Secure Network Administrationintermediate
Arrange the steps in the correct order to configure a route-based site-to-site IPsec VPN, from peer negotiation to traffic forwarding.
Answer
Configure the IKE gateway for Phase 1 peer authentication, Configure the IPsec tunnel referencing the IKE gateway and tunnel interface, Add a static route directing remote network traffic to the tunnel interface
Explanation
### The order
1. **Define the IKE peer gateway**: the firewall first needs the peer and local settings used to negotiate the connection.
2. **Associate the gateway with an IPsec tunnel and tunnel interface**: this links negotiation to the protected logical path.
3. **Add a route for the remote LAN through the tunnel**: once the path is defined, forwarding can direct remote-network traffic into it.
### Terms
- **IKE**: Internet Key Exchange, the negotiation protocol.
- **IPsec**: Internet Protocol Security, protection for network traffic.
- **LAN**: Local Area Network, the internal network at a site.
### Remember
Define the peer, build the protected path, then route traffic into it.
Related Questions
- Which statement best describes the protection a Virtual Private Network (VPN) provides?(basic)
- A VPN that encrypts traffic also guarantees that the applications on both endpoints are safe.(basic)
- Explain why a split-tunnel design can reduce central inspection, and identify the traffic affected.(advanced)
- Select ALL protection goals a VPN can support directly through the mechanisms described in the course.(intermediate)
- Compare remote-access and site-to-site VPN designs, including their endpoints and a suitable example of each.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free