JN0-231: Security, AssociateDemo

By Juniper · Question Mode

QuestionQ78

Junos OS Security Objects

You need to verify the peer before an IPsec tunnel is established.

What would be used as the final check in this scenario?

  • A traffic selector
  • B perfect forward secrecy
  • C st0 interfaces
  • D proxy ID
Explanation

A proxy ID must match between IPsec peers for the IPsec security association to complete. It identifies the local and remote traffic/identities associated with the VPN, and a proxy-ID mismatch causes Phase 2 establishment to fail.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!