300-730 · Question #85
Refer to the exhibit. Which type of VPN is being configured, based on the partial configuration snippet? crypto gdoi group GDOI-GROUP1 server local address ipv4 10.0.0.1 redundancy local priority 250
The correct answer is A. GET VPN with COOP key server. The crypto gdoi group command identifies this as GET VPN, and the redundancy block with local priority and a peer address identifies the COOP (Cooperative) key server feature for key server high availability.
Question
Options
- AGET VPN with COOP key server
- BGET VPN with dual group member
- CFlexVPN load balancer
- DFlexVPN backup gateway
How the community answered
(23 responses)- A91% (21)
- B4% (1)
- C4% (1)
Why each option
The crypto gdoi group command identifies this as GET VPN, and the redundancy block with local priority and a peer address identifies the COOP (Cooperative) key server feature for key server high availability.
The crypto gdoi group command combined with server local confirms this device is configured as a GET VPN key server rather than a group member. The redundancy block containing local priority 250 and peer address ipv4 10.0.6.1 is the specific IOS syntax for configuring a COOP key server, which enables two key servers to synchronize group policy and registration state for redundancy. This combination of GDOI server mode and the COOP redundancy parameters definitively identifies a GET VPN deployment with a Cooperative key server.
A GET VPN group member would be configured with the crypto gdoi group command in member mode pointing to a key server address, not with server local or a redundancy peer block.
FlexVPN uses the crypto ikev2 profile and interface Virtual-Template framework, not the crypto gdoi command set, so this configuration cannot represent a FlexVPN load balancer.
A FlexVPN backup gateway is implemented using IKEv2 profiles with tunnel protection and backup peer statements, which is entirely different from the GDOI-based syntax shown in this snippet.
Concept tested: GET VPN COOP key server redundancy configuration
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_getvpn/configuration/xe-3s/sec-get-vpn-xe-3s-book/sec-get-vpn.html
Topics
Community Discussion
No community discussion yet for this question.