1. Network Virtualization in The Hybrid Cloud Stanislav Zhelyazkov Microsoft MVP 21/11/2013

4. * VMM 2012 SP1 and R2 only supports creation of isolated PVLAN VMs

5. Load balancer back end and internet facing

11. Different subnets 10.0.0.5 10.0.0.7 192.168.2.22 192.168.5.55 192.168.2.22  192.168.5.55 10.0.0.5  10.0.0.7 GRE Key 5001 MAC CA 10.0.0.5  10.0.0.7 10.0.0.7 GRE Key 6001 MAC CA 192.168.2.22  192.168.5.55 10.0.0.5  10.0.0.7 10.0.0.7 10.0.0.7 10.0.0.7 10.0.0.7 10.0.0.7 10.0.0.7 10.0.0.7 VSIDProvider AddressCustomer Address NVGRE Packet

17. Contoso VM Network Northwind VM Network Fabrikam VM Network Internet Hoster

18. Contoso VM Network Northwind VM Network Fabrikam VM Network Internet Hoster BGP

19. TCP/IP VM

20. TCP/IP VM

22. IKE Phase 1 Setup PropertySetting IKE VersionIKEv2 Diffie-Hellman GroupGroup 2 (1024 bit) Authentication MethodPre-Shared Key Encryption Algorithms AES256 3DES Hashing AlgorithmSHA1(SHA128) Phase 1 Security Association (SA) Lifetime (Time) 28,800 seconds IKE Phase 2 Setup PropertySetting IKE VersionIKEv2 Hashing AlgorithmSHA1(SHA128) Phase 2 Security Association (SA) Lifetime (Time) - Phase 2 Security Association (SA) Lifetime (Throughput) - IPsec SA Encryption & Authentication Offers (in the order of preference) See Dynamic Routing Gateway IPsec Security Association (SA) OffersDynamic Routing Gateway IPsec Security Association (SA) Offers Perfect Forward Secrecy (PFS)No Dead Peer DetectionSupported

23. Vendor Device FamilyMinimum OS Version Configuration Template CiscoASRIOS 15.2Cisco ASR templates CiscoISRIOS 15.1Cisco ISR templates JuniperSRXJunOS 11.4Juniper SRX templates JuniperJ-SeriesJunOS 11.4Juniper J-series templates JuniperISGScreenOS 6.3Juniper ISG templates JuniperISGScreenOS 6.3Juniper SSG templates Microsoft Routing and Remote Access Service Windows Server 2012Routing and Remote Access Service templates