nerdexam
Cisco

300-730 · Question #132

Which remote access VPN technology requires the use of the IPsec-proposal configuration option?

The correct answer is C. IKEv2-based VPN. The 'ipsec-proposal' configuration construct is used exclusively with IKEv2 on Cisco ASA to define IPsec transform parameters for remote access VPN.

Remote Access VPN

Question

Which remote access VPN technology requires the use of the IPsec-proposal configuration option?

Options

  • Aclientless SSLVPN
  • BSSLVPN Full Tunnel
  • CIKEv2-based VPN
  • DIKEv1-based VPN

How the community answered

(34 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    88% (30)
  • D
    3% (1)

Why each option

The 'ipsec-proposal' configuration construct is used exclusively with IKEv2 on Cisco ASA to define IPsec transform parameters for remote access VPN.

Aclientless SSLVPN

Clientless SSL VPN operates over TLS at the application layer and does not establish an IPsec tunnel, so ipsec-proposal configuration is not applicable.

BSSLVPN Full Tunnel

SSL VPN Full Tunnel uses TLS to encapsulate all traffic without IPsec, and its configuration uses SSL policies rather than ipsec-proposal objects.

CIKEv2-based VPNCorrect

Cisco ASA IKEv2 configuration uses a dedicated 'crypto ikev2 ipsec-proposal' object to specify encryption and integrity algorithms for IPsec security associations. This object is then referenced in IKEv2 group policies or connection profiles, and is a required element of the IKEv2 VPN configuration hierarchy that does not exist in IKEv1 syntax.

DIKEv1-based VPN

IKEv1 VPN uses 'crypto ipsec transform-set' to define IPsec parameters, not the ipsec-proposal syntax, which was introduced as part of the IKEv2 configuration model.

Concept tested: IKEv2 ipsec-proposal configuration on Cisco ASA

Source: https://www.cisco.com/c/en/us/td/docs/security/asa/asa94/configuration/vpn/asa-94-vpn-config/vpn-ikev2.html

Topics

#IKEv2#IPsec-proposal#remote access VPN#ASA

Community Discussion

No community discussion yet for this question.

Full 300-730 Practice