Match each verification command or evidence source to what it checks. Internet Key Exchange (IKE) and Internet Protocol Security (IPsec) are included.

### The pairs | Item | Matches | Why | |---|---|---| | `test vpn ike-sa gateway <gateway_name>` | Initializes IKE Phase 1 | The lab uses this command to initiate the IKE negotiation for the named gateway. | | `show vpn ike-sa gateway <gateway_name>` | Displays IKE Phase 1 status | The `show` command reports the gateway's IKE security association state. | | `test vpn ipsec-sa tunnel <tunnel_name>` | Initializes IKE Phase 2 | The lab uses this command to initiate the tunnel's IPsec negotiation. | | `show vpn ipsec-sa tunnel <tunnel_name>` | Displays IPsec security association status | It reports the IPsec association state for the named tunnel. | | `show vpn flow` | Shows traffic flow through the VPN | It provides a view of traffic moving through the tunnel. | ### The concept The `test` commands initiate negotiation; the `show` commands inspect state. The lab calls the first negotiation IKE Phase 1 and the IPsec tunnel negotiation IKE Phase 2. `show vpn flow` concerns traffic flow rather than the status of a single security association. ### Terms - **IKE**: Internet Key Exchange. Negotiates VPN security associations. - **IPsec**: Internet Protocol Security. Protects IP traffic. - **VPN**: Virtual Private Network. Connects networks through a protected logical path. ### Remember Use `test` to initialize, `show` to inspect.