IPsec / WireGuard VPN
Routing
Overview
VPN tunnels authenticate peers and protect traffic between defined endpoints. IPsec policies select traffic and negotiate security associations; WireGuard uses keys and allowed IPs for peer mapping. Routes, policy and key trust all matter. Encryption is not a substitute for endpoint authorization.
Protocol stages
- 1Peer identity
- 2Key / policy agreement
- 3Traffic selection
- 4Tunnel encapsulation
Interactive exercise
Knowledge check
The peer is trusted but the remote subnet is not routed or allowed through the tunnel. Expected outcome?
Educational model — not real hardware, traffic or official certification.