nerdexam
Juniper

JN0-633 · Question #171

Click the Exhibit button. user@host> show log message Feb4 00:04:17 host rpd[4516]: EVENT <UpDowm> st0.0 index 76 <Up Broadcast Multicast> Feb4 00:04:17 host-kmd[1391]: KMD_PM_SA ESTABLISHED: Local…

The correct answer is B. The phase 2 security association for theto-spoke-1VPN is failing. See the full explanation below for the reasoning.

Question

Click the Exhibit button. user@host> show log message Feb4 00:04:17 host rpd[4516]: EVENT <UpDowm> st0.0 index 76 <Up Broadcast Multicast> Feb4 00:04:17 host-kmd[1391]: KMD_PM_SA ESTABLISHED: Local gateway:

192.168.10.1, Remote gateway: 192.168.10.3, Local ID:

ipv4_subnet(any:0, [0..7]=0.0.0.0/0), Remote ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Direction: inbound, SPI: 0x8d5816fd, AUX-SPI: 0, Mode: Tunnel, Type:

dynamic, Traffic-selector:

Feb4 00:04:17 host rpd[4516]: EVENT UpDown st0.0 index 76 10.10.10.1/24 – > (null) <Up Broadcast Multicast> Feb4 00:04:17 host kmd[1391]: KMD_PM_SA_ESTABLISHED: Local gateway:

192.168.10.1, Remote gateway: 192.168.10.3, Local ID:

ipv4_subnet(any:0, [0..7]=0.0.0.0/0), Remote ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Direction: outbound, SPI: 0x77f07d5c, AUX-SPI: 0, Mode: Tunnel, Type:

dynamic, Traffic-selector:

Feb4 00:04:17 host kmd[1391]: KMD_VPN_UP_ALARM_USER: VPNto-spoke-1 from 192.168.10.3 is up. Local-ip: 192.168.10.1, gateway name: spoke-1, vpn name:

to-spoke-1, tunnel-id: 131073, local tunnel-if: st0.0, remote tunnel- ip:

10.10.10.3, Local IKE-ID: 192.168.10.1, Remote IKE-ID: 192.168.10.3, XAUTH username: Not-Applicable, VR id: 0, Traffic-selector: , Traffic- selector local ID:ipv4_subnet,(any:0,[0..7]=0.0.0.0/0), Traffic-selector remote ID:

ipv4_subnet(any:11,[0..7]=0.0.0.0/0) Feb4 00:04:17 host mib2d[1385]: SNMP_TRAP_LINK_UP: ifIndex 539, ifAdminSiLatus up(1), ifOperStatus up(1), ifName st0.0 Feb4 00:04:17 host kmd[1391]: KMD_PM_SA_ESTABLTSHED: Local gateway:

192.168.10.1, Remote gateway: 192.168.10.5, Local ID: ipv4 subnet(any:0, [0..7]=0.0.0.0/0), Remote ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Direction: inbound, SPI: 0x2790a42c, AUX-SPI: 0, Mode: Tunnel, Type:

dynamic, Traffic-selector:

Feb4 00:04:17 host kmd[1391]: KMD_PM_SA_ESTABLISHED: Local gateway:

192.168.10.1, Remote gateway: 192.168.10.5, Local ID:

ipv4_subnet(any:0, [0..7]=0.0.0.0/0), Remote ID: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Direction: outbound, SPI: 0x2df17ea8, AUX-SPI: 0, Mode: Tunnel, Type:

dynamic, Traffic-selector:

Feb4 00:04:17 host kmd[1391]: KMD_VPN_UP_ALARM_USER: VPN to-spoke-3 from 192.168.10.5 is up. Local-ip: 192.168.10.1, gateway name: spoke-3, vpn name:

to-spoke-3, tunnel-id: 131076, local tunnel-if: st0.0, remote tunnel- ip:

Not-Available, Local IKE-ID: 192.168.10.1, Remote IKE-ID: 192.168.10.5, XAUTH username: Not-Applicable, VR id: 0, Traffic-selector: , Trafficselector local TD: ipv4_subnet(any:0,[0..7]=0.0.0.0/0), Traffic-selector remote ID: ipv4_subnet(any:0,[0._7]=0.0.0.0/0) Feb4 00:04:17 host kmd[1391]: IKE negotiation failed with error: No proposal chosen. IKE Version: 1, VPN: to-spoke-2 Gateway: spoke-2, Local:

192.168.10.1/500, Remote: 192.168.10.4/500, Local IKE-ID: Not- Available, Remote Not-Available, VR-ID: 0 Referring to the exhibit, which statement is correct?

Options

  • AThe phase 1 security association for theto-spoke-3VPN is failing.
  • BThe phase 2 security association for theto-spoke-1VPN is failing.
  • CThe phase 2 security association for theto-spoke-3VPN is failing.
  • DThe phase 1 security association for theto-spoke-2VPN is failing.

How the community answered

(30 responses)
  • A
    7% (2)
  • B
    80% (24)
  • C
    3% (1)
  • D
    10% (3)

Community Discussion

No community discussion yet for this question.

Full JN0-633 Practice