Where must an engineer configure a preshared key for a site-to-site VPN tunnel configured on a Cisco ASA?

The correct answer is D. tunnel group. On a Cisco ASA, the preshared key (PSK) for a site-to-site IPsec VPN is configured within the tunnel-group object using the command 'pre-shared-key' under 'tunnel-group <peer-ip> ipsec-attributes'. The tunnel group ties authentication credentials to a specific VPN peer. The…

Site-to-site VPNs on Routers and Firewalls

Question

Where must an engineer configure a preshared key for a site-to-site VPN tunnel configured on a Cisco ASA?

Options

Aisakmp policy
Bgroup policy
Ccrypto map
Dtunnel group

How the community answered

(19 responses)

A
5% (1)
B
5% (1)
D
89% (17)

Explanation

On a Cisco ASA, the preshared key (PSK) for a site-to-site IPsec VPN is configured within the tunnel-group object using the command 'pre-shared-key' under 'tunnel-group <peer-ip> ipsec-attributes'. The tunnel group ties authentication credentials to a specific VPN peer. The other options serve different roles: the isakmp policy (or IKE policy) defines Phase 1 parameters like encryption and hashing algorithms; the crypto map specifies the peer IP, ACL for interesting traffic, and transform set; and the group policy defines user-level access attributes like DNS, split tunneling, and timeouts - none of which store the PSK.

Topics

#preshared key#ASA site-to-site VPN#tunnel group#IKEv1

Community Discussion

No community discussion yet for this question.

Full 300-730 Practice