Describe how to verify a host-to-host site-to-site VPN test using ping, tunnel status, and traffic logs.

### What a good answer covers - Use **Internet Control Message Protocol (ICMP) ping** between hosts to test end-to-end reachability. - Check the IKE and IPsec status indicators to see whether VPN negotiation and tunnel protection are active. - In traffic logs, verify source and destination addresses, the ping application, an Allow action, and the matching VPN rule. - If the test fails, inspect host settings, routes, source network address translation (NAT), policies, interface ping permissions, and tunnel status. ### Terms - **ICMP**: Internet Control Message Protocol, used by ping to test reachability. - **IKE**: Internet Key Exchange, used to negotiate VPN settings. - **IPsec**: Internet Protocol Security, used to protect VPN traffic. - **NAT**: Network Address Translation, which changes packet addresses. ### Remember Use ping to test, tunnel status to check negotiation, and logs to identify policy handling.