An engineer is modifying an existing data policy for VPN 115 to meet these additional requirements: - When browsing government websites, the traffic must use direct internet access. - The source addre

Sign in or unlock 300-415 to reveal the answer and full explanation for question #354. The question stem and answer options stay visible for context.

Policies

Question

An engineer is modifying an existing data policy for VPN 115 to meet these additional requirements: - When browsing government websites, the traffic must use direct internet access. - The source address of the traffic leaving the site toward the government websites must be set to an IP range associated with the country itself, a particular TLOC. The policy configuration is as follows: vpn 0 interface ge0/0.100 ip address 198.51.100.2/30 nat ! tunnel-interface encapsulation ipsec color biz-internet mtu 1496 no shutdown ! interface ge0/1.10 ip address 10.254.254.2/30 ! tunnel-interface encapsulation ipsec color private1 mtu 1496 no shutdown ! ip route 0.0.0.0/0 198.51.100.1 ip route 0.0.0.0/0 10.254.254.1 ! data-policy DIA vpn-list VPN-115 sequence 10 match destination-data-prefix-list INTERNAL-NETWORKS ! action accept sequence 20 match destination-ip 0.0.0.0/0 ! action accept nat use-vpn 0 ! ! default-action accept

Exhibit

Options

Asequence 25 match destination-data-prefix-list GOVERNMENT-WEBSITES ! action accept nat use-vpn 0
Bsequence 30 match destination-data-prefix-list GOVERNMENT-WEBSITES ! action accept set local-tloc-list color biz-internet
Csequence 15 match destination-data-prefix-list GOVERNMENT-WEBSITES ! action accept set local-tloc-list color biz-internet
Dsequence 15 match source-data-prefix-list GOVERNMENT-WEBSITES ! action accept set local-tloc-list color private1

Unlock 300-415 to see the answer

You've previewed enough free 300-415 questions. Unlock 300-415 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Unlock 300-415 - $49.99 / 30 days Sign in

Topics

#SD-WAN Data Policy#TLOC#Direct Internet Access#Policy Sequencing

Full 300-415 Practice