350-701 · Question #161
Refer to the exhibit. A network administrator configured a site-to-site VPN tunnel between two Cisco IOS routers, and hosts are unable to communicate between two sites of VPN. The network administrato
The correct answer is C. authentication key mismatch. On the show crypto isakmp sa output, the state should always be QM_IDLE. If the state is MM_KEY_EXCH, it means either the configured pre-shared key is not correct or the peer IP addresses are different. ipsec-debug-00.html
Question
Refer to the exhibit. A network administrator configured a site-to-site VPN tunnel between two Cisco IOS routers, and hosts are unable to communicate between two sites of VPN. The network administrator runs the debug crypto isakmp sa command to track VPN status. What is the problem according to this command output?
Exhibit
Options
- Ahashing algorithm mismatch
- Binteresting traffic was not applied
- Cauthentication key mismatch
- Dencryption algorithm mismatch
How the community answered
(24 responses)- A25% (6)
- B4% (1)
- C63% (15)
- D8% (2)
Explanation
On the show crypto isakmp sa output, the state should always be QM_IDLE. If the state is MM_KEY_EXCH, it means either the configured pre-shared key is not correct or the peer IP addresses are different. ipsec-debug-00.html
Topics
Community Discussion
No community discussion yet for this question.