300-410 ENARSI: Implementing Cisco Enterprise Advanced Routing and ServicesDemo

By Cisco · Question Mode

QuestionQ456

VPN Technologies

Question Image

Refer to the exhibit. An engineer needs to configure a LAN-to-LAN IPsec VPN between R1 and the remote router. Which IPsec Phase 1 configuration must the engineer use on the local router?

  • A crypto isakmp policy 5authentication pre-shareencryption 3deshash shagroup 2!crypto isakmp key cisco123 address 200.1.1.3
  • B crypto isakmp policy 5authentication pre-shareencryption 3deshash md5group 2!crypto isakmp key cisco123! address 199.1.1.1
  • C crypto isakmp policy 5authentication pre-shareencryption 3deshash md5group 2!crypto isakmp key cisco123 address 199.1.1.1
  • D crypto isakmp policy 5authentication pre-shareencryption 3deshash md5group 2!crypto isakmp key cisco123 address 200.1.1.3
Explanation

For a router-to-router IKE/ISAKMP VPN using pre-shared authentication, the local router configures the shared key against the remote peer’s IP address. The remote peer is reachable at 200.1.1.3, so crypto isakmp key cisco123 address 200.1.1.3 is required; the corresponding policy uses pre-shared authentication, 3DES encryption, MD5 hashing, and Diffie-Hellman group 2.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!