nerdexam
Juniper

JN0-633 · Question #176

Click the Exhibit button. user@host> show security ike security-associations Index State Initiator cookie Responder cookie ModeRemote Address 3271043 UP7f42284089404673 95fd8408940438d8 Main…

The correct answer is D. proxy-ID mismatch. See the full explanation below for the reasoning.

Question

Click the Exhibit button. user@host> show security ike security-associations Index State Initiator cookie Responder cookie ModeRemote Address 3271043 UP7f42284089404673 95fd8408940438d8 Main 172.31.50.2 user@host> show security ipsec security-associations Total active tunnels: 0 user@host> show log phase2 Feb 2 14:21:18 host kmd[1088]: IKE negotiation failed with error: TS unacceptable. IKE Version: 1, VPN: vpn-1 Gateway: gate-1, Local: 172.31.50.1/500, Remote:

172.31.50.2/500, Local IKE-ID: 172.31.50.1, Remote IKE-ID: 172.31.50.2, VR-ID: 0 Feb 2 14:21:18 host kmd[1088]: KMD_VPN_TS_MISMATCH: Traffic-selector mismatch, vpn name: vpn-1, Peer Proposed traffic-selector local-ip:

ipv4(2.2.2.2), Peer Proposed traffic-selector remote-ip: ipv4 (1.1.1.1) Feb 2 14:21:54 host kmd[1088]: IKE negotiation failed with error: No proposal chosen. IKE Version: 1, VPN: vpn-1 Gateway: gate-1, Local:

172.31.50.1/500, Remote: 172.31.50.2/500, Local IKE-ID: 172.31.50.1, Remote IKE-ID:

172.31.50.2, VR-ID: 0 Feb 2 14:22:19 host kmd[1088]: KMD_VPN_TS_MISMATCH: Traffic-selector mismatch, vpn name: vpn-1, Peer Proposed traffic-selector local-ip:

ipv4 (2.2. 2.2), Peer Proposed traffic-selector remote-ip: ipv4(1.1.1.1) You have recently configured an IPsec VPN between an SRX Series device and another non-Junos security device. The phase one tunnel is up but the phase two tunnel is not present. Referring to the exhibit, what is the cause of this problem?

Options

  • Apreshared key mismatch
  • Bmode mismatch
  • Cproposal mismatch
  • Dproxy-ID mismatch

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    10% (3)
  • D
    83% (25)

Community Discussion

No community discussion yet for this question.

Full JN0-633 Practice