Refer to the exhibit. An administrator is configuring a VPN tunnel on a Cisco router. The information provided by the administrator of the remote end of the VPN tunnel was that IKEv1 is the tunnel protocol with a preshared key of C1$c0463835440!. The encryption for both phases is AES and the hash for both phases is SHA-256. The source subnet is 10.10.10.x/24 and the destination subnet is 10.10.20.x/24. The local device cannot establish a VPN tunnel and the debug message shown here is seen in the log file. What must be verified to correct the configuration?

A. Ensure that the IKE version is identical on both ends

B. Ensure that the ISAKMP policy configuration is identical on both ends

C. Ensure that the preshared key is identical on both ends

D. Ensure that the ACLs that define interesting traffic are symmetrical on both ends








 

Suggested Answer: D



This question is in 350-701 exam 
For getting CCNP Security Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Cisco.
Trademarks, certification & product names are used for reference only and belong to Cisco.