Secure Network Administrationadvanced
A VPN peer shows a configured IKE gateway, but hosts cannot reach the remote subnet. Explain why a route may still be needed.
Answer
An IKE gateway defines peer and negotiation information, but it does not by itself tell the firewall which destination traffic should enter the VPN. A static route for the remote subnet selects the tunnel interface as the forwarding path. Security policy and working tunnel negotiation must also be checked if traffic still fails.
Explanation
### What a good answer covers
- The IKE gateway establishes peer-related configuration, not a destination-based forwarding decision.
- A **static route** maps the remote subnet to the VPN tunnel interface.
- Without that route, packets may follow another route or have no suitable path.
- A route is necessary for forwarding but does not prove that negotiation, encryption, or security-policy permission is working.
### Terms
- **IKE**: Internet Key Exchange, used to negotiate VPN settings.
- **VPN**: Virtual Private Network, a protected connection between networks.
### Remember
Peer configuration brings the endpoints together; routing sends the right traffic through them.
Related Questions
- Which statement best describes the protection a Virtual Private Network (VPN) provides?(basic)
- A VPN that encrypts traffic also guarantees that the applications on both endpoints are safe.(basic)
- Explain why a split-tunnel design can reduce central inspection, and identify the traffic affected.(advanced)
- Select ALL protection goals a VPN can support directly through the mechanisms described in the course.(intermediate)
- Compare remote-access and site-to-site VPN designs, including their endpoints and a suitable example of each.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free