in this video, we get started with the next section of troubleshooting about network troubleshooting. But before we get into what is there in the slides, let's get an understanding about private connectivity when a customer has an O. Ci tenancy with the VC and available with them. Please note when you create a V C N, you give a cider based on the private I P range you want and most likely an organization would want their employees to administer resources or access applications from their on premise network wherein the employees could be sitting inside the office network or they establish VPN connection to the office network and only when they are in their optimized network, they would be able to connect. So how do we establish this private connectivity between these? We have a component in the V C N called us a DRG, which has to be set up in the tenancy in the same region and associated with the V C N. How do we create a DRG? We go to the V C N related or networking related resources in a V C N. You cannot create a DRG per se, but you can create a DRG separately and associated to a V C N. The DRG acts as a dynamic routing gateway to connect to multiple private networks, let's say, I will call this as a frank DRG as a name and once a DRG is created using the DRG, you can create VPN connections and virtual circuits for fast connect and also do remote peering between two Vcs in two regions. Once DRG is available, you can associate it to the V C N from the DRG page or you can go to the V C N where you want it to be attached by going going to the V C N page and from within the V C N. You have the menu option under resources on the left hand side to associate a DRG. Either way you could attach it from the DRG page or V C N page, please note one V C N will have only one DRG and one DRG can be associated only with one V C N. So it is a 1 to 1 relationship. Once you have a DRG in place, you could set up either VPN connection from your on prem ISE wherein o Ci provides I P SEc VPN as a free service or you could also set up fast connect connections. There are different ways in which one can establish a fast connect connection and for which there is additional cost involved. When we look at fast connect, you could use a partner provider or a third party provider or you could use co location and set up or to specific Microsoft. Azure cloud regions. Oracle and Microsoft have established connectivity where in this comes in of help to set up a multi cloud environment, you can learn about setting these separately but at the end of the day, the DRG is the endpoint to do private connectivity to your compromise using either VPN or fast connect or do remote peering to another Vcs in another region. These are all options available to be created from your networking components. If you want to create a VPN connection you need to have a C PE registered. The CPI is fundamentally used along with VPN to have the customer side premises which could be a router or compute instance in your on premises environment which has the VPN software available like a liberate swan or etcetera. And using this, you register the CP that you have in your compromise end. So let's say I will call it as on prem Cp. Or it could be in another cloud provider like AWS where you have a computer with liberal swan and you use that to connect over the internet. So when you have a C. P. U would have an I. S. P. Who would give you an internet connection to your on prem through which you would have a public I. P. Which would be assigned. I am taking a dummy example here. And if you're using a cloud provider you could use a public I. P. Given by the cloud provider and have a compute instance with the public I. P. And the Liberals swan kind of a software or you have an optimized hardware in the form of any of these routers you choose what you have and can't figure the CP as an entity in O. C. I. You are basically informing O. C. I which is the component with the public I. P. In your on premises and or your other cloud provider end and once you have a C. P in place, you can set up a VPN connection. We are not going to set up a VPN connection, but if you're setting up a VPN connection, you will choose which is the sea P and which is the DRG through which this connectivity is established and you will give the cider of your compromised network. If you're doing static routing, you also have the ability to set up a dynamic routing. They're all standard networking frameworks that you can use once you have the I P sec V. P and created, you have a private connectivity using the internet as a backbone where the network transfer is encrypted and shared. Similarly, if you want to use a fast connect connection, there are different ways of achieving it. What I'm going to show you here is a quick way of looking at creating a fast connect connection wherein you might use a provider within the region, depending on the region, the providers are different. Here is a partner provider listed for Frankfurt. You would have to work with the provider and the O. C. Engineers to get the fast connect connection in place or if you are doing co location or a third party provider, you would have to use the fast connect direct option and establish the connectivity if you want to use with Azure specific regions of O. C. I and specific regions of ashore have their backbone connectivity in place. You can see in Frankfurt, it is already available and you will have to work with both the cloud providers and get this configuration done. Once you have all these in place, you will go to your fast connected or I P. Sec and have the connections in place and go to your V C N and update the route table to choose which target in the form of the dynamic routing gateway will take you to your specific I. P range. You need to get this configure maybe you have a VPN connection to another cloud provider with this particular cider as a private network. Maybe you have your compromised network with a cider of this available, which you have a fast connect connection and you will specify the route rules and whichever sub net has this route table configured will have the pathways using these gateways to reach those networks similarly on the end of your on premises or private cloud networks in the other network providers you need to configure the routing mechanism to reach O. C. This is an overview about how you would have private connectivity established between your O C I V C N and your on prem eyes or other cloud provider networks so that you establish a multi cloud or a hybrid cloud environment to achieve a deployment of your applications in this, In the next few videos, you will look at what you need to consider when you have problems in troubleshooting.
