Juniper
JN0-632 · Question #10
Click the Exhibit button. In the exhibit, a site-to-site IPSec tunnel between the chassis cluster and the remote SRX240 device will not establish. The chassis cluster and the remote SRX240 device…
The correct answer is B. Loopback interface IPSec tunnel termination is not supported on high-end SRX Series chassis clusters. See the full explanation below for the reasoning.
Question
Click the Exhibit button. In the exhibit, a site-to-site IPSec tunnel between the chassis cluster and the remote SRX240 device will not establish. The chassis cluster and the remote SRX240 device are using their loopback interfaces tor IPSec tunnel termination. What is causing the problem? Juniper JN0-632 Exam
Options
- ASite-to-site IPSec VPNs are not supported on a chassis cluster; a GRE tunnel must be used instead.
- BLoopback interface IPSec tunnel termination is not supported on high-end SRX Series chassis clusters;
- CSite-to-site IPSec VPNs between high-end SRX Series chassis clusters and branch SRX devices are
- DLoopback interface IPSec tunnel termination within a chassis cluster must have PFS enabled Configure
How the community answered
(21 responses)- A5% (1)
- B76% (16)
- C14% (3)
- D5% (1)
Community Discussion
No community discussion yet for this question.