The Internet Key Exchange (IKE) gateway tells the firewall how to contact the remote peer to establish the Internet Protocol Security (IPsec) tunnel.

### Why this is right The IKE gateway contains peer-connection information, including the local interface and address, the peer address, the IKE version, and the pre-shared key. The lab describes it as the configuration used to connect to the remote device and create the IPsec tunnel. ### The concept IKE negotiates the security associations used to protect VPN traffic. The IPsec tunnel configuration then associates an IKE gateway with a tunnel interface and a cryptographic profile. These are related but distinct configurations: the gateway describes the peer negotiation, while the tunnel combines that gateway with the forwarding interface and IPsec settings. ### Terms - **IKE**: Internet Key Exchange. The protocol used to negotiate VPN security associations. - **IPsec**: Internet Protocol Security. A suite for protecting Internet Protocol traffic. ### Remember The gateway identifies and negotiates with the peer; the IPsec tunnel binds that connection to traffic forwarding.