Well, if you were thinking that most of our efforts when it comes to firepower in the U.S. were going
to be in the preparation of our U.S. environment, you would be absolutely correct.
We're going to pick up with the next video right now.
Remember, we've got our identity and access management set up the way we want it.
And now we have created in the previous video, we also created our virtual private cloud.
Now, what we're going to do is go into that virtual private cloud and we're going to do two things.
We're going to give it connectivity to the Internet through an Internet gateway.
That way we can reach our pharmacy for managing it.
And we're also going to carve out the subnets that will be used for data networking as well as management
networking to the FMC.
So I have logged in to our IWC management console utilizing that nice IWC admin account that we created.
Now in order to add these VPC components, one of the one of the areas you can go to, one of the ways
to do it is we can head back to our virtual private cloud area.
And what we're going to be doing is we're going to be going to this Internet gateway feature right here.
So I'm going to choose Internet Gateway.
Notice that I have an internet gateway and that it is currently attached to the default VPC.
Yeah.
So this is great.
This is exactly what we need to do for the new VPC that we created.
And so I'm going to choose to create an Internet gateway.
I'll go ahead and call this fancy underscore Internet gateway I GW and notice that we have our tags
area.
We just gave the name tag value.
I'll go ahead and give our use and our use tag that we had utilized, I believe was FMC.
Underscore there it is in AWG.
So I can go ahead and add my usage tag as well and create the Internet gateway.
Now, Major, gotcha right here.
And this can be really tough to troubleshoot, really tough to track down.
We have created the Internet gateway, but we need to attach it to the appropriate VPC.
In fact, look it up at the top so you can see that, you know, was the the support team, they probably
campaign for this, right?
We need to attach it to a VPC.
So it's just very easy to not do this.
And that would be a nightmare.
Right.
So IWC looks in at our environment and it sees that, oh well there's a VPC called my FMC VPC that does
not have an Internet gateway.
That must be the one you want.
So I say yes, that is exactly the one that I want.
And now we have attached our Internet gateway to our virtual private cloud.
So the Internet gateway is going to be the vehicle that we can use for getting traffic into and out
of the VPC to the Internet.
This is obviously a critical component.
All right.
Well, that's not all we're going to do in this video.
As we said, we're going to do something else.
We're going to carve out our subnets.
So where is our subnets option?
There it is, right under the option for the VPI.
CS Which makes good sense.
So here you can see the what is that six.
Yeah, the six subnets that are all part of my default VPC.
So we are going to choose this create subnet button right here.
We are going to choose our VPC that we created.
And we're going to give this a name like how about MGM and T r?
This is our management subnet for the FMC.
So I'm going to go ahead and give this a name.
And the usual abbreviation is just MGM T, right?
Yeah, whatever.
All right.
So, yes, we give the subnet a name.
We do not have a preference on availability zone, the EC2 instance that we are going to be launching
to power the FMS C, it is a big robust.
Right, lots of resources, relatively expensive as far as AWG goes it.
A big instance with lots of RAM and CPU and stuff.
You have to be careful pre selecting locations, especially if you don't have a good reason to do it
in the first place.
And why I say that be careful about that is oftentimes you'll go to spin up your lab, your Cisco lab.
I had one that was I believe it was one FMC and then three firepower, virtual firewalls that the FMC
managed.
So there was four big EC2 images.
And because I had tried to place them in specific locations, I would sometimes get error messages that
a WAC was out of resources to launch my lab.
And the only reason that was happening was I was trying to be all fancy about the placement of those
machines and really I was just messing around.
It was for no good reason.
So, yeah, we want to watch out for that.
All right.
So we have the ten .0.0.0 slash 16 block for our overall CIDR, you know, range.
So what I'm going to do here is I'll go ahead and we'll reserve the ten 000 slash 24 for the management
subnet.
Once again, I will consistently come in here with a used tag and I will choose my FMC in a IWC tag
that we created.
And we're going to add a new subnet right here while we're at it.
This is a new feature, by the way.
You used to have to add them one at a time.
Really annoying.
I like what they did here.
So we had this management subnet for FMC.
Now what I'm going to do is I'm just going to come down and I'm going to paste that in and I'm going
to say this is the data one subnet for the FMC.
Right.
We would want to just go ahead and add some data subnets while we were here, will make this the ten
zero one slash 24.
Here we go.
And we are going to add our name tag of use.
This is the FMC in eight of us, and we'll just add one more subnet while we're here.
This is going to be the data to subnet.
Oh, right.
No preference on placement and we'll do ten 0 to 0 slash 24.
So there we go.
And finally, our use tag and the use tag is going to be FMC in eight of us and we will choose create
subnet.
I love the efficiency of this interface compared to how it used to be.
And what do I have here?
I have an issue with that CIDR block.
Let's see.
What did I do to mess that up?
That should work.
Why doesn't it like that?
Oh, I guess there was just.
I guess it wasn't fully clicked or something weird.
All right, let me try that again.
Create some that.
Yeah.
There we go.
Boy, that was scaring me.
Yeah.
You know, I was like, uh, that's a valid subnet of the ten zero six space.
What is your issue?
So anyways, there we have it.
So we have our management subnet.
We have two data subnets that we can call upon.
There you can see the ranges for those subnets.
And of course, we did put them in the correct location.
They're in the my FMC VPC.
Well, believe it or not, we're not done prepping the IWC environment.
Notice there's lots to do.
Very simple to do.
But a lot that we got to set up here to make sure our FMC WC lab works beautifully.
I hope you're excited like I am for the next video.