Explain how an Internet Key Exchange (IKE) gateway, an IPsec tunnel, a tunnel interface, and a static route work together in a site-to-site virtual private network (VPN).

### What a good answer covers - The IKE gateway defines peer identity and negotiation settings. - The IPsec tunnel links the gateway to traffic protection settings and the tunnel interface. - The tunnel interface is a logical path for routed traffic between sites. - The static route sends traffic for the remote LAN through that path. ### The concept A VPN can negotiate successfully but still fail to carry useful traffic if the route is missing. Likewise, a route cannot create a protected tunnel on its own. Each component has a separate job: peer negotiation, traffic protection, and forwarding. Both firewalls need compatible settings, including the IKE version and cryptographic profiles. ### Terms - **IKE**: Internet Key Exchange. A protocol that negotiates VPN security settings. - **IPsec**: Internet Protocol Security. Protocols that protect network traffic. - **LAN**: Local-Area Network. A network serving devices at one site. - **VPN**: Virtual Private Network. A protected connection between networks. ### Remember A working VPN needs a peer relationship, a protected tunnel, and a route.