB was they'll give first you will go through a s using
the DG Then you will go through some and then you can move forward and you can go out and why it is
not used in the first standard because everything was happening only at 7 in the second.
I think that by itself was a brutal day.
Everything was there.
It did not require ahead that required ahead that way.
Now on the day that I need to separate my private networks and my public networks private traffic will
flow here.
This will not just be ahead.
This will be IP addresses growing from 10 1 1 1
traffic going from private addresses to private interests.
Yes we will decide yes we will make sure that no one can see it.
Isaac I was like live 7 protection.
There was nothing much to hide he was not hiding headers.
He was just hiding said extra.
What I heard is that you need data which defines how he works how so.
So just a protocol.
It was just a protocol but it was only doing what integrity would define you go through time.
Then you brought that it comes back.
He needs to decrypt it using the same.
Yes yes speed DSP data.
I would give the data first should you digested that just means shot and digest when you authenticate
integrity from one end not just from the other end hashing and digest.
So you open it up and you see if that just is correct.
Would you be glad that you get the actual data back.
Like I said Isaac I'm bugs that people would favor that stance stands for whatever it is on top of transport
there is less heaven no whatever it is on transport.
It's not presentation whatever led is after that is listen.
When I when I was transport led has a live seven years it was just like us GDP is now 70 runs on DCP
number something might be autonomous something and some means with this.
OK.
Whether they would like to see it described above make it more simple life for them.
If you don't have the same Do you understand how much this means like integrity.
How would the integrity go into the food.
Yes I didn't see your key is here.
I would give a licence.
What you have no information is what I can do.
I'm right where did that happen.
It wasn't just that someone tampered the battery.
He babbled one bag and then the departed comes to me.
I see that the visor does not match.
Really thing that he doesn't drop the fact that it completely doesn't send in a talisman vacuum.
So when this I know that the packing has got to be sent I haven't told you will not open it.
Yeah we will not.
When he see that I just wrong.
That's it.
He knows that Stamford is dangerous doesn't that it maps the benefactor as long as he doesn't get the
badges that he will not accept the facts.
But we're not depending upon what kind of connection it was DCP or something that you can if you want
to.
You can if you want to send any Bill loves the the with that.
Sometimes it does happen.
Sometimes it does happen that that time you see that when a company is like that.
Do you see that.
Yeah.
Yeah yeah.
I wouldn't know what to do about it.
It's a good.
Yeah.
Yes.
MMN did many cases.
I know I'll tell you those tunes and they don't do that at debugging stage.
They can get stuck here.
You should know why you're stuck in your separation.
But before that you should be comfortable with the states for the exchange when they say sex space once
you know what the exchange takes place there.
When I show you the states you should be able to look at the state and say OK this state is because
of the state is because of this.
Now do you see this.
My question which I wondered last you.
Is that okay.
I'm going to use a separate yes not the one which I used before.
Earlier I used yes.
How did I get that.
Yes I took it from the junk but the yes and data encryption far less have it.
Now I'm begin by a as an empty face and the actual data that is going to flow through.
Now from this time there's going to be a good data using the Yes and in debate the other side is going
to declare that using asset and B5 and he's finally get the data.
Okay.
The question is okay.
You might ask me the question then using -- I went through and through.
If I'm going to do the data remember the objective the challenge that we faced yesterday which I've
talked about the challenges that the guy should not receive a lot of data that challenge we still have
not solved.
If someone is sitting here that is if someone is sitting right here and is dipping on the data he can
get jeebies worth of data in the job is worth of data right.
You get that keep it with him and then try to grab the key.
The more the data that he has the more the chances of him tracking the team.
How do you prevent yourself.
You don't IP set by itself has a mechanism nothing.
The interesting thing about this remember this yes the small creature.
Where do you think the lifetime of this a sentence.
It's only one out.
Thirty six hundred seconds.
This junk that your son that is used for the actual date to go through is only what is only thirty six
hundred seconds.
That is one hour after one hour.
Of the sights.
I'm not going to get a new key but they're just going to remove the songs and get another chance from
this scheme would be.
Some are saying they're not going to change the theme with the material is going to remain the same.
Are you concentrating on what I'm saying.
How is it possible for us to use the tactics after not being able to sniff it can be collected equally
when we're trying to do a DoS attack on the different keys.
So the more the data that he has the more sample that he has to do stuff compared with this tablet that
driving that.
But my sense is there is a chance that this if you use a whole computational computational power of
the woodwork within a year you might be able to track it within a year 8 months 10 months.
That is if you use the whole part of the world you would have gone through this and that's what I'm
saying.
He will be able to do that but every hour every hour I'm changing my key which says different do different
things.
Rhett says if he gets the key he comes back after 10 months and sees the key around thirty six thousand
times already.
So he comes back.
There's nothing in there.
What if he comes within two hours will be used as we can make.
He hasn't really changed.
The other thing that I'm protecting against is Mike he is only going to be valid for one hour.
So the sample data that he's going to get is not for more than one hour.
That is not a lock.
There's another thing that you can set values that of the limit of data that is going to say get for
jeebies after be over data to the keys.
You would have said 36 seconds.
The late 80s that these men are basically getting the full material back.
They're just taking some different random number out of that team which is made of them do the same
thing.
Back to them in the data.
No see the good thing about Isaac up once Isaac concerns those nine brackets it keeps his hand up.
It just tells them what to do with them.
I mean that that's the whole point of controlling development data.
The whole thing you need is the king either once he gives you the cheap idea.
He keeps his hand up and he stays there for 24 hours.
This state is known as quick.
Say this more.
I do.
He will said Give me the key to look at.
Listen this is your team.
Do not disturb me for another 24 hours.
I'm going to stay as I am.
Here's a key.
Keep on changing the key every one hour.
You punch the key everyone out.
So simply keep sending everyone out.
Then Mr Abbott is after 24 hours after 24 hours the world AC company shuts down comes back up again.
What will that give you that gives you completely new king what they do with
Isaac and comes back some bad days and comes back up again gives you new king material on both ends.
Yes wait a second doesn't make much of a difference in
this case huh.
Maybe you going do this time and somebody you can use the time if you want to
for the first time and build that up again giving you a second -- news about the.
Yes I'm sorry.
I'm sorry.
You have a question.
When I say when I'm saying they have complete you said of the ad which gives you 24 more hours to do
more new piece.
Right Anderson it's been thirty six hundred seconds.
Uh
that is the lifetime baby paid the lifetime of your Isaac family is how much is six thousand four hundred
seconds.
Yeah Isaac our lifetime is eighty six thousand four hundred seconds.
Just 24 hours until 24 hours the first and last days in which more you
get more than a little bit more.
After that the goes down comes back up again with what I believe and I said repeatedly didn't use it
for 24 hours.
Now think about the hacker's point of view.
He goes and tries to read that though he gets a key after let's say let's say he uses to on the ballot
he gets a key in three months comes back up again.
This is useless.
When I do that even if he guesses the DEA material they can knock three months that will take him years
to do even if he does that and he comes back the other day.
There's no point of doing it.
Maybe one detail has already tense.
Absolutely secure.
You see the equity that is what exists just a couple of random numbers.
So yeah how many different combinations.
So once it changes it just you still have 1 0 2 4 bytes but different 1 0 2 4 bytes Monday same before
a different one some key even if one one key says that one bit says it's a different key it's a different
even
they do understand.
It's a combination of locks for example the combination of locks.
Let's talk about three blocks.
There's three blocks.
I have something like 0 0.
My key is one I know this is too obvious.
0 9 9 1 9 9 is my key.
Hey look let's have another bit yet.
I keep it as 1 1 1 9 9 is my key guy comes today he tries to solve it making is 1 1 9 0 5 different
combinations he's 0 0 1 0 0 0 2 0 0 2 Let's say he reaches 1 reaches this point might be 1 he reaches
the point the 1 1 0 0 he was close but it is 2 1 1 0.
May I come back again the next day 24 hours I'll come back again I change it let's say I'll change it
to zero I think only 1 0 1 9 it goes right again he's trying to number 1 1
standing he still has to go through all the combinations again never reaches the end it starts so he
has to start from the beginning which will take him not one day obviously they can be to do that was
just telling you even at one meetings this is a new day it's material by the way and encryption was
happening yesterday is that the way the encryption is happening today you said if it was B today you
see the key I sensed so good I'd work on the same material if he uses both of them and he plans to find
out the key he can get different materials right because it will be yesterday two days he will not be
able to find any intelligent data out of
relative the size of the black he
that is the size of the black one zero before well using for encryption and then in the first six packets
you are using it as a charity that's how much is the size of the three let's keep this hesitate as 168.
So do you think wonder do what I want to.
There is a difference made so that he picks that one data before he takes 160 admits using that
everybody read about the exchange very important from every perspective out there.
This is a very very
damning 24 hours for the first time.
The second one is how much 36 seconds for each but that never goes down.
The second battle never goes off.
This day that it just needs getting more data gets the key in these three things move the key needs
which mechanism to use that to have that instant is doing of good.
Keep this in mind let's take a break.
After that we'll configure our first IP system and see how it works.
These are going to be that the policy that I'm going to be working on today and stamp from this B.S.
inside to my main job is that my private networks communicate each other to private networks and then
I thought I did that too.
The objective is on this B.S. easy to do.
You should think then I do I do that too and it's that it should reach the other side.
The stabbing let's go and configure and take these see Internet 0 0 IP address addresses stand for for
say one
except that he said about running words for that for that.
They're giving this guy an IP address
and given a default that works from the same inside one.
This you one ever given any thought about same config words.
I go ahead and concede that I do
twenty dollars.
The inside networks that do that do that too.
One is the internet so I have a public address on the outside interface.
It is 151 let's say 20.
Gravity talked about on the set.
I don't have a for that pointing towards the internet.
One fifty one but let's say that is 20 that day.
They say the Internet is that thing.
Some of it is happening right now.
Then to be one I should be able to go to the inside when they do the same exact thing that I absolute
zero one is the one or is putting words inside.
P.S. to
had the inside one place at the inside of the Internet is 151.
That would be god for those that had a default without spending fifty one that forty for deduction.
Now again I give IP addresses you might have seen in a lot of my other videos.
The way I do it and all the labs is that all my public addresses whenever I am configuring it I'll always
type them one by one fifty I wanted to document.
Then depending upon where I'm connecting to.
If this was for example I the if I had given those names to my address would be 150 but one dark 23
that zero slash 24 means I'm connecting to the three I to go out and my host name would be dot to here.
That's the number of these two guys 151 not 34 4.0.
This end would be 34 that reads them would be 34.
I you my ask 34 they could also be 43 34 for DC I choose the lower number
23 932 23 943 34.
Since this is the internets I've chosen this path to be 40 and 20 and the hostname will be the same.
So the horse name here would be that there those name here would be dark for that for that for
today that's not too bad for that foot.
And here I'm keeping this is the international user I keep the Internet as Dr..
Let's go ahead and finally reconfigure the Internet
interface FOMC with zero 151 that 20 back then
started at
for about nothing is it quiet here.
This is the Internet.
We'll get a traffic jam 20 forwarded to 44 be forwarded back to.
This is the only guy in the military doesn't declared it out.
Yes if it was so five find out that they were burned out.
Most of the times what I think there's a drunk BGP but our job is to make it as simple as possible because
we don't want to do this bad.
We want to do the tunnel.
The other part as simple as it is.
Do that.
OK.
Now this is done.
We went and set up our festival.
The first thing that you always said is whether the sites do they have the ability to each other.
Can I do reach out for it you will live it cannot be tapped or fairly will not be able to start to his
eyesight.
That makes sense.
The first thing that you do is you work like you and I have to see the other side is up 150 and that
would be dog food.
Output is at 42 Below
it is through the Internet.
I boost up in the food I boost up in through the Internet.
It is not that difficult you can just do.
I think you just connect to the Internet you should be able to reach the line with the other guy has
also a line and these lines and you have all these links very connected.
Just need to be part of your words your ISP
good thing about the communication is that the next thing that I'm going to do is I'm going to make
sure I'm going to make sure that the terminal is set up.
Now there are five steps for visiting and I said that depending upon the packets configure it like exactly
like we can figure it out packets.
We saw the packet since the first two packets within the set of policies so we need to configure those
set of policy.
Let's say this is configuring it on the set of policies.
The command is crypto Isaac and policy.
Then you give it the number 10.
There is no doubt the Aborigines.
Initially
I said down policy.
Then you give it the number.
Now this is reality.
I'll explain what that is.
When we do this is used when you have more than one demonstrator.
So you keep begging for 1 for the other 130 for the other night and will be given a higher priority
but really doesn't make much of a difference if you have only one number you choose.
It doesn't make any difference.
It's local this value then here is local you can find it here.
Could be on the other side.
It would not make much of a difference.
I'll show you how it makes a difference when we do a couple of months at the same time.
So now let's see Austin.
How do you define the rest of the parameters I want to show you all of this yet because I want to show
you the options that you get under this set configuration.
So you have the options that you get what encryption through the type of encryption that you want to
use to the battle group that you will be using the hashing mechanism that you're using authentication
mode.
This is not the key is authentication more cliched to begin began.
Also known as addresses signatures
and you can specify the lifetime what is the lifeline by default.
Eighty six thousand four hundred seconds for Isaac the book is read and do that encryption.
You can choose any one of the three as everyday authentication.
You can choose please share what I said I choose PRICHEP right now.
Okay.
Group 1 to 5 the size of the keys and just 2 which is 1 0 2 4 5 is 1 5 3 6 1 768.
Okay.
Only what the hashing mechanism do you want to use B favor.
That's say I use some super balances that I choose I said encryption device authentication we shared
hash.
I said stop and group
and this is sending this packet
back and I would send it back and he was handed
it enough.
So first and second that the third and fourth
we need to do anything.
The first and second both through the third and fourth package.
We don't care about what is the fifth package.
He said he to members since I'm using BSG here.
I need that reset.
Yes I need to specify that we should always specify every.
That is step to
stop the spell.
Isaac.
He said that he is Cisco and you need to specify the address of the year.
What is the address of the bit.
Probably 150 died one night before he died.
So why do you need to specify the address of the fear.
Because tomorrow you can have one.
You can have more than one.
So you would have I do creating a tunnel with an eye for an eye to creating a dungeon lets say without
fail.
Maybe in this exchange you are using Cisco 1 2 3
that is maybe when you're creating a deal between not going out for you using the PSG of Cisco but then
you're doing it without a fight.
You're using what Cisco wanted.
That's all you need to specify the addresses that going to this address.
Use this key
using that critical point.
Our fixed IP address is the place to speak.
There is no single instance of component of the listed as we go to this is.
No.
It's not a
private address I understand.
And is that what you're saying.
Does your ISP out at the ISP service.
What you're saying is you don't have any.
You're saying it and behind the SCADA networks I said not to go to back to us and explain this what
is it.
As long as then that conduct can reach this network everything is okay.
Right now you're done between these two devices.
You want to do it here.
Why go to the ISO here.
So you do not think what to stop it.
No no no.
You can go until the end.
The AC cap is not necessary you do it only with the public eye piece remove the barrier but you need
to monitor that because it needs to go out through the internet like you understand.
So what you have to worry about is what I said come back it's now put your concentration here your eyes
come back it's going to look like what going from one fifty one not 20 dog to do
and then you have your GBP 500 500 and then the AC cap
then the actual ice again.
That's why I need to specify the address of the bed.
I'm saying for this address for this this nation address use the key used to be a scarce system.
You might have another beer.
So when he's going to that address he'll use a different
word.
So you specify that key and we do that again here.
Now for this part of the question mark doesn't look when you're doing this.
The question was will not work.
So you have to write the whole command yourself.
No no.
Most of it.
SISKEL to this question but does doesn't work.
But you still have to address 151 that would be done.
The president said that he works after that address but it doesn't work like this address 151 not so
he got it.
With specified that he gets 1 2 6
6 then what is the seventh bracket on someone else's for the second time.
Balances by the second act also known as IBC also known as sandstone set
as well known as the Association.
But also we also cannot answer them in terms of typing it.
We call it transparency so you need to specify that you specify that this IP SEC fans from set and you
name it something it's up to you what you name it.
Quality set
about this advanced concept that we have certain options available D had a look at these options.
Whenever you see a smack in the middle of hashing mechanisms it is a and b face and shop.
We will also see as the US does
attention that despite
and
you can use these are the headers that you choose which header do you want.
For the second time you wanted to be rich if you are there you can only use what only and be.
There will be no interruption let's do that.
Let's only use it.
I will not use encryption in the first and then that I will change it but for the first time I will
not use any.
I am just using
multiple dungeons until just recently.
The problem is that I don't intend for the same interesting traffic not different traffic.
Yes.
Then I move from different ideas.
I look for the different ISP types they can create two towns from two hours because that's when you
will have the backup from the same ISP.
There is no point of having the backup you can will not go down and that will be two different speeds
to different levels.
So now let's use what edge.
I only use which one do you want to use.
I used a shop that I use like the same size at each and debate and that's fine.
Obviously this is just happening.
This is just so when you see it's back in the air.
There's just differentiating between which ones are you in that encryption algorithms and which ones
that you should know better.
See what you can do you don't specify only one vote.
You were about to use ESPN behaving ESB then you only have these options in to one hashing mechanism.
Now you need to do that encryption with them as they do things and then you can do.
You can have more than one asking them to you have two.
Yes.
Which makes no sense.
Which you most generally not do.
Usually you just need one hashing mechanism and one encryption mechanism right now in our case I'll
just use hashing around issue what's true what's inside of the packet and how it's open.
And have been smashed together and they're not together.
What are you finding.
And if I've been shot even if I was wearing it.
It's been five years and its ban shows engagement.
That's what you're saying right.
Mean if I was in DC I'd make anywhere here.
It's not worth it.
It's not.
No it's not a different category.
It's the same variant of beef I have and maybe it does show that the rabbit which a lot of the money
you use to do that is asking which algorithm you are using by using shop.
These are just two different environments depending upon which you want to use.
So I chose which one.
And besides had that that's going to be applied.
No you're not going to be yes is going to be what.
Which will have no powered up and grips and it only has powers to do it.
That's actually just the integrity of the game that way.
So step six seven eight nine.
That's what I said because you've already chosen
the band's concept he said.
I said the.
Some said yes.
Then I said Okay I'm going to use H and the five steps step forward.
Now you need to find out the way to link all of this together.
You have configured it but you need to link it like it.
The first thing that you have to do is specify the traffic that is going to be protected by using all
these boxes.
It's
they're using proxy as a proxy as it is used to define what profit do you want to end up with traffic
and make is one thing.
Yes and no traffic going wrong.
Then could argue that zero.
Thank you.
When to the other side which is tender for that food and then get that traffic in the easier light specify
exactly that.
I think that's OK.
Access list one or one that may be coming from then back to Web 2.0.
This whole network rendered did not for that product for this whole mess.
This is my proxy.
Here it is.
That's a different thing.
That's a topic for a different name when you do that.
I understand the question is.
But for now maybe the next thing after this that you're going to be that's the next step.
Once you understand this completely then we move on additional step.
That doesn't mean that I want you to understand the concept of what is hit when boxes feels that leather
thing is like all of these together.
Now you need to link all of these together and apply to any interface.
I love this feature.
My interesting graphic my policies my IP SEC transform said my team.
You need to bind it together in a bundle that bundle is known as crypto map.
Map is the bundle that links all of them together so we'll go here first of all I'll copy the access
list.
Then then I cleared the map crypto map valid anything just transform said the priority set this map
you'll call something let's say a map.
You need to give a sequence number here.
And then use more than one time.
You only have one but you just choose any random value.
And then this map is linking what together is linking Isaac up embassies and IP SEC policies together.
So the one which you're choosing is going to be IP second I said
you're basically saying I'm reading the map with the name a map and this crypto map is going to link
Isaac and policies and IP set transform set together
okay
Manuel is if you're not using any Isaac there's a certain there's a way that you don't use the first
policies you can create a dummy without using the flash policies in which you specify the DB You can
do that too.
But right now we'll do that.
This one is not used in it you would not.
Why would you do that.
Would you do it without the first time without a single photo.
But you don't want to do that.
They want to link Isaac M. and AP SEC both to that.
How do you do it.
I created the map.
I need to call the pants on set in here which transforms that I'm using for this map.
He said I'm moving.
He said What is my address.
Interesting traffic.
What is my impression that it is one on one.
I also need to set my beard.
What is might be his address.
30.
Three things I need to do here.
If I do it again.
I just clicked on that by map.
Then I'd be stuck I said that specifying that I'm linking the second I see them together.
They do.
Say said yeah 151 light 40 Dark Thirty that the match press one.
Once I'm linking the ACL also and the other last part that I need to address said fans phones that way
this year I'm binding my fans on set and binding my ACL and binding and I'm setting the pattern.
I am not binding my eyes the policy number and
that's done automatically by the group.
Then you say it's an 80s like I said I put up the map so that I think of the condition it takes out
the configuration for Isaac and takes it to the other side of the crypto map is up which state I would
be Isaac.
The last thing is what
interface F is the one with the map.
That's it.
Then you read the
immediate
word no that is the sequence number and take the automatic legal and see how many sequences you have
he standing to use them.
Then you get them mandate.
I have applied it to the interface.
Let's check the whole process again.
Interface at a 0 0 0 1 map I'm at app check it out and if the entity you should see that ISO capital
department come up that doesn't mean your time is up.
That means you're out there now is capable of doing see.
Yep.
It seems a bad idea but basically no takers.
That's it.
So if you receive the Baghdad report number 500 you'll accept it.
On their website.
Most of them on IP security services.
It's already configured as of late but when you configure it basically you need a map upload somewhere
for it to be up.
Once it have the services has services that divided itself then you fill out the board numbers up except
for the DCP.
Then we should also see that through
you file only port 67 is up.
Now he's open for 500 30 members but also is allowed to use for extended regional fights against the
nag which you're talking about.
If there is nothing happening he'll use 45.
I'll explain how that works.
Let's see 500 500 for those investors who have come up with you know that you can expect the package
coming into port.
No I mean
we're ready to do on the other end.
Same exact steps.
Let's see how much is the same.
I make a change in the policies
I would happily accept the evidence.
What about the key.
The advice is different from the other side the advice is different which is ripped from the dark.
This us about the transition that has to be described the same way we'll get step read.
Which projects six and seven seven and eight seven and eight stands on set headed the same.
What about the boxes you.
They will flip it will flip from source to destination often.
I feel like my food bank stance will pay for rent then it will be flip.
The last step put them up
here it is by that expense.
That's how it has to be admitted.
No.
I'll explain why.
I'll explain how this works.
I get them out.
Does anything change yet.
This number is the same because I'm using one of these that name is the same because I'm using the same
here.
I need to do the bit of that too.
I did that with the last step is applying it on the interface which also means that you don't have to
pay a bit before I do that.
Let me take it.
What numbers are open.
Only 67 isn't.
I decided to do the whole thing to see how much it can take.
So as I was saying I think I'm busy on social media.
I've ended in 45 I did not see the whole process of how it looks and I showed them this that I've actually
done worse.
The fact is going to come from there from the inside.
It will look like then to who was trying to communicate with them for fear for this packet comes back
to when it comes to I do I do does stab the dumb bird have I uploaded this crypto map route interface
this tournament only started when this packet hits this interface and when will it make the database
read it has done that out look up already many it does seem that the outgoing interface for this traffic
is at 0 1 0 0 0 whichever it is one hope so I'll get that not for 4 does not belong on the Internet
you should have a d d far out here which points because to be farther out this packet will be doubted
whether through the outside into these the moment it's about to leave the movement it's about to leave
from the outside interface where do you see that crypto map
where the first statement is match address
one or one
does this topic matter best when no one matches that it is right not to do I'm not sure if it matches
that address this bag it is kept on hold it's not allowed to go out if it doesn't match it's allowed
to go up
but if it matches it's kept on hold a separate package is created.
What does that racket package.
I suggest a separate package is created which goes from the public source of you
and the destination.
Where does it get this destination from.
You said you had a commander moment in the set where I said something in the crypto map.
When you go to the crypto map you see the Central Command at 151 Where do you go.
This is where he gets to the destination for five years ago.
So he sends the packet to 150 one bag.
So be dog food.
This was 20 that could be 500 500.
Now there's the first bag.
So what will be inside it.
What will be inside the Asuka
so it goes here.
He replies then the whole exchange takes place on the same UDP 500 between the same fears and then back
number 9
after the bag number 9 is done by the end of all this exchange.
Both of the ends will have the key both of the ends have the key
and they know which mechanism that using right now they're using what can only and be faced here until
the edge empty.
Now this packet should be allowed to go out just like this as it is.
It cannot go out as it is.
It did not reach the destination.
It's a private private witness but since
yeah get as specific as you want as long as it hits that ACL it will stay the night.
Now you can see that.
Let's have a look at what happens to the actual impact that is going out then.
1 1 2 2 1 2 then 4.
So it cannot go out as it does it has to ground on a public base.
They can sell a public address.
So this first hashing will be done.
So I headed comes here which is will tell me which one each on top of that another editor will come
on right.
Another item it has to go through the Internet.
This will be based on the destination will again be the set one which is why we don't have much time.
Okay so the SNB resources.
What is the destination.
Based on the idea which is what 151 Dark Thirty dug the source will be based on which source they are
living which is this interface.
So when did I do.
Where do you go to before you got food.
The good question is what comes to the Internet.
The internet does the right thing based on which part
it is the Internet job to make this packet reach the final destination.
Your job is only to do the encryption the I with the public.
Once you get the public hate it it is the Internet's job to take it with pride for the destination which
you have specified in many it reaches out for the moment it reaches out for it.
I thought it opens it.
The public hated it because it was meant for them.
Then he sees what the first thing that hits is what hurts them to open it whenever they declare
a key to open the edge.
That requires a key and maybe open checking for integrity first before doing anything else.
I tell you that open it up see what's inside it.
This is done better than that for this source and destination should exactly be a replication of his
boxes.
This should be the exact opposite because in decryption and use the opposite one in encryption would
use the ordinary proxies.
He knows that his proxy is something not for pretend not to.
So then therefore pretend not to use do encryption and then appeal to them not for any to direct decryption
nature indeed lips.
Sexy as hell.
Yes it does match.
Coming from and not too willing to put that forward so it's matching the ACL also.
He opens the packet.
Thanks for asking if it is correct.
The move this whole thing the backing does tend not to do that for the bag it is forwarded to with the
inside the reverse package.
The back is exactly the same again just quick recap of how it's going to be from that it done back it
is going to come from where I'm going to what is going to happen on foot.
The first thing is at would look up is going to look at that out of how to go to this destination.
How does it go to the destination for somebody who doesn't know debate and so it just forwards it out
to the outside interface.
The outside interface.
What is that.
I don't have a map.
The first command is magic.
Does it make it easier.
Yes it does.
Does it need to do the 90 packet exchange.
No he doesn't.
It's already that
no he doesn't.
He has the key and he has the key doesn't need the exchange.
So what does he do.
He adds that he does is hashing as the that on top of this one on top of that as the public order headed
they decide to put a command from that side the side that is ready to serve as the user interfaces and
forwarded to the Internet and forwards it back to life.
I will open this use the key to open the hatch take this from Ben not for men to then not do it for
them I do so if I were to the battle
rattle I would say he won his time talking privately to a private
NOPE NOPE NOPE NOPE NOPE NOPE NOPE NOPE NOPE NOPE NOPE NOPE NOPE.
You continue to what do you mean there now and then and delivery to the interface.
Once it crosses the interface once it reaches that I would look back and go before outlook look decryption
and hashing the hatching is done.
So obviously because you have to see what the addresses after when you reach the outside interface.
The process starts on the interface before it reaches that.
Why why why why why not.
You would have a delay because of Eclipse and ending it's enough as well.
But you can implement Cumulus solar panels then do that through the darkness and implement certain audience.
Yeah yeah yeah we do that too.
Okay so then this park they get.
Now let's have a look.
We have like 4 minutes left.
When I lose we'll have a look at the back exchange also which takes place and you see because the first
bucket is on hold.
The name back is go through the first one or two packets drop.
Then you send a ping which is obvious because being the BAM out is only 2 seconds later the replay doesn't
come back within 2 seconds.
It stays in the buffer for one second again the second for it from the third packet since the panel
is already part of the first time.
It goes like not nothing.
No communication is happening.
No I gotta tell you I have not see the dollar will not come up unless and until I initiate you somewhere
in
the moment.
Until I am saying the buy back it will not be good.
The battle will not be triggered if you check the command to take your first ever show crypto Isaac.
So the basic message there is not that this is the check the first basic item.
It's not that the by sector as it is the second one this is empty 9 percent no description.
This is digest and verified by just means flash.
But if I needs to verify the hash on the other side I think it's all clear.
So let's do this.
Bob.
I will send traffic first of all let's do that from then that Ford did not think then.
No one will think the public address.
Let's make sure that it is reachable.
That who is eligible so if you check the shop you sleeping bag is going to come forward to the public
addresses.
Then I'll send my interest in traffic from DC to everything.
Then back to Abu Dhabi.
You add something to that's at least the first two parties were dropped.
Third fourth fifth vote.
If you check what am I what am I going through.
What am I going to.
I'm going to I've done that for I think they're might do that.
But said that there was way on the other side of the way.
But I could Egypt do everything that I want to show you is what happens when you figure the moment you
think it would then that one pretend not to the first packet that leaves from the interface is not they're
not going to get knocked you I think that's what you did not do.
It's what you the.
Isaac back it's actual packet is kept on hold.
Isaac is initiated from the public address of that guy to the public address on the other day some 500
to 500.
This is the first packet second 7 4 6 7 8 and 9.
That's it.
I camp is only nine kids.
What do you think is the perspective.
Yes it
is open the budget and see
missing security associates and they get down to this job one day or two for a group which is dropped
to less kids.
I'm using a pretty shaky
back at number one who's ending it.
My phone is ending it's like two.
I thought this ending died too argue will will play with it.
Now I'm back at 6 somebody's face and tell them they know that energy is the key.
Also not the same.
They play comes the same so I almost you see the size of I get one and two is almost the same back in
number three and four similar size 340 64 this is my physical.
The public is exceeded.
If you take it you open it.
Where do you see them now.
Well when I see your notes that you know it's like 7 random amount of data.
Okay.
And this is an actual exchange which you will not be able to see the public keep as the mixture of the
public and the public.
No one's there before you want to be able to see what's inside them.
Who's ending it.
I thought his ending a diatribe sending him back the same thing.
But by the end of this exchange what happens on the other side of this evil trade secret.
Now what is the fifth packet
you escape.
But the good thing about this is it will be
nothing encrypted data.
You will not see it.
The escape you never see the best for.
You have the luxury of seeing it as sex dances.
Seven eight nine is quick more so security association here transforms it transforms that here.
The last is acknowledgment.
Only once they replace small party
take it up.
You might see it is not a good thing it just scrambled to keep the metal encrypted data is encrypted.
I know it's the same noise but just stumbled so it becomes the big A B becomes C and stuff on my iPhone
5 and 6 132 is also sending certain acknowledgements along.
It's not only just the key but initiate it also send certain other stuff which will see.
But the bottom part is if your key is mismatched the baggage will be stopped.
It is a fallacy that this major factor will be stopped within the first and the second.
And so and so forth.
And after that you have to back it right so that the difference between this thing and the old thing.
This was 1 1 4 bytes but this big is how much 1 5 8 bytes why the exhibits.
No it's not just one data it's another I had to on up of that left sixteen bytes of the idea that then
we have each for that in there.
If you actually opened this better than you want to see you can see it made to 3.
It starts from here.
I took a message that you'd actually hate it and not forward to doctor.
On top of that you'll see what it is which is hashing this quite good hashing values that you on top
of that.
You see what the public evidence that after routing will be done along the way.
And then you haven't eaten again.
So to modify the balance between not food and not so young.
So this is your second Tea Baggers have run through Tea Baggers have been an absolute and only absolute
so crypto Isaac at best is the first time state we know that if is an island state means linebackers
have gone through I mean I guess it the successful itself.
I say you should see what is going through that you can only see
bluntly of combat.
We yet.
If I say more
I send five more like
this means inspectors are going through this stuff.
They said the more information about this with me about that.
You talk about that from all of this but it tells you what you did more than five days which is pretty
bad for what your local end point is basically what am I going to add on top of this stuff.
There will be 20 down to 240 dog food.
And what traffic Am I interrupting.
I mean flipping traffic going something that food tend not to.
And certain other features and protection and stuff OK.
Should simple enough for today.
Your job would be to do what we did this with which was our ability to do this with.
Yes.
So while you're following the video follow it exactly as I'm doing it.
But instead of using it UCSB get
not even seeing it.
The best way to troubleshoot I guess if you guys wonder w should this and you want to see what happens.
Does this mean you're configuring it to the policy.
For example authentication.
Change it to the key and see that I've seen in the way of sharks.
He was back at his meeting last week General policy.
See this bag it is getting lost.
Sandra Brown swamps I don't see red as it getting.
Let's take.
Yeah.
Yes.
Choose which one.
I sure that the motto we get two buttons with the same wouldn't do that.
So
why is it that I'm more than what what
we send our members over to matches.
Best Band who said them first then 24 and 30 first band matches you take them with the newest band
so there's only one who can I have more than that today.
Well is that something you don't have to have sequence number one set match.
Yeah pretty much.
Yeah.
And looking at the maps the is configured first that would be the low road again.