JN0-637: Security, Professional (JNCIP-SEC)Demo

By Juniper · Question Mode

QuestionQ11

Advanced IPsec VPNs

You are deploying OSPF over IPsec, using GRE, between an SRX Series device and a third-party device.

Which two statements are correct?

Choose two
  • A Overlapping addresses are allowed between remote networks.
  • B The GRE interface should use lo0 as endpoints
  • C The GRE interface must be configured under the OSPF protocol.
  • D The OSPF protocol must be enabled under the VPN zone.
Explanation

A GRE-over-IPsec design uses loopback (lo0) addresses as stable GRE tunnel endpoints. The GRE logical interface carries the OSPF adjacency and must therefore be configured under the OSPF protocol hierarchy. The OSPF packets are encapsulated within GRE and IPsec, so enabling OSPF specifically in the VPN zone is not a prerequisite.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!