350-701 · Question #794
Refer to the exhibit. An engineer is implementing a site-to-site VPN on a Cisco router with a remote Cisco router. What must be configured next to ensure the tunnel status is up?
The correct answer is A. remote peer. In a site-to-site VPN configuration, the remote peer must be configured to establish the IPsec tunnel. The crypto isakmp key command already specifies the pre-shared key (cisco123) and the remote peer's IP address (172.16.1.1). However, the configuration is incomplete without…
Question
Refer to the exhibit. An engineer is implementing a site-to-site VPN on a Cisco router with a remote Cisco router. What must be configured next to ensure the tunnel status is up?
Exhibit
Options
- Aremote peer
- BIKE version
- Ctransform set
- DNAT translation
How the community answered
(28 responses)- A82% (23)
- B4% (1)
- C11% (3)
- D4% (1)
Explanation
In a site-to-site VPN configuration, the remote peer must be configured to establish the IPsec tunnel. The crypto isakmp key command already specifies the pre-shared key (cisco123) and the remote peer's IP address (172.16.1.1). However, the configuration is incomplete without specifying the remote peer explicitly in the crypto map. To complete the setup, use the command set peer 172.16.1.1 within the crypto map VPN_1 configuration to define the remote peer for the tunnel.
Topics
Community Discussion
No community discussion yet for this question.