Check_Point
156-115.77 · Question #212
When troubleshooting a VPN site-to-site to a peer, it may be necessary to "down" the tunnel. What is the best method to remove ONLY the tunnel to this peer?
The correct answer is D. Delete the IKE and IPsec Security Associations using the command vpn tu. See the full explanation below for the reasoning.
Question
When troubleshooting a VPN site-to-site to a peer, it may be necessary to "down" the tunnel. What is the best method to remove ONLY the tunnel to this peer?
Options
- AChange the vpn tunnel sharing parameters to force the tunnel down.
- BReboot your gateway.
- CRemove the peer from the community and install policy.
- DDelete the IKE and IPsec Security Associations using the command vpn tu.
How the community answered
(44 responses)- A5% (2)
- B5% (2)
- C11% (5)
- D80% (35)
Community Discussion
No community discussion yet for this question.