H12-725: HCIP-Security V4.0

By Huawei · Question Mode

QuestionQ9

Network Security

An IPsec VPN is established using IKEv1 Main Mode. When a NAT device is detected, from which of the following ISAKMP messages does port number translation begin?

Explanation

In IKEv1 Main Mode, NAT detection occurs through NAT-D payloads exchanged in messages 3 and 4. If NAT is detected, the initiator switches IKE traffic to UDP port 4500 when it sends the ID payload in message 5; subsequent IKE packets use the translated port.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!