200-301 · Question #460
When a site-to-site VPN is configured which IPsec mode provides encapsulation and encryption of the entire original IP packet?
The correct answer is C. IPsec tunnel mode with ESP. In Tunnel mode, the entire original IP packet, including its IP header and payload, is encapsulated within a new IP packet. The new IP packet has a different IP header that contains the VPN tunnel endpoints' IP addresses and additional IPsec-related information. In the case of AH
Question
When a site-to-site VPN is configured which IPsec mode provides encapsulation and encryption of the entire original IP packet?
Options
- AIPsec tunnel mode with AH
- BIPsec transport mode with AH
- CIPsec tunnel mode with ESP
- DIPsec transport mode with ESP
How the community answered
(26 responses)- A4% (1)
- B4% (1)
- C92% (24)
Explanation
In Tunnel mode, the entire original IP packet, including its IP header and payload, is encapsulated within a new IP packet. The new IP packet has a different IP header that contains the VPN tunnel endpoints' IP addresses and additional IPsec-related information. In the case of AH tunnel mode, an AH header and a new IP header are added. For ESP tunnel mode, an ESP header, a new IP header, an ESP trailer, and an ESP authentication trailer are added.
Topics
Community Discussion
No community discussion yet for this question.