A customer purchased the Huawei Cloud VPN service. After the configuration was completed, the VPN was always disconnected. Which of the following items will cause the configured VPN connection to…

Question

Options

• AThe two ends of the VPN connection are not in the same area
• BThe IPsec policies on both sides are inconsistent
• CThe pre-shared key and negotiation information on both sides are inconsistent
• DThe IKE policies on both sides are inconsistent

• A
  16% (9)
• B
  84% (46)

Explanation

Options B, C, and D are correct because a VPN tunnel requires both endpoints to agree on identical negotiation parameters at every layer of the connection process. IKE (Internet Key Exchange) policies govern Phase 1 negotiation -- covering encryption algorithm, hash method, DH group, and lifetime -- so a mismatch in D prevents the security association from ever being established. IPsec policies govern Phase 2 negotiation -- covering the actual data encryption and authentication transforms -- so a mismatch in B means the tunnel cannot protect traffic even if Phase 1 succeeds. The pre-shared key in C is the shared secret used to authenticate both peers during IKE; if either side uses a different key or incompatible negotiation parameters, authentication fails immediately and no tunnel is formed.

Option A is incorrect because VPNs are specifically designed to connect networks across different geographic locations or regions; being in separate areas is a normal use case, not a failure condition.

Memory tip: Think of a VPN handshake as two people agreeing to a secret meeting -- they must use the same meeting rules (IKE policy), the same code language (IPsec policy), and the same password to get in the door (pre-shared key). Where they are geographically is irrelevant to whether the meeting happens.

No community discussion yet for this question.