Activity: VPN Site-to-Site Configuration

Open the hands-on activity in a new browser tab for full screen functionality.
Overview
In this performance-based simulation, you will step into the role of a Network Administrator for a growing enterprise. Your objective is to securely connect the Corporate Headquarters and a Regional Warehouse to your local Branch Office using IPsec Site-to-Site VPN tunnels.
This activity mimics the hands-on configuration questions found on the CompTIA Security+ certification exam, requiring you to synthesize information from multiple sources to achieve a secure and functional network state.
Learning Objectives
By completing this simulation, you will demonstrate the ability to:
- Analyze Network Topologies: Identify correct peer IP addresses and subnet masks for remote gateways.
- Apply Security Policies: Interpret corporate security standards to select appropriate cryptographic algorithms.
- Configure IPsec Protocols: Differentiate between Tunnel and Transport modes, and select the correct protocol (ESP vs. AH) for confidentiality.
- Manage Secrets: practice secure retrieval of Pre-Shared Keys (PSK) from a privileged access vault.