JN0-637: Security, Professional (JNCIP-SEC)

By Juniper · Question Mode

QuestionQ16

Advanced IPsec VPNs

Click the Exhibit button.

Question Image

You are troubleshooting a newly configured IPsec VPN between your corporate office and the RemoteSite1 SRX Series device. The VPN is currently not establishing. The RemoteSite1 device receives an IP address for its gateway interface through DHCP.

Referring to the exhibit, which action will resolve this issue?

Explanation

For an IKEv1 VPN using pre-shared keys, a peer with a dynamically assigned external IP address must use aggressive mode rather than main mode. Aggressive mode sends the peer identity early in the exchange, allowing the receiving gateway to select the appropriate policy and pre-shared key for the dynamic peer.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!