In a route-based site-to-site VPN, traffic destined for the remote network is forwarded using a static or dynamic route pointing to a logical _____ interface.

### Why this is right The remote LAN route points traffic toward the tunnel interface so the firewall can send it across the site-to-site VPN. The tunnel interface is a logical forwarding path, not the Internet-facing physical path. ### The concept The firewall uses routing to choose where packets go. A static route for the remote network tells the firewall to send matching traffic into the tunnel. Without that route, the firewall may not select the VPN even if the tunnel has negotiated successfully. ### Terms - **LAN**: Local-Area Network. A network serving devices at one site. - **VPN**: Virtual Private Network. A protected connection between networks. ### Remember The remote subnet route points to the tunnel interface.