JN0-533: Juniper Networks Certified Specialist FWV (JNCIS-FWV)Demo

By Juniper · Question Mode

QuestionQ55

IPsec and VPNs

A site-to-site IPsec VPN has been created between two devices. You need the tunnel to remain up at all times, even when no user traffic is traversing it. Which two configuration additions achieve this objective?

Choose two
  • A set vpn "RemoteVPN" monitor source-interface ethernet0/1 destination-ip
  • B set vpn "RemoteVPN" monitor source-interface ethernet0/1 destination-ip rekey
  • C set vpn "RemoteVPN" monitor source-interface ethernet0/1 destination-ip keepalive
  • D set vpn "RemoteVPN" monitor source-interface ethernet0/1 destination-ip rekey optimized
Explanation

ScreenOS VPN monitoring combined with rekey actively re-establishes the IPsec security associations when needed, so the tunnel remains available without relying on user traffic. The optimized modifier is a supported VPN-monitor mode that can be used together with rekey; both configurations include the required rekey behavior. Juniper guidance for ScreenOS VPN monitoring specifically calls for activating VPN monitoring with Rekey, with Optimized also supported.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!