nerdexam
Check_Point

156-215.80 · Question #255

How many packets does the IKE exchange use for Phase 1 Main Mode?

The correct answer is D. 6. IKE Phase 1 Main Mode uses exactly 6 messages organized as 3 bidirectional exchanges to establish a secure, authenticated IKE SA.

VPN Solutions

Question

How many packets does the IKE exchange use for Phase 1 Main Mode?

Options

  • A12
  • B1
  • C3
  • D6

How the community answered

(35 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    3% (1)
  • D
    89% (31)

Why each option

IKE Phase 1 Main Mode uses exactly 6 messages organized as 3 bidirectional exchanges to establish a secure, authenticated IKE SA.

A12

12 messages does not correspond to any standard IKE mode and is not defined by RFC 2409.

B1

1 message is not a valid exchange count for any IKE mode since a minimum request-response pair is required.

C3

3 messages describes IKE Phase 1 Aggressive Mode, which compresses the exchange at the cost of identity protection, not Main Mode.

D6Correct

IKE Phase 1 Main Mode exchanges 6 messages: messages 1 and 2 negotiate IKE SA parameters such as encryption algorithm, hash, DH group, and lifetime; messages 3 and 4 perform the Diffie-Hellman public value and nonce exchange to derive keying material; and messages 5 and 6 exchange identity and authentication data, which are encrypted using the keys derived in the prior exchange. This 6-message structure is what provides identity protection - a key advantage of Main Mode over Aggressive Mode.

Concept tested: IKE Phase 1 Main Mode packet exchange count

Source: https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/14106-how-ike-works.html

Topics

#IKE Main Mode#Phase 1#packet exchange#VPN negotiation

Community Discussion

No community discussion yet for this question.

Full 156-215.80 Practice