300-730 · Question #7
Which parameter is initially used to elect the primary key server from a group of key servers?
The correct answer is C. highest-priority value. In GETVPN, the key server with the highest configured priority value wins the primary key server election.
Question
Options
- Acode version
- Bhighest IP address
- Chighest-priority value
- Dlowest IP address
How the community answered
(32 responses)- A3% (1)
- B3% (1)
- C94% (30)
Why each option
In GETVPN, the key server with the highest configured priority value wins the primary key server election.
Code version is not a parameter used in the GETVPN key server election process.
Highest IP address is used only as a secondary tiebreaker when two key servers have equal priority values, not as the initial election criterion.
Cisco GETVPN uses a priority-based election mechanism to select the primary key server from a cooperative key server group. The key server with the numerically highest priority value is elected as primary and is responsible for generating and distributing the TEK and KEK to group members. If priorities are equal, the highest IP address acts as a tiebreaker.
Lowest IP address is not part of the GETVPN key server election algorithm.
Concept tested: GETVPN key server primary election criteria
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_getvpn/configuration/xe-16/sec-get-vpn-xe-16-book/sec-get-vpn.html
Topics
Community Discussion
No community discussion yet for this question.