اختبار شهادة امن المعلومات CompTIA Security+

VPN Site-to-Site Configuration Lab

Scenario:
A systems administrator is configuring a site-to-site VPN between two branch offices to establish secure communication between their networks. The VPN concentrators at both sites need to be properly configured to ensure secure and encrypted communication.

Requirements:
• Configure both VPN concentrators for site-to-site connectivity
• Use the most secure algorithms available
• All traffic must be encrypted over the VPN tunnel
• Use Pre-Shared Key (PSK) authentication method
• Ensure proper network routing between sites

Network Information:
• VPN Concentrator 1 (Left side):
- Peer IP: 5.5.5.20 (VPN Concentrator 2)
- Local Network: 192.168.1.0/24
- Remote Network: 192.168.2.0/24

• VPN Concentrator 2 (Right side):
- Peer IP: 5.5.5.10 (VPN Concentrator 1)
- Local Network: 192.168.2.0/24
- Remote Network: 192.168.1.0/24

Security Requirements:
• Phase 1 Configuration:
- Authentication Method: PSK (Pre-Shared Key)
- Encryption Algorithm: AES256 (most secure)
- Hash Algorithm: SHA256 (most secure)
- Negotiation Mode: MAIN (pre-configured)
- DH Key Group: 14 (pre-configured)

• Phase 2 Configuration:
- Mode: Tunnel (pre-configured)
- Protocol: ESP (Encapsulating Security Payload)
- Encryption Algorithm: AES256 (most secure)
- Hash Algorithm: SHA256 (most secure)

Instructions:
1. Click on each VPN concentrator to open its configuration interface
2. Configure Phase 1 settings with the most secure options
3. Configure Phase 2 settings with the most secure options
4. Enter the correct network information for each concentrator
5. Save the configuration for both concentrators
6. Ensure both concentrators have matching security settings for successful tunnel establishment

Note: Some fields are pre-configured with optimal values and cannot be modified.