What is the effect of the given command sequence?

Question

Options

• AIt defines IPSec policy for traffic sourced from 10.10.10.0/24 with a desstination of
• BIt defines IPSec policy for traffic sourced from 10.100.100.0/24 with a destination of 10.10.10.0/24
• Cit defines IKE policy for traffic sourced from 10.10.10.0/24 with a destination of 10.100.100.0/24
• DIt defines IKE policy for traffic sourced from 10.100.100.0/24 with a destination of 10.10.10.0/24

• A
  73% (19)
• B
  15% (4)
• C
  8% (2)
• D
  4% (1)

Explanation

Although the exact command output is not displayed, the correct answer indicates this is an IPSec (not IKE) policy definition. In Cisco IOS, a crypto access list (ACL) is used to define which traffic should be protected by IPSec - this is called the 'interesting traffic' selector. The ACL syntax 'permit ip 10.10.10.0 0.0.0.255 10.100.100.0 0.0.0.255' would match traffic from 10.10.10.0/24 to 10.100.100.0/24. This crypto ACL is then referenced by a crypto map, which is the IPSec policy - not an IKE policy. IKE (Internet Key Exchange) is configured separately using 'crypto isakmp policy' commands and deals with the negotiation of the security association, not traffic selectors.

No community discussion yet for this question.