H12-725: HCIP-Security V4.0

By Huawei · Question Mode

QuestionQ37

Network Security

An enterprise operates multiple branches. The headquarters has a fixed egress IP address, whereas branch egress IP addresses are random. An IPsec VPN must therefore be established between the headquarters and the branches. To lower management and maintenance costs, which IPsec VPN configuration mode is recommended?

Explanation

A headquarters device with a fixed public IP address can use a template IPsec policy to accept connections from multiple branches whose public IP addresses change. Each branch can use a site-to-site policy directed to the fixed headquarters address. This avoids maintaining separate fixed-peer policies at headquarters for every branch.

Community Discussion

No comments yet. Be the first to start the discussion!