违法和不良信息举报 联系客服
免费注册 登录

You need to configure a GRE tunnel on a IPSec router. When y

题目
多选题
You need to configure a GRE tunnel on a IPSec router. When you are using the SDM to configurea GRE tunnel over IPsec， which two parameters are required when defining the tunnel interfaceinformation？（）
A

The crypto ACL number

B

The IPSEC mode （tunnel or transport）

C

The GRE tunnel interface IP address

D

The GRE tunnel source interface or IP address， and tunnel destination IP address

E

The MTU size of the GRE tunnel interface

如果没有搜索结果或未解决您的问题，请直接 联系老师 获取答案。
相似问题和答案

第1题：

Refer to the exhibit. A new TAC engineer came to you for advice. A GRE over IPsec tunnel was configured, but the tunnel is not coming up. W hat did the TAC engineer configure incorrectly?()

A. The crypto isakmp configuration is not correct.

B. The crypto map configuration is not correct.

C. The interface tunnel configuration is not correct.

D. The network configuration is not correct; netw ork 172.16.1.0 is missing.


参考答案：A

第2题：

You work as a network engineer， do you know an IPsec tunnel is negotiated within the protection of whichtype of tunnel？（）

  • A、L2F tunnel
  • B、L2TP tunnel
  • C、GRE tunnel
  • D、ISAKMP tunnel

正确答案:D

第3题：

You are configuring an SRX210 as a firewall enforcer that will tunnel IPsec traffic from several Junos Pulse users.Which two parameters must you configure on the SRX210?()

A. access profile

B. IKE parameters

C. tunneled interface

D. redirect policy


参考答案：A, B

第4题：

You need to configure a GRE tunnel on a IPSec router. When you are using the SDM to configurea GRE tunnel over IPsec， which two parameters are required when defining the tunnel interfaceinformation？（）

  • A、The crypto ACL number
  • B、The IPSEC mode （tunnel or transport）
  • C、The GRE tunnel interface IP address
  • D、The GRE tunnel source interface or IP address， and tunnel destination IP address
  • E、The MTU size of the GRE tunnel interface

正确答案:C,D

第5题：

When configuring a multipoint GRE （mGRE） tunnel interface， which one of the following is NOT a valid configuration option：（）

  • A、 tunnel source
  • B、 tunnel destination
  • C、 tunnel key
  • D、 ip address
  • E、 tunnelvrf

正确答案:B

第6题：

To securely transport EIGRP traffic, a network administrator will build VPNs between sites. What is the best method to accomplish the transport of EIGRP traffic?()

A. IPSec in tunnel mode

B. IPSec in transport mode

C. GRE with IPSec in transport mode

D. GRE with IPSec in tunnel mode


参考答案：C

第7题：

Router R1, a branch router, connects to the Internet using DSL. Some traffic flows through a GRE and IPsec tunnel, over the DSL connection, destined for an Enterprise network. Which of the following answers best describes the router's logic that tells the router, for a given packet, to apply GRE encapsulation to the packet?（）

  • A、When the packet received on the LAN interface is permitted by the ACL listed on the tunnel greacl command under the incoming interface
  • B、When routing the packet, matching a route whose outgoing interface is the GRE tunnel interface
  • C、When routing the packet, matching a route whose outgoing interface is the IPsec tunnel interface
  • D、When permitted by an ACL that was referenced in the associated crypto map

正确答案:B

第8题：

Router R1, a branch router, connects to the Internet using DSL. Some traffic flows through a GRE and IPsec tunnel, over the DSL connection, destined for an Enterprise network.Which of the following answers best describes the router‘s logic that tells the router, for a given packet, to apply GRE encapsulation to the packet?（）

A. When the packet received on the LAN interface is permitted by the ACL listed on the tunnel greacl command under the incoming interface

B. When routing the packet, matching a route whose outgoing interface is the GRE tunnel interface

C. When routing the packet, matching a route whose outgoing interface is the IPsec tunnel interface

D. When permitted by an ACL that was referenced in the associated crypto map


参考答案：B

第9题：

Which two mechanisms can be used to detect IPsec GRE tunnel failures？（）

  • A、Dead Peer Detection （DPD）
  • B、CDP
  • C、isakmp keepalives
  • D、GRE keepalive mechanism
  • E、The hello mechanism of the routing protocol across the IPsec tunnel

正确答案:A,E

第10题：

The LAN-side of the Teleworker router is assigned private IP address space (RFC1918), and the VPN topology is IPSec-only (no GRE protocol). When is it required to configure NAT/pNAT on the Teleworker router?（）

  • A、when all access to the Internet is through the IPSec tunnel
  • B、when there is direct Internet access via split-tunneling
  • C、when there is no Internet access configured through the Teleworker router
  • D、whenever you have IOS-Firewall (CBAC) configured

正确答案:B

更多相关问题
相关内容