Skip to content

Arrange the standard steps for validating a newly configured site-to-site IPsec VPN tunnel in order, beginning with initiating end-to-end traffic and concluding with firewall policy confirmation.

Answer

Send ICMP echo requests from Site A to Site B to generate interesting traffic, Confirm receipt of ICMP echo replies on the initiating host, Verify on the security gateway that IKE and IPsec security associations are active, Inspect firewall traffic logs to confirm the session matched the intended VPN policy rule

Explanation

### The order 1. **From Site A W1, ping 172.17.20.10**: The lab begins testing internal reachability with a ping to Site B's W1. 2. **Confirm successful replies**: Replies show that the end-to-end test succeeded. 3. **Check that IKE and IPsec status indicators are green**: The lab says to check the tunnel indicators after successful ping tests. 4. **Inspect the completed W1-to-W1 traffic log and verify Allow and the matching VPN rule**: The log confirms the policy decision and the rule that handled the session. ### The concept Testing moves from user-visible connectivity to tunnel status and then policy evidence. A successful ping alone does not show which rule allowed it, so the traffic log provides useful confirmation of the policy match. ### Terms - **ICMP**: Internet Control Message Protocol. Supports diagnostic messages such as ping. - **IKE**: Internet Key Exchange. Negotiates VPN security associations. - **IPsec**: Internet Protocol Security. Protects IP traffic. - **W1**: The workstation named condorID-W1 in the lab. ### Remember Test connectivity first, then confirm tunnel state and the logged policy decision.

Related Questions

Want to practice more questions like this?

Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.

Start Practicing Free