Secure Network Administrationintermediate
Arrange the standard steps for validating a newly configured site-to-site IPsec VPN tunnel in order, beginning with initiating end-to-end traffic and concluding with firewall policy confirmation.
Answer
Send ICMP echo requests from Site A to Site B to generate interesting traffic, Confirm receipt of ICMP echo replies on the initiating host, Verify on the security gateway that IKE and IPsec security associations are active, Inspect firewall traffic logs to confirm the session matched the intended VPN policy rule
Explanation
### The order
1. **From Site A W1, ping 172.17.20.10**: The lab begins testing internal reachability with a ping to Site B's W1.
2. **Confirm successful replies**: Replies show that the end-to-end test succeeded.
3. **Check that IKE and IPsec status indicators are green**: The lab says to check the tunnel indicators after successful ping tests.
4. **Inspect the completed W1-to-W1 traffic log and verify Allow and the matching VPN rule**: The log confirms the policy decision and the rule that handled the session.
### The concept
Testing moves from user-visible connectivity to tunnel status and then policy evidence. A successful ping alone does not show which rule allowed it, so the traffic log provides useful confirmation of the policy match.
### Terms
- **ICMP**: Internet Control Message Protocol. Supports diagnostic messages such as ping.
- **IKE**: Internet Key Exchange. Negotiates VPN security associations.
- **IPsec**: Internet Protocol Security. Protects IP traffic.
- **W1**: The workstation named condorID-W1 in the lab.
### Remember
Test connectivity first, then confirm tunnel state and the logged policy decision.
Related Questions
- Which statement best describes the protection a Virtual Private Network (VPN) provides?(basic)
- A VPN that encrypts traffic also guarantees that the applications on both endpoints are safe.(basic)
- Explain why a split-tunnel design can reduce central inspection, and identify the traffic affected.(advanced)
- Select ALL protection goals a VPN can support directly through the mechanisms described in the course.(intermediate)
- Compare remote-access and site-to-site VPN designs, including their endpoints and a suitable example of each.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free