Cisco CCNA (200-301)Security FundamentalsMedium
A branch office needs an always-on encrypted tunnel connecting its router permanently to headquarters, without requiring end-user client software. Which VPN type best fits this requirement?
- ARemote-access SSL VPN
- BClientless SSL VPN portal
- CSite-to-site IPsec VPN
- DClient-based AnyConnect VPN
Show answer & explanationAnswer & explanation
Correct answer: C. Site-to-site IPsec VPN
A site-to-site IPsec VPN establishes a permanent, always-on encrypted tunnel between two gateway routers/firewalls, transparently securing traffic between sites without requiring individual client software on end-user devices.
Why the other options are wrong
- A. Remote-access VPNs connect individual users to a network, not two sites.
- B. Clientless SSL VPN provides browser-based access for individual users, not site connectivity.
- D. AnyConnect is client software installed on end-user devices for remote access.
Site-to-Site VPN
An IPsec VPN tunnel established between two gateway devices (routers/firewalls) to securely connect entire networks, typically always-on.
- Connects networks, not individual users
- No client software needed on end hosts
- Contrasts with remote-access VPNs for individual clients
Memory trick: Site-to-Site Sticks two buildings together permanently